Overview

This guide explains how to use a PowerShell script for bulk deployment of the BDRShield Delegation Service. It also provides instructions for deploying the script using Active Directory Group Policy Objects (GPO).

PowerShell Script for Deployment

$folder = 'C:\Program Files\Vembu\VembuIntegrationService'
$exePath = '\\192.168.105.103\C\Shared\BDRShield_Delegation_Service.exe'

if (-not (Test-Path -Path $folder)) {
    Start-Process -FilePath $exePath -ArgumentList "/VERYSILENT", "/SILENTINSTALL='Yes'", "/INSTALLDRIVER='Yes'", "/REBOOT='Force'"
} else {
    # No further actions needed if the directory exists
}

Explanation of the Script

1. Variable $folder:

   • The script sets $folder as the path to check if the application is installed. Modify this path for the application you want to verify.

2. Condition Check (if -not (Test-Path -Path $folder)):

   • Verifies if the $folder exists.
   • If the folder doesn't exist, the installation process is triggered.

3. Installation Command (Start-Process):

   • Launches the installer from the network path.
   • Arguments Explained:
     
     • /VERYSILENT: Ensures the installation runs silently.
     • /SILENTINSTALL='Yes': Confirms a silent install mode.
     • /INSTALLDRIVER='Yes': Enables driver installation.
     • /REBOOT='Force': Forces a reboot if required by the installation.

4. else {} Block:

   • Executes if the folder exists, indicating the application is already installed.
     

Note: This is a fundamental script designed for streamlining the mass deployment of MSI files by tailoring user inputs. Feel free to customize and enhance it, incorporating features such as logging or other options to align with your specific requirements.

Customizable Parameters

Deploying the PowerShell Script via GPO

1. Create a Group Policy Object (GPO)
   

   • Open Group Policy Management on a domain controller.
   • Expand the domain object, right-click Group Policy Objects, and select New.
     
   • Name the policy (e.g., BDRShield_Delegation_Deployment) and click OK. 
     

2. Edit the GPO
   

   • Right-click the created GPO and select Edit.
   • Navigate to:
     Computer Configuration → Policies → Windows Settings → Scripts (Startup/Shutdown).
   • Right-click on the newly created policy and choose "Edit."
     
   • Under the "Computer Configuration", expand the Policies folder, and subsequently, the Windows Settings folder->Scripts (Startup/Shutdown) .
     
   • On the right side click "Startup"
     
   • Then click on PowerShell Scripts or Scripts if using a batch file[in this example we using powershell], Click on the Add button, then click browse.

3. Add the PowerShell Script
   

   • When the browser window is open, you need to copy and paste the .ps1 file into it. Do not alter the path, as it corresponds to the GPO path, and the script must be copied into this specific location. Note that your path will differ from the below screenshot.
   • Click 'OK'. You should now be back at the main screen, indicating the successful completion of the GPO configuration.

4. Assign the GPO to Specific Groups

   • Access Group Policy Management on one of your Active Directory domain controllers.
   • Go to the Organizational Unit (OU) that contains the computers to which you want to deploy BDRShield_Delegation_Service_X_X_X_X.msi.
   • Right-click the OU [DeveloperComp->Computers], and choose "Link an Existing GPO..."           
     
   • Choose the previously created Group Policy Object "BDRShield_Delegation_Deployment", and then click OK.

Testing the Configuration

1. Reboot the computer that is part of the Organizational Unit (OU) where the linked Group Policy Object is applied.
2. Since the software undergoes a silent install, users will not observe any prompts or actions during their login. The installation will seamlessly occur in the background without requiring any user interaction.

Verification Steps

1. To confirm that BDRShield_Delegation_Service was installed, follow these steps:
   

1. Click on the Start Button, and then choose "Settings."
   
2. Type "apps" in the "Find a setting" search box.
   
3. Select "Add or remove programs."
   
4. Search for or locate "BDRShield_Delegation_Service" in the list.
   

1. BDRShield_Delegation_Service should also be running in the system tray. Right-click the Tray icon, and select "Status..." to confirm.

Notes

• This script and process streamline MSI deployments with customizable parameters.
• Logging or additional error handling can be incorporated as per deployment requirements.