Windows Agent Deployment

Windows Agent Deployment

You can install an ObserveIT Agent on any Windows-based server that you want to monitor and record.

From version 7.12.0, before deploying, you must download the JWT file with authentication details.
The downloaded file will be valid for the specified number of days. When the file expires, it cannot be used for additional installations. Make sure the file will not expire before you have time to complete the installation. It is suggested that you set the number of days to 180. For security reasons, after successful installation, it is recommended that you remove the file.
(See Configuring Service Settings.)

Windows Agent installation is performed over a standard Windows installer package (.MSI) that is well supported by software distribution applications and Group Policy (GPO). The Windows Agent can be installed by using the default installation (using a simple batch file) or by using a custom installation which allows you to configure advanced settings, including the Agent registration mode and user recording policy.

For improved security, you may also be required to provide a security password when installing or uninstalling the Agent. Requiring a password to install Agents prevents the unauthorized recording of computers and the unauthorized consumption of ObserveIT licenses. By also requesting a password on uninstallation of an Agent, unauthorized removal of a computer from ObserveIT's list of recorded machines is prevented.

Optionally, a system tray icon can be configured to be displayed on the machine when the Agent is running.

You can deploy as many ObserveIT Agents as required up to the licensing limit. For a small number of monitored servers, it is recommended that you manually install the Agent on each system.

To prevent Antivirus programs from blocking ObserveIT Agent executable files, ObserveIT works with Antivirus vendors to permanently whitelist the executable files. For details on how this is done, see Excluding ObserveIT Processes from Antivirus Software.

For information about the minimum system requirements for installing ObserveIT Windows Agents, see System Requirements for ObserveIT Components.

You must have a valid license file containing your purchased ObserveIT license. Attempting to install Agents on more systems than your license permits, or on systems that are not a part of your license (for example, attempting to install the Agent software on a Windows machine, for which you do not have a workstation-type license, or when all the existing workstation-type licenses were used up) will result with an installation failure.

Large Deployments

For large deployments, you can use a software distribution application such as Microsoft System Management Server or logon scripts to deliver the installation package. The Agent setup application is a standard Windows installer package that is well supported by software distribution applications and Group Policy (GPO).

Prerequisites

Install the Agent in its own directory. This directory cannot contain other files or folders.

Make sure that you have the following information, and have performed these tasks before installing ObserveIT Windows Agents:

  • Use the operating system update mechanism and best-practices to ensure that all servers are patched with critical updates.

  • Ensure your servers meet all System Requirements for the components you are installing.

  • Login credentials for an account with administrative privileges on the computer on which you intend to install the ObserveIT Windows Agents.

  • The IP address and host name of the computer that hosts the ObserveIT Application Server.

  • If there is a firewall between the computers that run the ObserveIT Agents and the ObserveIT Application Server, you must allow traffic for the TCP ports on which the ObserveIT Application Server communicates through that firewall. For new ObserveIT installations, the default port is 4884, but this port can be changed to meet the organization's requirements. Note that you can also configure ObserveIT to use SSL, which will change the port to 443.

    To verify, use the following command on the Windows computer:

    telnet <ServerIP> <Port>

    where ServerIP is the IP address or name of the ObserveIT Application server and Port is the TCP port used by the ObserveIT Application Server.

The following topics describe how to perform the following manual installations:

Related Topics

Excluding ObserveIT Processes from Antivirus Software

Downloading the Latest Version