Deploy the Agent via Active Directory Group Policy

Deploy the ActivTrak Agent across your Windows domain automatically via Group Policy, ideal for organizations with Active Directory.

Contents

• Before you begin
• Best practices
• Deploy the Agent
• Manage deployed Agents
• Troubleshooting
• Next steps

Before you begin

• Windows Server with Active Directory
• Domain administrator access
• All target computers are joined to the domain
• Network share accessible by domain computers

Best practices

• Test GPO on a small pilot group first
• Deploy during maintenance windows or off-hours
• Document your distribution point location and GPO settings
• Keep the original MSI filename intact
• Monitor deployment progress via Agent Health Status
• Use WMI filters to target specific OS versions or hardware

Deploy the Agent

Create a distribution point

Set up a network location to host the agent installer:

• Create a shared folder on your server to store the MSI package
• Set folder permissions to allow read access for domain computers
• Copy the ActivTrak MSI to this shared folder
• Note the UNC path (e.g., \\server\share\ATAcctxxxxxx_token.msi)

Important: Don't rename the MSI file, as this prevents proper installation.

Create a Group Policy Object

Configure a new GPO for agent deployment:

• Open Active Directory Users and Computers (Start > Programs > Administrative Tools)
• Right-click your domain  Properties → Group Policy tab
• Click New and name it (e.g., "ActivTrak Agent Deployment")
• Click Properties → Security tab
• Check Apply Group Policy only for target groups
• Click OK to save

Assign the MSI package

Configure the GPO to deploy the Agent at startup:

• Select your GPO and click Edit
• Navigate to Computer Configuration > Software Settings
• Right-click Software Installation > New > Package
• Enter the full UNC path to your MSI (e.g., \\server\share\ATAcctxxxxxx_token.msi)
• Select the Assigned deployment method
• Click OK to add the package

The Agent installs silently when the computer restarts, before users log in.

Deploy to computers

Target computers receive the Agent automatically:

• Link the GPO to the appropriate Organizational Units (OUs)
• Force policy update with gpupdate /force or wait for automatic refresh
• Restart computers to trigger installation
• Verify deployment in Settings > Users & Groups > Computer Agents

Manage deployed Agents

Update existing installations

When updating to a newer Agent version:

• Replace the MSI in your distribution point
• In the Group Policy Editor, right-click the package
• Select All Tasks > Redeploy application
• Click Yes to update all installations
• Computers will update on the next restart

Remove deployed Agents

To uninstall agents via Group Policy:

1. In the Group Policy Editor, right-click the package
2. Select All Tasks > Remove
3. Choose the Immediately uninstall the software from users and computers option
4. Click OK to proceed
5. Agents will uninstall on the next policy refresh

Troubleshooting

Agent not appearing

• Review the Agent Health Status for any issues
• Run gpresult /r on target computers to confirm policy application
• Check Event Viewer for installation errors (Application log)

Agent not installing

• Verify the UNC path is accessible from the target computers
• Ensure the MSI filename wasn't changed
• Check that the GPO is linked to the correct OUs
• Confirm that computers are in the targeted security groups

Partial deployment

• Force policy refresh: gpupdate /force
• Restart computers to trigger installation
• Check network connectivity to the distribution point
• Verify domain membership of target computers

Next Steps

• Configure browser extensions via Group Policy
• Set up Agent Health monitoring for deployed computers
• Create tracking schedules for different departments
• Review allowlist requirements for antivirus and firewall