Installing applications using a remote installation task

Open Single Management Platform allows you to install applications on devices remotely, using remote installation tasks. Those tasks are created and assigned to devices through a dedicated wizard. To assign a task more quickly and easily, you can specify devices (up to 1000 devices) in the wizard window in one of the following ways:

• Assign task to an administration group. In this case, the task is assigned to devices included in an administration group created earlier.
• Specify device addresses manually or import addresses from a list. You can specify DNS names, IP addresses, and IP subnets of devices to which you want to assign the task.
• Assign task to a device selection. In this case, the task is assigned to devices included in a selection created earlier. You can specify the default selection or a custom one that you created. You can only select up to 1000 devices.

For correct remote installation on a device with no Network Agent installed, the following ports must be opened: a) TCP 139 and 445; b) UDP 137 and 138. By default, these ports are opened on all devices included in the domain. They are opened automatically by the remote installation preparation utility.

Installing an application remotely

Expand all | Collapse all

This section contains information on how to remotely install an application on devices in an administration group, devices with specific addresses, or a selection of devices.

To install an application on specific devices:

1. In the main menu, go to Assets (Devices) → Tasks.
2. Click Add.

   The New task wizard starts.

3. In the Task type field, select Install application remotely.
4. Select one of the following options:
   • Assign task to an administration group

     The task is assigned to devices included in an administration group. You can specify one of the existing groups or create a new one.

     For example, you may want to use this option to run a task of sending a message to users if the message is specific for devices included in a specific administration group.

     If a task is assigned to an administration group, the Security tab is not displayed in the task properties window because group tasks are subject to the security settings of the groups to which they apply.

   • Specify device addresses manually or import addresses from a list

     You can specify DNS names, IP addresses, and IP subnets of devices to which you want to assign the task.

     You may want to use this option to execute a task for a specific subnet. For example, you may want to install a certain application on devices of accountants or to scan devices in a subnet that is probably infected.

   • Assign task to a device selection

     The task is assigned to devices included in a device selection. You can specify one of the existing selections.

     For example, you may want to use this option to run a task on devices with a specific operating system version.

   The Install application remotely task is created for the specified devices. If you selected the Assign task to an administration group option, the task is a group one.

5. At the Task scope step, specify an administration group, devices with specific addresses, or a device selection.

   The available settings depend on the option selected at the previous step.

6. At the Installation packages step, specify the following settings:
   • In the Select installation package field, select the installation package of an application that you want to install.
   • In the Force installation package download settings group, specify how files that are required for the application installation are distributed to client devices:
     • Using Network Agent

       If this option is enabled, installation packages are delivered to client devices by Network Agent installed on those client devices.

       If this option is disabled, installation packages are delivered using the operating system tools of client devices.

       We recommend that you enable this option if the task has been assigned to devices with Network Agents installed.

       By default, this option is enabled.

     • Using operating system resources through distribution points

       If this option is enabled, installation packages are transmitted to client devices using operating system tools through distribution points. You can select this option if there is at least one distribution point on the network.

       If the Using Network Agent option is enabled, the files are delivered using operating system tools only if Network Agent tools are unavailable.

       By default, this option is enabled for remote installation tasks that have been created on a virtual Administration Server.

       The only way to install an application for Windows (including Network Agent for Windows) on a device that does not have Network Agent installed is by using a Windows-based distribution point. Therefore, when you install a Windows application:

       • Select this option.
       • Ensure that a distribution point is assigned for the target client devices.
       • Ensure the distribution point is Windows-based.
     • Using operating system resources through Administration Server

       If this option is enabled, files are transmitted to client devices by using operating system tools of client devices through the Administration Server. You can enable this option if no Network Agent is installed on the client device, but the client device is in the same network as the Administration Server.

       By default, this option is enabled.

   • In the Maximum number of concurrent downloads field, specify the maximum allowed number of client devices to which Administration Server can simultaneously transmit the files.
   • In the Maximum number of installation attempts field, specify the maximum allowed number of installer runs.

     If the number of attempts specified in the parameter is exceeded, Open Single Management Platform does not start the installer on the device anymore. To restart the Install application remotely task, increase the value of the Maximum number of installation attempts parameter and start the task. Alternatively, you can create a new Install application remotely task.

