Use Group Policy Objects (GPO) to automatically remove the old software when shutting down the endpoints and install the new version when rebooting.
For the safe, complete uninstallation of the previous AV clients, please use our Remover Tool, which you can download from the following link: https://cloudstore.ikarus.at/s/EyFWTWGTo2JLMo7
1. Prepare AD and group policies
1.1. Network sharing
A network directory is required for the distribution of the product. To do this, create a new share or a folder in an existing share (e.g. that of the ISM):
> Server-Manager
> File/Save Services
> Releases
> Right click “New share“
Run through the assistant here.
It is essential to observe the permissions here so that the files can later be reached via the network path – “everyone” needs read permissions.
1.2. New organisation unit
Organisation units are groups with assigned GPOs (group policies) in which the devices are categorised at the Active Directory (AD).
A new organisation unit only needs to be created if you do not want to use an existing one:
> Server-Manager
> Tools
> Opening the Group Policy Management
> Right click on the domain: create new organisation unit
> Right-click on the organisation unit: create a new group policy object and link it
1.3. Computer management
This step is optional and is only needed if you have not yet customised your AD. It explains how to move a computer to a newly created organisational unit.
> Server-Manager
> Tools
> Active Directory
> User and Computer
> In “Computers”, mark the devices (CTRL + left click) on which the AVITC client is to be installed
> Move
The installation can only be carried out computer-dependent and not user-dependent, as this is the only way to obtain the required authorisations.
2. Scripts
2.1. Setting up the group policy
Set up the location where the scripts for the created group policy will later be stored:
> Open Server-Manager
> Tools
> Group policy management
> Group policy objects: Right-click on the created group policy object > Edit
> Computer Configuration > Policies > Windows Settings > Scripts (Startup/Shutdown) > Right-click Shutdown > Properties
> Add > Browse > Select Script
2.2. Creating the uninstall script
Create a remove.bat file with the following content
@echo off
reg query HKLMSOFTWAREIkarusguardxcloud /v TID >nul
if %errorlevel% equ 0 (
exit
) else (
C:PfadzumAvRemover_w64.exe -s
)
The path to the Remover must be adjusted to the share that was selected for 1.1 Network Share.
Uninstallation takes place as soon as the group policy is distributed at the next shutdown.
2.3. Setting up the group policy
> Open Server-Manager
> Tools
> Group policy management
> Group policy objects: Right-click on the created group policy object > Edit
> Computer Configuration > Policies > Windows Settings > Scripts (Startup/Shutdown) > Right-click Shutdown > Properties
> Add > Browse > Select Script
2.4. Creation of the installation script
Create an install.bat file with the following content:
@echo off
start /wait sc start msiserver
tasklist /nh /fi "imagename eq guardxservice_x64.exe" | find /i "guardxservice_x64.exe" >nul && (
exit
) || (
start /wait msiexec /i "[PfadzurDatei]SetupAV.msi" SETUPCONF="[PfadzurDatei]setup.conf" /q
)
exit
This script is an example script that must be individually adapt at the points, „Pfad zur Datei“ and „Dateiname“!
After the policy distribution, the old client software is automatically removed when the units are shut down, and the new version is installed at the next restart.