Up until today, I was installing the KACE agent via login script, which overtime, had become convoluted and cumbersome to manage. So, I decided to move all the software installations that were performed by the login script to non other than the K1000. These work like a charm. However, the installation of the KACE agent itself, obviously can’t be done with the K1000, unless the network parameters and other variables are exactly right. Granted, there are many other methods to do so, among which are login scripts, using the KACE agent distribution tasks, and GPO. In this article, I will be addressing the installation via GPO. Though, this part is very well documented with KACE, there is one item that I will be addressing here that will deal with existing installations of the KACE agent, performed with other methods than GPO Software Installation.
- GPO Software Installation Policies will only install a new software package if it’s not installed on a workstation AND if the registry corresponding to the that GPO application is populated. The registry key can be found in: HKLM\Software\Microsoft\Windows\Current Version\Group Policy\appmgmt\
- GPO will always install the application, even if it’s already installed on the workstation, if, the corresponding registry key doesn’t exist.
“\\kbox\client\agent_provisioning\windows_platform\ampagent-x86_kbox.chino.k12.ca.us.msi”Even though these 2 policies could have been potentially merged into one, there is one main reason they are separated: Ordering.In the GPO, this is one of the situations, where the ordering of the GPOs will actually matter. In a case where the KACE agent is in fact installed, but the registry entry doesn’t exist, and the installation GPO is BEFORE the PREF GPO, then, the installation task will always trigger even if KACE is installed, because the PREF GPO didn’t get a chance to run, and evaluate the existence of the agent.
By placing the PREF GPO on a higher priority than the KACE installer, it will take care of the registry entry, and will prevent the installation task from triggering if the KACE agent already exists.