Installer l'agent WinAppack par GPO

This tutorial explains how to deploy the WinAppack Agent (MSI package) to all workstations of your organization using a Group Policy Object (GPO). With Active Directory, you can distribute the Agent automatically across your fleet without any logon script.

I. Overview

Deploying software through a GPO is the native way to install an application on every computer of an Active Directory domain. The Group Policy mechanism only supports the MSI format, which is exactly the format the WinAppack Agent is distributed in.

The deployment relies on three steps:

• Place the WinAppack Agent MSI on a network share readable by every computer.
• Create a GPO that assigns the MSI to the targeted machines.
• Link the GPO to the Organizational Unit (OU) that contains the workstations.

If you have not downloaded the Agent yet, get the MSI package here: Download the WinAppack Agent.

II. Create a share to store the MSI file

The MSI package must be stored on a network share that every computer of the domain can read. The recommended permissions are:

• Share name: Applications$ (the $ hides the share from network browsing)
• Share permissions: "Everyone" — Full control
• NTFS permissions: "Domain Computers" — Read & Execute

Why "Domain Computers" ? When the Agent is assigned through Computer Configuration, the installation runs under the computer account during startup, not under the logged-on user. The computer account must therefore be able to read the MSI.

Steps:

• Create a folder on your server, for example C:\Share\Applications.
• Share it as Applications$ with the permissions above.

• Copy the WinAppack Agent MSI into the shared folder.

The package is now reachable through a UNC path such as:

\\SRV-AD.your-domain.local\Applications$\WinAppackAgent_v1.2.msi

Important: always use the UNC path (\\server\share), never a local path such as C:\. The target computers must be able to reach the MSI over the network.

III. Install the MSI via GPO (Assigned mode)

The Assigned mode under Computer Configuration forces the silent installation of the WinAppack Agent on every targeted workstation at the next startup. This is the recommended mode for an organization-wide deployment.

1. Open the Group Policy Management console (gpmc.msc).

2. Right-click the Organizational Unit that contains your workstations, then choose Create a GPO in this domain, and Link it here… Name it, for example, Deploy-WinAppack-Agent.

3. Right-click the new GPO and select Edit.

4. Navigate to:

Computer Configuration > Policies > Software Settings > Software installation

5. Right-click Software installation, then New > Package…

6. In the file selection dialog, enter the UNC path of the MSI (not a local path):

\\SRV-AD.your-domain.local\Applications$\WinAppackAgent_v1.2.msi

7. When prompted for the deployment method, select Assigned, then confirm.

8. The WinAppack Agent now appears in the list of assigned packages. Close the Group Policy editor.

The GPO is already linked to the OU (step 2). Every workstation located in that OU will silently install the WinAppack Agent the next time it starts.

Apply and test

On a target workstation, force the policy refresh and restart the machine:

gpupdate /force

An assigned package is installed during computer startup, so a reboot is required for the WinAppack Agent to be installed. After the reboot, the Agent is available on the workstation.