For Cloud deployments, check out the instructions in this article: How install the Windows Agent remotely (Cloud).
Requirements
Before you begin the remote install, make sure that Antivirus exceptions are properly configured (if not, you will get a pipe not ready error).
There are several ways you can deploy the agent:
1. Using the Built-in Remote Installation Dashboard (Legacy)
This method of deployment is currently supported in Teramind Legacy interface only.
Before you start the deployment, make sure that WinRM* is enabled on the target computers and TCP port 5985 is open.
To learn more about what ports need to be enabled for Teramind, check out this Knowledge Base article.
*It’s beyond this article to describe how to use WinRM. However, Microsoft Learn has this article that can help you configure it.
Teramind has a built-in remote installation dashboard you can use. To use this dashboard, do the following:
1. Select COMPUTERS from the main menu.
2. Click the REMOTE INSTALL AGENTS button near the top-right corner of the screen. You will be taken to the Remote Agent Installation screen where you can deploy the Agent remotely:
3. Under the Select Target Computers section, you can select the computers where you want the Agent to be installed. If you have integrated Active Directory/LDAP with Teramind, you will be able to select/exclude computers by name, groups, etc. If you do not have Active Directory integration configured, then you can select the computers by IP range. You can also upload a .TXT or .CSV file containing IP addresses (1 per line).
Check out the Configurations > Settings > Active Directory section to learn how to integrate Active Directory with Teramind.
4. Under Agent type, select HIDDEN or REVEALED agent.
5. For the MSI Location, if your endpoints are able to access the internet, and you have a fully trusted SSL certificate you can leave the URLs of the Agent locations to their default values. This will fetch the Agent from your local Teramind deployment. Alternatively, you can enter local URLs or network paths where the necessary Agent files (32 bit/64 bit/MSI) are located. If you are using a web location, or you do not have an SSL certificate, or you encounter any issues, using HTTPS, use HTTP.
If you have recently updated your On-Premises server, make sure to update the MSI Location links. Otherwise, it will install the old version of the Agent. You can get the latest MSI links from the System > Download Agent screen.
6. Under the Credentials section, ensure that the domain administrator credentials, and IP address of the Teramind Server are correct.
Note that, domain administrator privileges are mandatory for the silent install.
7. Under the Teramind server, enter host name or IP address of your Teramind server.
8. Click the DEPLOY button to begin the installation.
Checking the Status of Deployments / Canceling Deployments
1. From the main Computers screen, Click the DEPLOYMENTS button to see the progress of all ongoing remote deployments:
The Deployments screen show the date/time of deployment, time finished, employee, number of computers, successful and unsuccessful deployments and currently pending deployments.
2. You can click the CANCEL ALL UNFINISHED DEPLOYMENTS button to cancel all the pending deployments.
3. You can click the Refresh icon to refresh the list.
2. Using the Group Policy Object (GPO)
Group policy object (GPO) based installation requires Active Directory. You will also need the agent MSI installation package.
Getting the MSI Package
You can get the latest MSI links from the System > Download Agent screen. Note that you can only download the Standard Agent and the Stealth Agent as a MSI package.
Deploying the Agent with GPO
There are many online articles that describe how to create GPO in case you need help.
1. You will have to pass TMROUTER parameter (and provide your Teramind server address/IP) to the msi file and therefore you need to create an mst file. For more information about this parameter and other parameters you can use, check out the Agent Installation/Configuration Parameters (Windows) section in the User Guide. You can create the mst file with a third party tool like Orca.
2. After that, please create a Group Policy Object and select ‘Advanced‘ option and specify the msi and mst files.
3. Using the Microsoft System Center Configuration Manager (SCCM/SCOM) Tool
Microsoft System Center Configuration Manager (SCCM) or System Center Operations Manager (SCOM) can be used to deploy Teramind the same way as you deploy through GPO. You need to configure your SCCM deployment package with a TMROUTER option pointing to your Teramind server. For more information about this parameter and other parameters you can use, check out the Agent Installation/Configuration Parameters (Windows) section in the User Guide.
For more information about SCCM/SCOM, please consult the Microsoft documentation.
4. Using the Microsoft Intune Endpoint Management Service
You can use Microsoft Intune to deploy the MSI package.
When configuring the Intune App Information for the Stealth Agent MSI, please use the command-line argument below:
TMROUTER = <IP:port> | <full_domain_name>
Example 1:
If you haven't set up any hostname for your server, you can use it's IP address and port. For example:
TMROUTER=10.23.33.44:204
Note that, port is optional and not needed if you are using the standard 443 port.
Example 2:
If you have set up a hostname for your server, use your full domain name (including any sub-domain). For example:
TMROUTER=acme.domain.com
Here's a blog article that explains how to use Intune.
5. Using the PSEXEC Tool
Before you start the deployment, make sure TCP ports 139 and 445 are open and listening on the target user's machine (not the server), allowed by firewall. To learn how to check for the open port, check out this article: How to check if Teramind IP addresses/hosts and ports are reachable.
Sysinternals psexec is a third party tool which allows to execute commands remotely. You can download it from the Microsoft site. You can use it as follows:
psexec \\<the_target_machine> -u <admin_username> -p <admin_password> -s msiexec /i <teramind.agent.latest.x64.msi> TMINSTANCE=<instance name> TMROUTER=<your Teramind server's IP/host> /qn
Replace the text inside the <> brackets with your own information. For example:
psexec \\marklaptop -u marklaptop\mark -p MyP@ssword -s msiexec /i "c:\download\teramind_agent_v23.47.1301_x64.msi" TMINSTANCE=mycompany TMROUTER=onsite.teramind.io /qn
If the agent file name already contains the instance name (within a -i() parameter), then you don't have to specify the TMINSTANCE parameter.
For example:
psexec \\marklaptop -u marklaptop\mark -p MyP@ssword -s msiexec /i "C:\Temp\Install Test\teramind_agent_x64_s-i(teramind).msi" TMINSTANCE=mycompany TMROUTER=onsite.teramind.io /qn
For more information about the installation parameters, check out the Agent Installation/Configuration Parameters (Windows) section in the User Guide.
6. Enrolling: Adding Users to the Dashboard
If you have installed the Revealed Agent on a user's computer, you will need to add them to the Teramind Dashboard so that they can be tracked. The How to add employees / computers to the Teramind Dashboard article shows you how you can do it.
The Stealth Agent does not require this step.