How to deploy Online Backup agents using a Group Policy


This guide will explain how to deploy Agents for Windows to members of an Active Directory


  • An Active Directory domain with a domain controller running Microsoft Windows Server 2003 or later
  • You must be a member of the Domain Admins group in the domain
  • You have downloaded the All agents for installation in Windows setup program. The download link is available on the Add devices page in the backup console.

How to

You can centrally install (or deploy) Agent for Windows onto machines that are members of an Active Directory domain by using a Group Policy.


In this section, you will find out how to set up a Group Policy object to deploy agents onto machines in an entire domain or in its organizational unit.


Every time a machine logs on to the domain, the resulting Group Policy object will ensure that the agent is installed and registered. 

Step 1: Creating the .mst transform and extracting the installation package

1. Log on as an administrator on any machine in the domain.


2. Create a shared folder that will contain the installation packages. Ensure that domain users can access the shared folder—for example, by leaving the default sharing settings for Everyone.


3. Copy the setup program to the folder you created.


4. Start the setup program.


5. Click Create .mst and .msi files for unattended installation.


6. If prompted, specify the credentials of the account to which the machines should be assigned.


7. Review or modify the installation settings that will be added to the .mst file.


8. Click Generate.

 As a result, the .mst transform is generated and the .msi and .cab installation packages are extracted to the folder you created. You can now move or delete the setup program .exe file.

Step 2: Setting up the Group Policy objects

1. Log on to the domain controller as a domain administrator; if the domain has more than one domain controller, log on to any of them as a domain administrator.


2. If you are planning to deploy the agent in an organizational unit, ensure that the organizational unit exists in the domain. Otherwise, skip this step.


3. In the Start menu, point to Administrative Tools, and then click Active Directory Users and Computers (in Windows Server 2003) or Group Policy Management (in Windows Server 2008 and Windows Server 2012).


4. In Windows Server 2003:

  • Right-click the name of the domain or organizational unit, and then click Properties. In the dialog box, click the Group Policy tab, and then click New.


   In Windows Server 2008 and Windows Server 2012:

  • Right-click the name of the domain or organizational unit, and then click Create a GPO in this domain, and Link it here.


 5. Name the new Group Policy object Agent for Windows.


6. Open the Agent for Windows Group Policy object for editing, as follows:

  • In Windows Server 2003, click the Group Policy object, and then click Edit.
  • In Windows Server 2008 and Windows Server 2012, under Group Policy Objects, right-click the Group Policy object, and then click Edit.


7. In the Group Policy object editor snap-in, expand Computer Configuration.


8. In Windows Server 2003 and Windows Server 2008:

  • Expand Software Settings.


   In Windows Server 2012:

  • Expand Policies > Software Settings.


9. Right-click Software installation, then point to New, and then click Package.


10. Select the agent's .msi installation package in the shared folder that you previously created, and then click Open.


11. In the Deploy Software dialog box, click Advanced, and then click OK.


12. On the Modifications tab, click Add, and then select the .mst transform that you previously created.


13. Click OK to close the Deploy Software dialog box.


If you have any question, please browse our other FAQs, or contact us directly.


Applicable to

Online Backup users who are members of an Active Directory