How to Remotely Install the Client on a Specific Station
Objective:
To install the client on a specific station whose IP address is known.
Requirements:
- With a server running TrustPort Management version 3.0.
- The station must be a Microsoft network client, Share files and printers in Microsoft networks service must be installed and default administrator sharing (C$, D$, ADMIN$, etc.) must be allowed.
- If a firewall is running on the computer, the following ports must be opened to allow communication between the server and stations. The specific ports are the following:
- allow UDP connections in both directions on port 9090,
- allow TCP connections in both directions on port 9675,
- for the management console on the server allow internal TCP connections on port 20394 (can be set to another port while installing the server), on the TrustPort Management server it is necessary to allow even outgoing connections
- allow incoming TCP connections on port 135 for RPC,
- allow outgoing TCP connections on port 139 for RPC,
- allow incoming TCP connections on port 445 for resource sharing on Windows,
- allow incoming TCP connections on port 1042 for resource sharing on Windows.
- If an older version of TrustPort PC Security is installed, please uninstall it before installing TrustPort Management.
-
It is necessary to have an user account prepared for installing the client on a station.
The user account set for installing the client may need to be set according to the type of network:
- Installing in networks with a domain – in this case, in principle it is possible to use any domain account that has local administrator rights, ie. belonging to the local administrator group.
- Installing in networks without a domain – in this case, a domain account cannot be used. A local account must be used that belongs to the local administrator group.
Procedure:
- Log on to the TrustPort Management console, which is available on the TrustPort Management server.
-
In the
Push install
menu, select
Search, choose the option
Check this box to display which stations already have TrustPort Management installed. Click
Search button to start searching for the station.
-
Check the desired station from those returned and click the
Install
button to begin installing the client.
-
Enter installation account in the displayed window and launch the installation by clicking the confirmation button.
If any errors occurred while installing or the installation failed completely, an alert is created including the error message and added to the alert message list on the given station.
When installing the client the following are the most common problems:
- The Client Installation account used on the station does not exist, does not have administrator rights or has the wrong password information.
- A firewall is running blocking remote installation of the client, because some of its rules will not allow the request.
- In the Local Security Policy (it is placed in the Start->Control Panels->Administrative Tools menu folder) the Network access: Sharing and security model for local accounts item, that is located in the Security Settings\Local Policies\Security Options, has a different value from the Classic - Local users authenticate as themselves. In such cases the operating system blocks remote installations automatically. This applies only for computers that are not part of a domain.
- The station is not a Microsoft network client, does not have installed the Share files and printers in Microsoft networks service or does not have default administrator sharing allowed (C$, D$, ADMIN$, atd.).
- An operating system other than Windows 2000 or higher is running on the target station.
- TrustPort Management is installed on the target station that is controlled by the other TrustPort Management server.
Detailed information about the complete installation process and possibilities is described in How to Install TrustPort Management Version 3.0.