Install the Windows agent silently and through Group Policy (GPO)

The MSI installs silently with properties. In an Active Directory domain, deploy it through Group Policy and configure its behaviour with the ADMX templates.

MSI properties

Before finishing, the installer checks that the organization responds and loads the provider exactly as the sign-in screen does. A failure ends the installation, so a broken provider is never left behind.

Silent install

msiexec /i AuthGuardDesktop-x64.msi /qn /norestart `
  TENANT_ORIGIN=https://example.example.com INSTALL_TOKEN=agei1_... `
  SUPPORT_CONTACT="IT Support · ext. 4357" ORGANIZATION_NAME="Example" PANEL_LANGUAGE=en

Group Policy

1. Copy AuthGuardDesktop.admx and the en-US and pt-PT ADML files into the central store (\\<domain>\SYSVOL\<domain>\Policies\PolicyDefinitions).
2. Deploy the MSI by software installation with an MST transform that sets TENANT_ORIGIN and INSTALL_TOKEN, or by a startup script with the command above.
3. Configure under Computer Configuration › Administrative Templates › AuthGuard › Desktop:

Security settings (offline window, break-glass accounts, password-only accounts) come from the console's signed policy; a GPO cannot widen them.

Check

The computer appears under «Manage» › «Computers». On the computer: authguard-desktop.exe status and selftest, in an elevated PowerShell.