This document explains how to deploy the agent via Group Policy



Step 1 download the MSI

Download the MSI (Microsoft Installer) package which is used for installing software on Windows systems.


On the portal under settings you can download "Windows Workstation (MSI, requires api credentials)", you can also download directly via https://lupasafe.com/client_software/latest/Skopos%20Agent%20-%20GPO.msi


Step 2 generate API credentials

On the same page you can generate the API credentials. Just click "Generate API credentials". Make sure to store the username and password for later use. These credentials are necessary for authenticating the agent with our service.


Step 3 download & install ORCA

Orca will allow us to modify the MSI package to include the API credentials generated in Step 2. Orca.exe is a database table editor for creating and editing Windows Installer packages and merge modules. The tool provides a graphical interface for validation, highlighting the particular entries where validation errors or warnings occur. 


Download ORCA from Microsoft, for example via https://learn.microsoft.com/en-us/windows/win32/msi/orca-exe


Step 4 prepare the MSI 

Adjusting the Skopos Agent GPO to include your API credentials is a straightforward process:


Open ORCA and load the original Skopos agent MSI file via File and Open. 


In the Tables section, go to Property and fill in the values for USER_NAME and USER_PASSWORD with the API values. Save the MSI file again. 

Please note that you should not create a new MSI, but save the modification in the original MSI.


Save the modified MSI in a secure location to prevent unauthorized access, given that it contains sensitive API credentials.


Step 5 continu deployment of the modified MSI via GPO

This process outlines how to deploy the modified MSI to endpoints within your organization via GPO, ensuring the Agent is installed on the specified computers. We recommend to generate a new GPO. 


  1. Open Group Policy Management Console (GPMC):

    • Press Win + R, type gpmc.msc, and press Enter.

  2. Create or Locate a GPO:

    • If you already have a GPO for software deployment, locate and select it.
    • If not, right-click on the domain or Organizational Unit (OU) where you want to deploy the software, select Create a GPO in this domain, and Link it here..., name the GPO, and click OK.

  3. Edit the GPO:

    • Right-click on the GPO you just created or located, and select Edit.

  4. Navigate to Software Installation:

    • In the Group Policy Management Editor, navigate to Computer Configuration > Policies > Software Settings > Software installation.

  5. Deploy the MSI:

    • Right-click on Software installation, select New > Package.
    • Browse to the location of the modified MSI file, select it, and click Open.
    • Choose Assigned and click OK. This will install the software on all computers the next time they restart.

  6. Configure Additional Settings if Necessary:

    • If there are any additional settings or configurations required for the software, configure them within the GPO.

  7. Close the Group Policy Management Editor and GPMC:

    • Close the Group Policy Management Editor and the Group Policy Management Console.

  8. Force Group Policy Update (Optional):

    • If you want to expedite the deployment, you can force a Group Policy update on the endpoints by running the command gpupdate /force on each endpoint or by using a remote management tool to execute the command remotely.

  9. Verify Installation:

    • After the endpoints have restarted, verify the installation of the software by checking the installed programs list or the application's designated log files.