How to Deploy Windows Management Agents with GPO

This topic describes how you can deploy the Veeam Service Provider Console management agent setup file to remote computers using GPO.

You must create an MST file with custom configuration parameters and use this MST file to deploy the Veeam Service Provider Console management agents on remote computers. The management agents will use parameters specified in the MST file to connect to a cloud gateway on the service provider side.

Required Details

Obtain the following data from the service provider:

• Port on the cloud gateway used to transfer backup data to and from cloud repositories
• Thumbprint of a certificate that is installed on the Veeam Service Provider Console and Veeam Cloud Connect servers

Step 1. Unpack Management Agent Setup Files

Unpack the content of the management agent setup file:

1. Obtain the necessary version of the Veeam Service Provider Console management agent setup file from your service provider.

2. Copy the unpacked files to a network share.

The network share must be accessible from all remote computers on which you want to deploy the management agent.

Make sure you set at least Read permissions on the files.

Step 2. Create MST Configuration File

Create an MST configuration file with installation parameters that point to the necessary cloud gateway:

1. In the directory with the setup file, open the management agent setup file for edit with Orca.

For details on Orca, see Windows Dev Center.

2. In the menu, choose Transform > New Transform.
3. In the Tables pane, click Property.
4. Add the following properties to the table:

• ACCEPT_THIRDPARTY_LICENSES — specifies if you want to accept the terms of the license agreement for the 3rd party components.

Specify 1 if you want to accept the terms and proceed with installation.

• ACCEPT_EULA — specifies if you want to accept the terms of the Veeam license agreement.

Specify 1 if you want to accept the terms and proceed with installation.

• ACCEPT_LICENSING_POLICY — specifies if you want to accept the terms of the Veeam licensing policy.

Specify 1 if you want to accept the terms and proceed with installation.

• ACCEPT_REQUIRED_SOFTWARE — specifies if you want to accept the terms of the required software license agreement.

Specify 1 if you want to accept the terms and proceed with installation.

• VAC_CERT_THUMBPRINT — thumbprint of a certificate that is installed on the Veeam Service Provider Console server, and used to secure traffic between the service provider and clients.

The thumbprint is used to verify the authenticity of the certificate. Although this property is optional, it is recommended that you specify it.

5. If your service provider has changed the default port number when deploying the cloud gateway, locate the CC_GATEWAY_PORT property and change the port value.

6. In the menu, choose Transform > Generate Transform.
7. Save the MST file with configuration details.
8. Close Orca.
9. Copy the MST to a network share.

The network share must be accessible from all remote computers on which you want to deploy the management agent.

Make sure you set at least Read permissions on the file.

Step 3. Create Group Policies

Create a Group Policy that will install and configure the management agent on remote computers:

1. Log on to a domain controller.
2. Open the Group Policy Management Console.
3. Right-click the OU which includes computers on which management agents must be deployed, and choose to create a new Group Policy Object.
4. Right-click the Group Policy Object and choose Edit.
5. In the left pane of the Group Policy Management Editor, expand Computer Configuration > Policies > Software Settings.
6. Right-click Software Installation and select New > Package.
7. In the Open window, point to the management agent setup file located on the network share.
8. In the Deploy Software window, choose the Advanced deployment method.
9. Open the Modifications tab, click Add and choose the MST file located on the network share.
10. Click OK.
11. In the left pane of the Group Policy Management Editor, expand Computer Configuration > Policies > Administrative Templates > System > Logon.
12. Right-click the Always wait for the network at computer startup and logon policy setting and choose Edit.
13. In the policy setting window, select Enabled and click OK.
14. Close the Group Policy Management Editor.

Step 4. Apply Group Policies to Remote Computers

Apply the created Group Policy to remote computers.