Windows Agent Installation

You can install the Agent on Windows endpoints via GPO, CWP (Captive Web Portal), or manually using email, USB, etc.

Download and Install via Agent Download Page

  1. Agent Download
    • https://(IP or Domain)/agent
  2. Agent Selection : Do not change the file name to avoid file name conflicts.
    • Windows Installer Version : GnUpdate_(IP or FQDN) .exe
  3. Agent Installation Token
    • If the Block Agent Not Using Token option in Preferences > Agent is activated, the user must enter an installation token when installing the agent.

Note

If the user does not have file installation permissions, the installer cannot be executed, so it must be run with administrator privileges that include file installation permissions.

Agent Installation via CWP

If the agent is not installed, network access may be blocked by the enforcement policy and redirected to the CWP (Captive Web Portal) for agent installation. Click the Agent Installation button on the CWP screen to download and install the agent.

To apply the "Agent Installation" policy option,

  1. Go to Policy in the top panel.
  2. Go to Node Policy.
  3. Click "Node Policy ID" to specify where to apply the policy.
  4. Find the Agent Policy item.
  5. In the Agent checkbox, select on.
  6. Select Enforcement Policy in the left menu to enable the Block Agent Not Installed policy.

Note

Nodes assigned a node policy will be redirected to the CWP page by the enforcement policy (Block Agent Not Installed policy) if the agent is not installed, and an "Agent Installation button" will be displayed on the CWP page.

Agent MSI Package Installation via Active Directory GPO

MSI Installation Package Download

  1. Access Management WebUI and go to System menu at the top. Go to Update Management > Software menu on the left.
  2. If the agent is currently uploaded to the Policy Server, click the MSI button to the right of Genian NAC Agent for Windows item to download the MSI installation package.

Note

Genian NAC 5.0.38 or higher versions can proceed directly with the Agent Deployment using Active Directory GPO Policy process. Genian NAC 5.0.37 or lower versions should proceed with MSI file modification in the MSI file configuration document below, then proceed with deployment.

Agent Deployment using Active Directory GPO Policy

Note

If the logged-in account's privilege is a user privilege, the agent may not function properly, and the agent's execution account must be changed to a Local System Account.

Modify the node policy agent's execution account according to the sequence below:

  1. Go to Policy in the top panel.

  2. Go to Node Policy.

  3. Click "Node Policy ID" to specify where to apply the policy.

  4. Find the Agent Policy item.

  5. Select Local System Account for execution account.

  6. Click Modify and Apply Change Policy.

  7. Deploy MSI Package via Active Directory GPO

Windows Agent Installation Confirmation

  1. Select Management > Node.
  2. In the Node List window, click the NT AG SS column. (If an agent is installed on the node, an agent icon will be displayed.)

Genian Agent Options for Windows Endpoint

  1. Go to the TrayIcon location at the bottom right of the Windows endpoint screen.
  2. Find and right-click the Genians Agent icon.
  3. You can perform the following using the listed options:
    • View Announcements: Shows current announcements from the administrator.
    • View Notification Messages: Displays the administrator's current messages.
    • Check My Status: Shows the current endpoint's security policy compliance status via a web page.
    • User Authentication (L): Allows the user to log in, and upon successful login, the CWP page is displayed.
    • User Authentication Release (O): Allows the user to log out.
    • User Authentication Information: Allows the user to view account information upon successful login.
    • Network Connection Information: Allows the user to view activated network connected endpoints.
    • USB Device Information: Allows the user to view information about USB endpoints.
    • Remote Agent Deletion: (Users cannot delete the installed agent; this operation must be performed by the administrator)
    • Program Information: Allows viewing version information for the installed Agent.

Windows Endpoint Agent Log Location

  1. Open File Explorer on the Windows endpoint.
  2. Go to C: / Program Files / Geni / Genian / Logs.

#. Sort by Date Modified. .. note:

Installer logs related to agent installation exist in the Windows directory as ``Installer"YYYYMMDD".log``.

Windows Supported List

Refer to: Operating System Plugin Support List