How to deploy Password Manager client via System Center Configuration Manager 2007

Email It to Me Print this Page
Question Is it possible to deploy Password Manager client via System Center Configuration Manager?
Answer This instruction is for System Center Configuration Manager 2007, in later versions interface and commands have slightly changed, please refer to the KB1779 for instructions regarding SCCM 2012.

NOTE. If you do not need a detailed description on how to create a new package, program and advertisement in System Center Configuration Manager, refer to Step 3 point 4 to find the command line string parameter for the deployed program.

To install NetWrix Password Manager Logon Prompt Extension via System Center Configuration Manager (simplest scenario) perform the following steps.

Step 1. Prepare files for deployment. Package should include prm_clinet.msi itself and gina_registry_settins.reg with settings. Draft gina_registry_settins.reg is attached to the article. 
  1. Change the prm_client.msi default settings if needed, refer to this article if you want to change
  2. Edit gina_registry_settins.reg file with Notepad to apply required settings. Uncomment the required values (remove #) and change them. Refer to this article describing keys and values.

NOTE. PM_Server value is mandatory
NOTE. Remove the Wow6432Node registry key from the file if you are going to use the client on 32-bit machine.

  1. Copy both files to your System Center Configuration Manager packages folder

Step 2. Create a new package in SCCM

  1. Launch Configuration Manager Console, expand Site Database->Computer Management->Software Distribution->Packages.
  2. Right-click this node and select New - Package. The New Package Wizard will open.

User-added image

  1. On the General tab of the New Package Wizard, provide the Name of the package (for example, NetWrix Logon Prompt Extension). Fill in all the other fields (optional) and click Next.
  2. On the Data Source tab, enable This package contains source files check-box and click Set to specify the source of the package. Provide the path from step 1 - it can be local folder or network path. Enable Update distribution points on a schedule check-box and set the appropriate time interval (for example, every day). Leave other options as default and click Next.

User-added image

  1. On the Data Access tab, leave all the default settings and click Next.
  2. On Distribution Settings, change the Sending priority to High and click Next.
  3. On the Reporting tab leave default settings and click Next.
  4. On the Security tab, check the Security rights for the package (default settings being used when deploying the packages via SCCM are enough). Click Next.
  5. Review the Summary and click Next. Click Close after the wizard ends.

Steps 3. Create a new program in SCCM

  1. Expand Site Database - Computer Management - Software Distribution - Packages - <your package> and right-click the Programs node.
  2. Select New - Program. The New Program Wizard will open.

User-added image

  1. On the General tab of New Program Wizard, provide a name for the program (for example NetWrix Logon Prompt Extension).
  2. Enter the following text in the Command line field: cmd /c “reg import gina_registry_settings.reg && prm_client.msi PM_NOREBOOT="true" /qb”. 
  3. Set Run to Hidden. Click Next.

User-added image

  1. On the Requirements tab leave default settings and click Next.
  2. On the Environment tab, change the Program can run setting to Whether or not user is logged on. Click Next.
  3. On the Advanced tab, Windows Installer tab and MOM Maintenance tab leave default settings and click Next.
  4. Review the Summary and click Next. Click Close after the wizard ends.
Step 4. Create a new advertisement in SCCM
  1. At Site Database - Computer Management - Software Distribution, right-click Advertisement.
  2. Select New - Advertisement. The New Advertisement Wizard will open.
  3. On the General tab of the New Advertisement Wizard, enter the advertisement name (for example NetWrix Logon Prompt Extension).
  4. Click the Browse button near the Package field and select the package created in step 2. The appropriate program (created in step 3) will be selected automatically.
  5. Click the Browse button near the Collection field and select the collection to advertise (for example All Windows Workstation or Professional Systems). Click Next.
  6. Click Yes when “The package specified for this advertisement contains source files but no distribution points are specified for the package” message appears.
  7. On the Schedule tab, click on the yellow star near Mandatory assignments.
  8. In the Assignment Schedule dialog box, select Assign immediately after this event option and select As soon as possible from the drop-down list. Click OK.
  9. When returning to the Schedule tab, change the priority to High and click Next.

    User-added image
  10. On the Distribution Points tab, change When a client is connected within a slow or unreliable network boundary from Do not run program to Download content from distribution point and run locally. Click Next.
  11. On the Interaction tab, check that there is no checkmark in the Use custom countdown notification length (minutes) option and click Next.
  12. On the Security tab, review the security rights. Click Next.
  13. Review the Summary and click Next. Click Close after the wizard ends.

Step 5. Advertise the program
  1. Expand Site Database - Computer Management - Software Distribution - Packages - <your package>
  2. Right-click the Distribution points node and select New Distribution Points
    User-added image
     
  3. Click Next on the Welcome tab.
  4. On the Copy Package tab, select the distribution points you want to use and click Next. Click Close.
  5. Right-click on the same node as in the previous step and select Update Distribution Points. Click OK when prompted.

User-added image

Now everything is all set for Logon Prompt Extension silent deployment via SCCM.

 

Related attachment
gina_registry_settings.zip
Last Modified: Nov 14, 2013  |   Size: 601 b
Was this information helpful?