CarbonBlack GPO Installation
----------------------------

This zip archive is provided to allow for GPO installation of the CarbonBlack sensor.

Warning
-------
The setup executable file (.EXE) in this archive can be used to install the Carbon
Black sensor manually (without GPO).  If this is done, extract BOTH the EXE and 
the sensorsettings.ini settings file to the same directory and launch the EXE.

The EXE can be launched with the /S switch to perform a silent installation.

If the sensorsettings.ini file is NOT in the same directory, the sensor will not be 
installed.  The following directory will be created:

%WINDIR%\CarbonBlack\InstallLogs

and an install log will be present in this directory.  The install log will indicate
that the installer could not find the settings file (sensorsettings.ini).

Instructions
------------

(1) Extract the contents of this zip archive to a shared folder.
  (1a) Ensure that the share is accessible to domain computers.
       - Ensure that the IP or name is accessible.
       - Ensure that firewall settings allow access on TCP port 445.
       - Ensure share permissions allow 'Domain Computers' read access.
       - Ensure security permissions allow 'Domain Computers' Read/Execute access.
  (1b) Ensure that all files in this zip are extracted to the shared folder.

(2) On your domain controller, open Group Policy Management and right-click on the 
    appropriate OU.  Click the 'Create and Link a GPO here' menu option and enter
    a name.  We recommend including the version of the CB sensor in the name to 
    help with later troubleshooting.

(3) Edit the GPO settings.  Add "domain computers" or the appropriate subset of
    computers.   Remove any user account our user group entries.

(4) Add a new package, specifying the MSI in the network share used in step 1.

Additional Notes
----------------

Testing of the MSI can be performed via the msiexec.exe utility included with Windows.

msiexec.exe /qn /i <Installer.MSI> /L*V msi.log

The meaning of the command line arguments:

  /qn  : fully quiet mode
  /i   : specifies the MSI package to install
  /L*V : specifies fully verbose logging to file

Run this from an administrative and elevated command prompt.

Support
-------

Please contact Carbon Black support at support@carbonblack.com with any questions.