For On-Premise deployments, check out the instructions in this article: How install the Windows Agent remotely (On-Premise).
Requirements
Before you begin the remote install, make sure that your Antivirus/EDR exceptions are properly configured (if not, you will get a pipe not ready error).
There are several ways you can deploy the agent:
1. Using the Group Policy Object (GPO)
Group policy object (GPO) based installation requires Active Directory. You will also need the agent MSI installation package.
Getting the MSI Package
1. From the main menu on the left, select System > Download Agent.
2. Select the Stealth Agent tab.
3. Click the Windows Installer x64 button to download the MSI installer.
Deploying the Agent with GPO
Many online articles describe how to create a GPO in case you need help.
1. For more information about any additional parameters you can use, check out the Agent Installation/Configuration Parameters (Windows) section on the User Guide.
2. After that, please create a Group Policy Object and select ‘Advanced‘ option and specify the .msi file.
2. Using the Microsoft System Center Configuration Manager (SCCM/SCOM) Tool
Microsoft System Center Configuration Manager (SCCM) or System Center Operations Manager (SCOM) can be used to deploy Teramind the same way as you deploy through GPO.
For more information about SCCM/SCOM, please consult the Microsoft documentation (!external link).
3. Using the Microsoft Intune Endpoint Management Service
You can use Microsoft Intune to deploy the MSI package.
When configuring the Intune App Information for the hidden/stealth agent MSI, please use the command-line argument below:
TMINSTANCE=<customer>
Here <customer> is taken from your Teramind URL. For example acme.teramind.co would use:
TMINSTANCE=acme
Here's a blog article (!external link) that explains how to use Intune.
4. Using the PsExec Tool
Before you start the deployment, make sure ports 139 and 445 are open and listening on the target user's machine (not the server), allowed by you firewall (you can check it with telnet from the system you're deploying from).
Sysinternals PsExec is a third-party tool that allows you to execute commands remotely. You can download it from the Microsoft site (!external link). You can use it as follows:
psexec \\<target_machine> -u <admin_username> -p <admin_password> -s msiexec /i <MSI url> TMINSTANCE=<instance> /qn
Replace the text inside the <> brackets with your own information. For example:
psexec \\marklaptop -u marklaptop\mark -p MyP@ssword -s msiexec /i "https://getteramind.com/cloud-mycompany/1731416209/hidden/win/24.41.2131/0ca1ee5b4060313fc6969fe86b300bdb75ad56a2/teramind_agent_x64_s-i(__261e84a5119d483d322c3a398d159d493fc6b803).msi" TMINSTANCE=mycompany /qn
Notes:
1. Note that the installation file you specify in the <MSI url> has to be accessible from the remote computer the Agent is being installed on. You can get the <MSI url> from the System > Download Agent screen, by clicking the Copy download URL link under the Windows Installer x64 button:
2. The <instance> can be the instance name or instance ID. For example, “mycompany”, or “__b89a5c47a3cdd45682c21d3f764218c2aed88bd5”. If the Agent file name already contains the instance name/ID within a -i() parameter, and you didn't include the /qn parameter (silent install), then you don't have to specify the TMINSTANCE parameter.
For example:
psexec \\marklaptop -u marklaptop\mark -p MyP@ssword -s msiexec /i "https://getteramind.com/cloud-mycompany/1731416209/hidden/win/24.41.2131/0ca1ee5b4060313fc6969fe86b300bdb75ad56a2/teramind_agent_x64_s-i(__261e84a5119d483d322c3a398d159d493fc6b803).msi"
For more information about the installation parameters, check out the Agent Installation/Configuration Parameters (Windows) section on the User Guide.
Enrolling: Adding Users to the Dashboard (Revealed Agent only)
After you have installed the Revealed Agent on a user's computer, the user will be able to log into the Revealed Agent using their employee account in the Teramind dashboard. If an employee account has not yet been created, you will need to add them to the Teramind Dashboard so that they can be tracked properly. Check out the Creating a New Employee section to learn how to add a new user to the Dashboard.
The Stealth Agent does not require this step.