   • Define the additional setting:
     • Do not re-install application if it is already installed

       If this option is enabled, the selected application will not be re-installed if it has already been installed on this client device.

       If this option is disabled, the application will be installed anyway.

       By default, this option is enabled.

     • Verify operating system type before downloading

       Before transmitting the files to client devices, Open Single Management Platform checks if the Installation utility settings are applicable to the operating system of the client device. If the settings are not applicable, Open Single Management Platform does not transmit the files and does not attempt to install the application. For example, to install some application to devices of an administration group that includes devices running various operating systems, you can assign the installation task to the administration group, and then enable this option to skip devices that run an operating system other than the required one.

     • Prompt users to close running applications

       Running applications may prevent a restart of the client device. For example, if a document is being edited in a word processing application and is not saved, the application does not allow the device to restart.

       If this option is enabled, such applications on a locked device are forced to close before the device restart. As a result, users may lose their unsaved changes.

       If this option is disabled, a locked device is not restarted. The task status on this device states that a device restart is required. Users have to manually close all applications running on locked devices and restart these devices.

       By default, this option is disabled.

   • Select on which devices you want to install the application:
     • Install on all devices

       The application will be installed even on devices managed by other Administration Servers.

       This option is selected by default. You do not have to change this setting if you have only one Administration Server in your network.

     • Install only on devices managed through this Administration Server

       The application will be installed only on devices managed by this Administration Server. Select this option if you have more than one Administration Server in your network and want to avoid conflicts between them.

   • Specify whether devices must be moved to an administration group after installation:
     • Do not move devices

       The devices remain in the groups in which they are currently located. The devices that have not been placed in any group remain unassigned.

     • Move unassigned devices to the selected group (only a single group can be selected)

       The devices are moved to the administration group that you select.

     Note that the Do not move devices option is selected by default. For security reasons, you might want to move the devices manually.

7. At the this step of the wizard, specify whether the devices must be restarted during installation of applications:
   • Do not restart the device

     If this option is selected, the device will not be restarted after the security application installation.

   • Restart the device

     If this option is selected, the device will be restarted after the security application installation.

8. If necessary, at the Select accounts to access devices step, add the accounts that will be used to start the Install application remotely task:
   • No account required (Network Agent installed)

     If this option is selected, you do not have to specify the account under which the application installer will be run. The task will run under the account under which the Administration Server service is running.

     If Network Agent has not been installed on client devices, this option is not available.

   • Account required (Network Agent is not used)

     Select this option if Network Agent is not installed on the devices for which you assign the remote installation task. In this case, you can specify a user account to install the application.

     To specify the user account under which the application installer will be run, click the Add button, select Local Account, and then specify the user account credentials.

     You can specify multiple user accounts if, for example, none of them have all the required rights on all devices for which you assign the task. In this case, all added accounts are used for running the task, in consecutive order, top-down.

9. At the Finish task creation step, click the Finish button to create the task and close the wizard.

   If you enabled the Open task details when creation is complete option, the task settings window opens. In this window, you can check the task parameters, modify them, or configure a task start schedule, if necessary.

10. In the task list, select the task you created, and then click Start.

    Alternatively, wait for the task to launch according to the schedule that you specified in the task settings.

When the remote installation task is completed, the selected application is installed on the specified devices.

Installing applications on secondary Administration Servers

To install an application on secondary Administration Servers:

1. Establish a connection with the Administration Server that controls the relevant secondary Administration Servers.
2. Make sure that the installation package corresponding to the application being installed is available on each of the selected secondary Administration Servers. If you cannot find the installation package on any of the secondary Servers, distribute it. For this purpose, create a task with the Distribute installation package task type.
3. Create a task for a remote application installation on secondary Administration Servers. Select the Install application on secondary Administration Server remotely task type.

   The New task wizard creates a task for remote installation of the application selected in the wizard on specific secondary Administration Servers.

4. Run the task manually or wait for it to launch according to the schedule that you specified in the task settings.

When the remote installation task is complete, the selected application is installed on the secondary Administration Servers.