# Windows Server - Deploy Software via Group Policy (GPO)

### <span style="color: rgb(0, 0, 0);">**Introduction  
</span>

<span style="color: rgb(0, 0, 0);">**Deploy Software via Group Policy (GPO)** is a method used in **Windows Active Directory (AD)** environments to automatically **install, update, or remove software** on computers or for users centrally and silently, without manual installation on each machine. It’s mainly handled by **Group Policy Objects (GPOs)** through Microsoft Installer (MSI) packages.</span>

#### <span style="color: rgb(0, 0, 0);">**Open the Windows Server Device:**</span>

- <span style="color: rgb(0, 0, 0);">Open **Server Manager dashboard** click **Tools** on the upper right side and choose the **Active Directory Users and Computers.**</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/MQQgkMhG5cjA5SEQ-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/MQQgkMhG5cjA5SEQ-image.png)</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/phG9efsyRpAoBEsr-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/phG9efsyRpAoBEsr-image.png)</span>

- <span style="color: rgb(0, 0, 0);">On the **Active Directory Users and Computers** right click the **Users** folder select **New** and **Group.**</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/wEdjfYkKvgoRLxeH-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/wEdjfYkKvgoRLxeH-image.png)</span>

<span style="color: rgb(0, 0, 0);">After you clicked the Computer, New Object - Computer window displayed.</span>

- <span style="color: rgb(0, 0, 0);">**Input your desired Computer Name:** TSR-Deployment</span>
- <span style="color: rgb(0, 0, 0);">**Group scope: Global**</span>
- <span style="color: rgb(0, 0, 0);">**Group type: Security**</span>

<span style="color: rgb(0, 0, 0);">Click "OK" once done and you will see the **TSR-Deployment** added on the **Active Directory Users and Computers**.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/jaJv4HWiS9v3AheT-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/jaJv4HWiS9v3AheT-image.png)</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/0OlRbArKvhNc6x1O-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/0OlRbArKvhNc6x1O-image.png)</span>

- <span style="color: rgb(0, 0, 0);">Next Process double click the **TSR-Deployment** on the **Active Directory Users and Computers, TSR-Deployment Properties** will appear and click the **Members** tab.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/ow5BVIAB80PJK0fs-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/ow5BVIAB80PJK0fs-image.png)</span>

- <span style="color: rgb(0, 0, 0);">Click **Add**, then select **Object Types**. Once it opens, check the **Computers**.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/YB5G1EOVe2ERMHmx-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/YB5G1EOVe2ERMHmx-image.png)</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/AsF2mxZKR1A8llWC-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/AsF2mxZKR1A8llWC-image.png)</span>

- <span style="color: rgb(0, 0, 0);">Type the **computer name** that is connected to the domain. Then, click **Check Names** and select only the **Computer** icon that corresponds to your device.</span>  
      
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/aeehraMDeA0YUH7H-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/aeehraMDeA0YUH7H-image.png)</span>

##### <span style="color: rgb(0, 0, 0);">**Creating a UNC Path for Software Folders (Windows Server)**</span>

<span style="color: rgb(0, 0, 0);">To ensure domain-joined computers can access the AQUILA EDR ZIP file package and folder for centralizing logs, create a shared network folder and configure appropriate permissions.</span>

1. <span style="color: rgb(0, 0, 0);">On a **Document** folder, create another folder inside of it with your desired name (e.g., **software**).</span>  
    
    - <span style="color: rgb(0, 0, 0);">Inside of the **software** folder, place the `<strong>aquila agent 7.msi</strong>` into this folder.</span>  
          
        <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/S0lg9M1r9EFECEYj-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/S0lg9M1r9EFECEYj-image.png)</span>
        
          
        <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/rvva6I87H1FJ8j0s-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/rvva6I87H1FJ8j0s-image.png)</span>
2. <span style="color: rgb(0, 0, 0);">**Enable Folder Sharing**</span>
    - <span style="color: rgb(0, 0, 0);">Right-click the **software** folder and select **Properties**.</span>
    - <span style="color: rgb(0, 0, 0);">Navigate to the **Sharing** tab and click **Advanced Sharing**.</span><span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/opYjeqE5wFFJ3Z8V-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/opYjeqE5wFFJ3Z8V-image.png)</span>
    - <span style="color: rgb(0, 0, 0);">Check the box **Share this folder**.</span><span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/BTHQBRIZqm8z8flC-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/BTHQBRIZqm8z8flC-image.png)</span>
3. <span style="color: rgb(0, 0, 0);">Set Permissions</span>
    - <span style="color: rgb(0, 0, 0);">Click Permissions</span>
    - <span style="color: rgb(0, 0, 0);">Grant the **Read** permission to `Domain Computers`.</span>
    - <span style="color: rgb(0, 0, 0);">Grant the **Full Control** permission to `Domain Admins`</span>
        
