For Cloud deployments, check out the instructions in this article: How install the Windows Agent remotely (Cloud).
Requirements
Before you begin the remote install, make sure that Antivirus exceptions are properly configured (if not, you will get a pipe not ready error).
There are several ways you can deploy the agent:
1. Using the Built-in Remote Installation Dashboard (Legacy)
Before you start the deployment, make sure that WinRM* is enabled on the target computers and TCP port 5985 is open.
To learn more about what ports need to be enabled for Teramind, check out this Knowledge Base article.
*It’s beyond this article to describe how to use WinRM. However, Microsoft Learn has this article that can help you configure it.
Teramind has a built-in remote installation dashboard you can use. To use this dashboard, do the following:
1. Select Computers from the main menu.
2. Click the Remote install agents button. This will open the Remote install agents panel:
3. Under the Select target computers section, chose how to identify the computers for Agent installation:
Name: Select from a pre-populated list of available computers under your Active Directory domain (requires Active Directory integration).
IP Range: This option lets you enter the desired IP range manually. Alternatively, you can upload a
.txtor.csvfile containing one IP address per line. Use this if Active Directory isn't integrated or if some of your computes aren't domain-joined.
Check out the Configurations > Settings > Active Directory section to learn how to integrate Active Directory with Teramind.
4. Under Agent type, select Stealth or Revealed Agent.
5. Under the MSI Location section, you can specify the agent installer locations (e.g., 32-bit MSI Location, 64-bit MSI). If your endpoints have internet access and a fully trusted SSL certificate is in place, you can leave the Agent location URLs at their default values - the Agent will be fetched directly from the server.
Consider changing the default HTTPS addresses to HTTP if any of the following apply:
You do not have a fully trusted SSL certificate
You are experiencing issues connecting over HTTPS
If your endpoints don't have access to the internet, you can use local URLs or UNC network paths (e.g., \\fileserver\agents\) pointing to where the Agent .msi files are stored on your network.
If you have recently updated your On-Premises server, make sure to update the MSI Location links. Otherwise, it will install the old version of the Agent. You can get the latest MSI links from the System > Download Agent screen.
For the MSI Arguments field, you can optionally pass standard Windows Installer switches and Teramind-specific Agent installation parameters to customize the installation. These are appended to the underlying msiexec command that runs on each target computer. For example:
/quiet /norestart: Silent install with no reboot./quiet TMDISABLESCREEN=1: Silent install with screen recording disabled.TMROUTER=10.55.55.58:235: Assign a load-balancer IP and port./log C:\Logs\teramind_install.log: Record the installation log in a file.
MSI switches (prefixed with /) and Teramind Agent instllation parameters can be combined freely in any order. If no customization is needed, this field can be left blank - Teramind handles the core installation parameters automatically.
6. Under the Credentials section, verify that the following are correct before proceeding:
Domain: The Active Directory domain name of the target computers.
Username and Password: A domain administrator account with permission to install software remotely.
Note that, domain administrator privileges are mandatory for the silent install.
7. Under the Teramind server section, enter the Server host or IP address of your Teramind server.
8. Click the Deploy button to begin the deployment.
Checking the Status of Deployments / Canceling Deployments
1. Select Computers from the main menu.
2. Click the Deployments button. You will be taken to the Deployments screen:
The Deployments screen provides a real-time and historical log of all deployment activity. For each entry, you can view the start and completion times, initiating employee, total target computers, and a breakdown of successful, failed, and pending statuses.
2. You can click the Cancel all unfinished deployments button to cancel all the pending deployments.
3. You can click the Refresh icon to refresh the list.
2. Using the Group Policy Object (GPO)
Group policy object (GPO) based installation requires Active Directory. You will also need the agent MSI installation package.
Getting the MSI Package
You can get the latest MSI links from the System > Download Agent screen. Note that you can only download the Standard Agent and the Stealth Agent as a MSI package.
Deploying the Agent with GPO
There are many online articles that describe how to create GPO in case you need help.
1. You will have to pass TMROUTER parameter (and provide your Teramind server address/IP) to the msi file and therefore you need to create an mst file. For more information about this parameter and other parameters you can use, check out the Agent Installation/Configuration Parameters (Windows) section in the User Guide. You can create the mst file with a third party tool like Orca.
2. After that, please create a Group Policy Object and select ‘Advanced‘ option and specify the msi and mst files.
3. Using the Microsoft System Center Configuration Manager (SCCM/SCOM) Tool
Microsoft System Center Configuration Manager (SCCM) or System Center Operations Manager (SCOM) can be used to deploy Teramind the same way as you deploy through GPO. You need to configure your SCCM deployment package with a TMROUTER option pointing to your Teramind server. For more information about this parameter and other parameters you can use, check out the Agent Installation/Configuration Parameters (Windows) section in the User Guide.
For more information about SCCM/SCOM, please consult the Microsoft documentation.
4. Using the Microsoft Intune Endpoint Management Service
You can use Microsoft Intune to deploy the MSI package.
When configuring the Intune App Information for the Stealth Agent MSI, please use the command-line argument below:
TMROUTER = <IP:port> | <full_domain_name>
Example 1:
If you haven't set up any hostname for your server, you can use it's IP address and port. For example:
TMROUTER=10.23.33.44:204
Note that, port is optional and not needed if you are using the standard 443 port.
Example 2:
If you have set up a hostname for your server, use your full domain name (including any sub-domain). For example:
TMROUTER=acme.domain.com
Here's a blog article that explains how to use Intune.
5. Using the PSEXEC Tool
Before you start the deployment, make sure TCP ports 139 and 445 are open and listening on the target user's machine (not the server), allowed by firewall. To learn how to check for the open port, check out this article: How to check if Teramind IP addresses/hosts and ports are reachable.
Sysinternals psexec is a third party tool which allows to execute commands remotely. You can download it from the Microsoft site. You can use it as follows:
psexec \\<the_target_machine> -u <admin_username> -p <admin_password> -s msiexec /i <teramind.agent.latest.x64.msi> TMINSTANCE=<instance name> TMROUTER=<your Teramind server's IP/host> /qn
Replace the text inside the <> brackets with your own information. For example:
psexec \\marklaptop -u marklaptop\mark -p MyP@ssword -s msiexec /i "c:\download\teramind_agent_v23.47.1301_x64.msi" TMINSTANCE=mycompany TMROUTER=onsite.teramind.io /qn
If the agent file name already contains the instance name (within a -i() parameter), then you don't have to specify the TMINSTANCE parameter.
For example:
psexec \\marklaptop -u marklaptop\mark -p MyP@ssword -s msiexec /i "C:\Temp\Install Test\teramind_agent_x64_s-i(teramind).msi" TMINSTANCE=mycompany TMROUTER=onsite.teramind.io /qn
For more information about the installation parameters, check out the Agent Installation/Configuration Parameters (Windows) section in the User Guide.
6. Enrolling: Adding Users to the Dashboard
If you have installed the Revealed Agent on a user's computer, you will need to add them to the Teramind Dashboard so that they can be tracked. The How to add employees / computers to the Teramind Dashboard article shows you how you can do it.
The Stealth Agent does not require this step.