Using Group Policy (GPO)

The CrashPlan Platform installer requires Administrator privileges. In almost all cases, you should use Intune or SCCM to deploy the installer on Windows. When a user has already logged in, an admin cannot install the agent using GPO - You would need to temporarily change them into an admin for their device to perform a GPO installation and revoke admin privileges after.

You can install the CrashPlan Platform through GPO using a Logon script. The script runs when the user has logged in and checks if the user has the agent installed. If the agent is not installed it runs a silent install from a network location accessible during user sign on.

Installing the agent through GPO

  1. Make the desired users local admins:

  • Create a Domain Account called Local Admin.

  • Add all users to this group.

  • Within Group Policies, navigate to Computer > Preferences > Control Panel > Local Users & Groups > Group

  • Select Built-in Administrator

  • Add Domain Name\Local Admin

  • Link this GPO to the domain and enforce the policy.

  1. Create a GPO for the Logon Script

  • Change the IP address in the script (checkninstall.bat) to point to a location where the silent installer is accessible.

  • Create a new GPO, right click it and select Edit.

  • Navigate to User Configuration > Policies > Windows Settings > Scripts > logon

  • Right click on Properties, select Add and point to a UNC path containing the script, which must be accessible to all users on sign in.

  • Navigate to Computer Configuration > Policies > Administrative Templates > System > Group Policy > Configure Logon Script Delay and set the logon script delay to 0.

  1. Revert the built-in administration privileges:

  • Create a GPO to remove local admin privileges.

  • In GPO navigate to Computer > Preferences > Control Panel > Local Users & Groups > Group

  • Select Built-in Administrator.

  • Select Remove Domain Name\Local Admin

  • Link this GPO to the Domain.