        <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/myA2I9R7JSAhtqXd-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/myA2I9R7JSAhtqXd-image.png)</span>
    - <span style="color: rgb(0, 0, 0);">Once the **Permission** clicked, **Permissions for software** will be shown and kindly **Remove** the **Everyone.**</span>  
        <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/3q3dwKXWXABHMPEG-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/3q3dwKXWXABHMPEG-image.png)</span>
    - <span style="color: rgb(0, 0, 0);">After clicking the **Remove**, click the **Add**, then **Select Users, Computers, Service Accounts, or Group** will be shown. Type "**auth"** then click **Check Names.** The **Multiple Names Found** will be shown and select the **Authenticated Users** and click **OK.**  </span><span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/vjt3uArmsu3RYQgF-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/vjt3uArmsu3RYQgF-image.png)</span>
        
        <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/zVDiSopC92yCAQ9n-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/zVDiSopC92yCAQ9n-image.png)</span>
        
          
        <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/TNrjql3n2fdmHv3W-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/TNrjql3n2fdmHv3W-image.png)</span>

- <span style="color: rgb(0, 0, 0);">Once **Authenticated Users** selected allow **Full Control,** click **Apply** and **OK.** Including the **Advanced Sharing** click **Apply** and **OK.** </span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/BGPSc75jbdelNeBK-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/BGPSc75jbdelNeBK-image.png)</span>

- <span style="color: rgb(0, 0, 0);">On the **software folder properties** click the **Security** tab. Point your mouse at **Administrator** ("username"\\administrator) and click **Edit**</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/YSq1qwaWqA2Dc1Yt-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/YSq1qwaWqA2Dc1Yt-image.png)</span>

- <span style="color: rgb(0, 0, 0);">On the **Permission for software,** click **Add** and type the **Security Group** name you created "**tsr-deployment**" and click the **Check Names (**It will automatically call the **Security Group**) and click **OK.**</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/6YRhck0CPRFZkvoq-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/6YRhck0CPRFZkvoq-image.png)</span>

- <span style="color: rgb(0, 0, 0);">As you can see the "**TSR-Deployment**" Security Group are added. To proceed click **Apply** and **OK.**</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/5bZePJdlQQl3caCf-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/5bZePJdlQQl3caCf-image.png)</span>

#### <span style="color: rgb(0, 0, 0);">**Let's go back to the Server Manager dashboard.**</span>

- <span style="color: rgb(0, 0, 0);">On the **Server Manager** click **Tools** on the upper right side and choose the **Group Policy Management**.  
    </span><span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/ScQSGuxv1yulVkCs-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/ScQSGuxv1yulVkCs-image.png)</span>
- <span style="color: rgb(0, 0, 0);">Select or double click the **Domain.** </span>  
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/k077w4t2kb6KBe91-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/k077w4t2kb6KBe91-image.png)</span>
- <span style="color: rgb(0, 0, 0);">Under your **Domain,** you can see the **domain name** `(e.g., ronwinser.com).`</span>  
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/ccYm3gNKfXqVqixX-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/ccYm3gNKfXqVqixX-image.png)</span>
- <span style="color: rgb(0, 0, 0);">Right click your **domain name** and click the **Create a GPO in this domain, and Link it here** and give a name `(e.g., tsrapp_deployment)` click **OK** once done.</span>  
      
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/hCOWsJlaoUZ06ZSL-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/hCOWsJlaoUZ06ZSL-image.png)</span>
    
      
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/ZanwQn9leRwGzX2S-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/ZanwQn9leRwGzX2S-image.png)</span>
- <span style="color: rgb(0, 0, 0);">On the **GPO** you created, right click and choose the **Edit.** </span>  
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/PgogkPRg90f6Mhs5-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/PgogkPRg90f6Mhs5-image.png)</span>
- <span style="color: rgb(0, 0, 0);">Once you **Edit**, the **Group Policy Management** Editor will be shown just click the arrow from **Computer Configuration** &gt; **Policies** &gt; **Software Settings** &gt; **Software installation,** inside the **Software installation** right click on the enviroment and choose the **New** &gt; **Package.**</span>  
      
