Safeguard Privilege Manager for Windows 4.3 - User Guide

Privilege Manager Client Installation

Once the Privilege Manager Console is installed, deploy the Privilege Manager client(s) to the computers on your domain in one of the following ways:

• Use Privilege Manager’s Client Deployment Settings wizard to deploy PM Clients to your computers in one pass.
• You can also use login scripts or other software deployment techniques for mass-deployment.
• The Privilege Manager Client can be installed locally on each client using PAClient.msi, however, running this installation requires administrative privileges.

To locate the PM Client MSI setup file:

• Open the Privilege Manager Console and then click Additional Resources > Open Client installation folder. The PM Client file will be displayed in the browser window.

To determine if the PM Client has been successfully deployed onto a computer, ensure that:

1. The CSEHost.exe process is running;
2. The Privilege Manager Client record is shown in Add/Remove Programs;

3. A special icon with a right-click menu is available in the system tray on the PM Client computer.

4. The new GPO rules created via Privilege Manager will be applied to the client computers following the group policy update.

Using the Client Deployment Settings Wizard

(Available only for Privilege Manager Professional)

Note: A PM Server must be configured on your domain before you can use the Client Deployment Settings wizard.

Use the Client Deployment Settings wizard to:

• Easily add software installation settings to an existing GPO (the settings are computer-based);
• Run mass-deployment or uninstallation of the PM Client software;
• Use granular validation logic rules to target the settings to special computers within the GPO.

With the Client Deployment Settings, you define:

• The operation to perform with the PM Client software: install, remove, or stop the GPO software settings from applying to the Client computer;
• What shared repository the host should use;
• How to target the settings to a GPO that already exists or is newly created on the fly;
• Additional granular targeting to specific computers within the selected GPO.

Once configured, the Client Deployment Settings will be updated and take effect on the client the next time the Group Policy is refreshed on each client.

To Set up/Edit Client Deployment Settings

Step 1. Open the Client Deployment Settings Wizard.

From the Privilege Manager Console, launch the Client Deployment Settings Wizard within the Setup Tasks section to add the settings to any available GPO.

Or,

Double-click Client Deployment Settings on the Advanced Policy Settings tab of the target GPO to change the settings for the currently selected GPO.

Note: The Client Deployment Settings wizard run from the Setup tasks section always shows the default settings. The changes made within the wizard are saved to the Client Deployment Settings wizard of the target GPO on the Advanced Policy Settings tab.

Choose what to perform with the client.

Choose whether to install or remove the PM Client software, or stop the GPO settings from applying.

Click Next.

Settings Tab - Define the PM Server.

Quit the wizard or customize the GPO setting.

Click Next to modify the default settings or click Finish to save the default settings for the target GPO and quit.

(Optional) Perform this additional configuration:

(If applicable) Save the modified GPO settings.

Click Save on the GPO toolbar to save the newly defined GPO settings.