Deploy the Desktop Agent via Active Directory GPO (Windows)

Roll out the Zeuslock desktop agent to your domain-joined Windows machines with Group Policy: download the MSI, create config.json, and assign it via Software Installation, with a silent-install alternative for SCCM.

Deploy the agent to your domain-joined Windows machines using Group Policy.

Prerequisites

  • Windows 10/11 or Windows Server 2016+.
  • Administrator rights for installation.
  • Network access to your Zeuslock API URL.

Step 1 — Download the agent

From Agents → Deployment → Windows → View instructions, download zeus-agent-windows.msi and place it on a network share all target machines can reach.

Step 2 — Create the configuration file

Create config.json in C:\ProgramData\Zeus\:

{
  "api_url": "https://api.zeuslock.ai",
  "api_key": "YOUR_API_KEY",
  "monitor_clipboard": true,
  "monitor_ai_apps": true,
  "show_notifications": true
}

Step 3 — GPO deployment

  1. Open Group Policy Management Console (gpmc.msc).
  2. Create or edit a GPO linked to your target OUs.
  3. Navigate to: Computer Configuration → Policies → Software Settings → Software Installation.
  4. Right-click → New → Package → select the MSI file from the network share.
  5. Deploy config.json via GPO Preferences (Files).

Alternative — silent install command

For SCCM or a logon script:

msiexec /i zeus-agent-windows.msi /quiet /norestart API_URL="https://api.zeuslock.ai" API_KEY="YOUR_API_KEY"

Verify

Machines apply the policy at the next reboot or gpupdate, then appear under Installed agents on the Agents page.