Network software deployment

[TheTwist]

Anyone know a good network deploy software?

 

I will need to deploy some software to about 15 - 25 computers on the name network.

However these computers will not be on a domain so the deployment software will need to detect all the computers on the network then I can select the ones I want to deploy too.

[Sir Asvald]

Take a look at https://www.pdq.com/pdq-deploy/

[TheTwist]

4 hours ago, Sir Asvald said:

Take a look at https://www.pdq.com/pdq-deploy/

Thanks, looks pretty good, just having issues with understanding switches and parameters. 

[jec6613]

Warning: there be dragons ahead.

 

Got cash?  Microsoft ECM or Azure Insight.  Both support workgroup systems securely.  For Macs: JAMF.  Want config by code?  Chef.

 

Don't have cash?  Have a startup .bat file on each PC call a network shared install script or stack of scripts, secured and version controlled.

 

Most other solutions, like PDQ, end up iffy without central authentication.  The reason is that you have to have centralized credentials that can administer all systems, and this is a huge attack vector and security risk, since the credentials are exposed on each and every system.  And more generally: central management systems are always a security risk and need to be locked down heavily, even good ones.  ECM and Azure Insight do it with certificate trusts and locked down AD accounts that present kerberos tickets, so you're not sending credentials over the wire.  PDQ can be set up that way, but in reality it's little better than a centralized script repository in terms of management overhead.

[TheTwist]

6 hours ago, jec6613 said:

Don't have cash?  Have a startup .bat file on each PC call a network shared install script or stack of scripts, secured and version controlled.

 

 

Hm thanks,  I better start learning some scripting haha.  So every restart it will read a 'server' and if the folder has an update it will pull the new stuff down?  Most of these software are exe's  but a few msi's. 

 

[jec6613]

6 hours ago, TheTwist said:

 

Hm thanks,  I better start learning some scripting haha.  So every restart it will read a 'server' and if the folder has an update it will pull the new stuff down?  Most of these software are exe's  but a few msi's. 

 

I'd use a very simple cmd or bat file that points to a static entry point, then script that runs each install script to silent install each app. Also, you'll need this running at system startup, not user logon (so this is a local policy setting). And as a best practice, the script should verify if it's installed or not before running, either by dropping a custom registry key or checking files.