Script based deployment of LS Agent to Linux and Windows servers

[flindeborg]

HAs anyone had experience creating or using a script based deployment of LSAgent to Linux and Windows servers? We are attempting to deploy to all rather than to each one individually. We have over 250 servers\VM's to deploy to. None of the servers are in the Azure Entra Cloud. 

[ErikT · Accepted solution]

Hi @flindeborg , 

Have you checked Ansible or Salt? Both are worth looking at in this scenario. 

https://www.redhat.com/en/ansible-collaborative

https://docs.saltproject.io/en/3006/topics/index.html
 

[cnf_sw72 · Accepted solution]

Hi @flindeborg ,

I'm just going through motions on Windows devices now and having success triggering the deployment from a central network share such as NETLOGON using the below powershell script

Start-Process -FilePath "\\Windows_SMBShare\LsAgent-windows.exe" -ArgumentList "--server LS_Server_FQDN --port 9524 --mode unattended" -Wait

Edit that to your share and server details and run the .ps1 file as a startup powershell script from a gpo seems to do the trick. That way it can tie in with your regular reboot schedules or ran manually if needed.

Hope that helps for the Windows boxes at least!

[flindeborg]

Thanks to all who responded to my post. I was able to use Ansible to deploy the LS Agent to our Linux assets successfully. Created the inventory of servers by IP Address in Ansible and then ran the attached script. I am posting the script here for any other "Sweepers" that might find themselves in need to replicate in their environment.

[flindeborg]

Thanks ErikT. I was able to use Ansible and script I created to successfully d3eploy to Linux boxes.

I will be testing deployment to Windows servers using G{PO and Powershell script suggested by another community member

[cnf_sw72 · Accepted solution]

Hi @flindeborg ,

I'm just going through motions on Windows devices now and having success triggering the deployment from a central network share such as NETLOGON using the below powershell script

Start-Process -FilePath "\\Windows_SMBShare\LsAgent-windows.exe" -ArgumentList "--server LS_Server_FQDN --port 9524 --mode unattended" -Wait

Edit that to your share and server details and run the .ps1 file as a startup powershell script from a gpo seems to do the trick. That way it can tie in with your regular reboot schedules or ran manually if needed.

Hope that helps for the Windows boxes at least!

[flindeborg]

Thanks cnf_sw72! I was able to create and deploy to Linux assets using Ansible which I will post in Community at a later time.

I had begun creating a powershell script with the attached but was going to adjust and use the attached via a GPO. Any idea how I specify the servers? I listed by IP Address in Linux script. 

[cnf_sw72 · Accepted solution]

So for me I used the script as is.

I was deploying to all servers so I set the scope to Authenticated Users in gpo and linked the gpo at the required OU level. 

But depending on how your domain is laid out you could set the scope to individual computers or bundle them into a group and set the scope to the group 

[flindeborg]

Thanks again! Will give it a try!

[cnf_sw72]

No trouble at all. Hope you get sorted!

[ErikT · Accepted solution]

Hi @flindeborg , 

Have you checked Ansible or Salt? Both are worth looking at in this scenario. 

https://www.redhat.com/en/ansible-collaborative

https://docs.saltproject.io/en/3006/topics/index.html