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/1lvK7APBP8uZ0Juv-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/1lvK7APBP8uZ0Juv-image.png)</span>
- <span style="color: rgb(0, 0, 0);">Once you clicked the **Package** it will direct you from the **folder** you've **created** with a name of "**software".** Kindly click the **Open** your **software installer (Aquila Agent 7 with MSI format)** will be added inside to your **Group Policy Management Edit** or **GPO**. Do not change the "**Assigned**" option from **Deploy Software**.</span>  
      
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/Vdlj3jSQUhw1kjou-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/Vdlj3jSQUhw1kjou-image.png)</span>
    
      
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/2NX9sjFNb90NK2j5-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/2NX9sjFNb90NK2j5-image.png)</span>
- <span style="color: rgb(0, 0, 0);">As you can see, we're able to **map out** also the **Network path** of the "**software"** folder we shared earlier. </span>  
      
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/iKaLw34H5NTBa8WA-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/iKaLw34H5NTBa8WA-image.png)</span>
- <span style="color: rgb(0, 0, 0);">So now your **Aquila Agent** with **.msi** format installer is now already added in the **GPO**.</span>  
      
    #### <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/o46In13znWwBH2Ap-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/o46In13znWwBH2Ap-image.png)  
    </span>

#### <span style="color: rgb(0, 0, 0);">**Let's navigate again to the "Group Policy Management".**</span>

- <span style="color: rgb(0, 0, 0);">On your **Group Policy Managent** remove the default **Authenticated Users** in **Security Filtering**.  
      
    </span><span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/KyeBPWWHnlDUVaqY-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/KyeBPWWHnlDUVaqY-image.png)</span>
- <span style="color: rgb(0, 0, 0);">Then click the **Add** button from **Security Filtering**, type **Security Groups** you've created, but for this case was "**TSR-Deployment**" and click the **Check Names** and press **OK.**</span>  
      
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/wuHETHOghgSuBPwY-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/wuHETHOghgSuBPwY-image.png)</span>
- <span style="color: rgb(0, 0, 0);">Your **TSR-Deployment** which is the **Global Security group** you've created was already added on the **Security Filtering.** Kindly close the **Group Policy Management** or leave it open. </span>  
      
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/p0rqErF1M8gAKK2i-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/p0rqErF1M8gAKK2i-image.png)</span>

> <span style="color: rgb(0, 0, 0);">In this case, the setup of **Active Directory Users and Computers** and **Group Policy Management** for software deployment via **Group Policy (GPO)** has already been completed. The installer packages have also been added to **Group Policy Management** and are ready for deployment on the client end.</span>

#### <span style="color: rgb(0, 0, 0);">**Let’s proceed to the client-side desktop that is connected to Windows Server domain.** </span>

- <span style="color: rgb(0, 0, 0);">Make sure the **PC/Desktop** is connected to the **Windows Server domain**.</span>  
    <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/7sPDpslUhZ3gfCUz-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/7sPDpslUhZ3gfCUz-image.png)</span>
- <span style="color: rgb(0, 0, 0);">To automatically install the **software application** from **GPO** to client-end's desktop, we need to update the group policy through **CMD.**</span>
    1. <span style="color: rgb(0, 0, 0);">Open the **CMD** as **administrator.**</span>
    2. <span style="color: rgb(0, 0, 0);">Type **gpupdate /force** and hit **enter**.</span>  
          
        <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/pW7OY5yX466t8MzL-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/pW7OY5yX466t8MzL-image.png)</span>
    3. <span style="color: rgb(0, 0, 0);">If the group policy updates successfully, type **“Y”** to restart your PC. This allows your **endpoint** to **synchronize** with the GPO.</span>
    4. <span style="color: rgb(0, 0, 0);">Once the **PC/Desktop** is open, the Aquila Agent installer will automatically be installed, to ensure everything is running kindly proceed to **task manager** and type **Aquila** on the **search bar** and check the status of its module.</span>  
          
        <span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/scaled-1680-/V43axki7I75jcwQm-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-01/V43axki7I75jcwQm-image.png)</span>

<span style="color: rgb(0, 0, 0);"> *If you need further assistance, kindly contact our technical support at <span style="color: rgb(53, 152, 219);">**<support@cytechint.com>** </span>for prompt assistance and guidance.*</span>