Deploy the Citrix Secure Access agent from Active Directory
If users do not have administrative privileges to install the Citrix Secure Access agent on the user device, you can deploy the plug-in for users from Active Directory. When you use this method to deploy the Citrix Secure Access agent, you can extract the installation program and then use a group policy to deploy the program. The general steps for this type of deployment are:
- Extracting the MSI package.
- Distributing the plug-in by using a group policy.
- Creating a distribution point.
-
Assigning the Citrix Secure Access agent package by using a Group Policy Object.
Note: Distribution of the Citrix Secure Access agent from Active Directory is only supported on Windows 7, Windows 8, and Windows 10.
You can download the MSI package from the configuration utility or from the Citrix website.
To download the Citrix Secure Access agent MSI package from the configuration utility
-
In the configuration utility, click Downloads.
-
Under Citrix Secure Access agent, click Download Citrix Gateway Plugin for Windows and then save the file nsvpnc_setup.exe to your Windows server.
Note:
-
For 64-bit machines, you must save the file Agee_setup.exe to your Windows server.
-
If the File Download dialog box does not appear, press the CTRL key when you click the link Download Citrix Secure Access agent for Windows.
-
-
At a command prompt, navigate to the folder where you saved nsvpnc_setup.exe to and then type:
nsvpnc_setup /c <!--NeedCopy-->This extracts the file agee.msi.
Note: For 64-bit machines, navigate to the folder where you saved Agee_setup.exe to and then type:
Agee_setup.exe /c <!--NeedCopy-->This extracts the file agee64.msi.
-
Save the extracted file to a folder on the Windows server.
After you extract the file, use a group policy on Windows Server to distribute the file.
Before starting the distribution, install the Group Policy Management Console on Windows Server 2003, Windows Server 2008, or Windows Server 2012. For more information, see the Windows online help.
Note: When you use a group policy to publish the Citrix Secure Access agent, Citrix recommends assigning the package to the user device. The MSI package is installed on a per-device basis.
Before you can distribute the software, create a distribution point on a network share on a publishing server, such as the Microsoft Internet Security and Acceleration (ISA) Server.
To create a distribution point
- Log on to the publishing server as an administrator.
- Create a folder and share it on the network with read permission for all accounts that need access to the distribution package.
- At the command prompt, navigate to the folder where you save the extracted file and then type: msiexec -a agee.msi
- On the Network Location screen, click Change and then navigate to the shared folder where you want to create the administrative installation of the Citrix Secure Access agent.
- Click OK and then click Install.
After you have put the extracted package on the network share, assign the package to a Group Policy Object in Windows.
After you configure the Citrix Secure Access agent successfully as a managed software package, the plug-in is installed automatically the next time the user device starts.
Note: When the installation package is assigned to a computer, the user must restart the computer.
When the installation starts, users receive a message that the Citrix Secure Access agent is installing.