Deploy scenarios

The NetSupport School Deploy tool can be used to deploy to machines in both domain and workgroup environments.

See below for information on how to implement NetSupport School Deploy in each of these environments:

Domain environment

When using the NetSupport School Deploy tool within a domain environment, Windows Group Policy settings can be used to configure the target PCs with the required settings (detailed above) to permit the deployment of the NetSupport School components to these PCs.

Network discovery

In order for domain PCs to appear in the Windows Networking view of the NetSupport School Deploy tool, the Network Discovery setting needs to be enabled on the target PCs.

The network discovery setting can be enabled by applying the Windows Group Policy setting to the domain PCs:

  1. Open the Group Policy Management Microsoft tool.

  2. Either create a new Group Policy Object or select an existing Group Policy Object that will be applied to the required target PCs.

  3. Select to edit your chosen Group Policy Object.

  4. The Group Policy Management Editor will open.

  5. Navigate to the following location:

    Computer Configuration - Policies - Windows Settings - Security Settings - Windows Firewall with Advanced Security - Inbound Rules

  6. From the Actions menu, choose New Rule.

  7. For the first Rule type, choose the Pre-defined option and select {Network Discovery} from the drop-down menu and click Next.

  8. Select Next on the Pre-defined Rules step.

  9. The Action step will then appear - select the Allow the Connection option.

  10. Click Finish.

The next time the domain PCs are restarted or the Group Policy refreshes on the PCs, the Network Discovery option will be added to the Windows Firewall. This will allow the PCs to be seen within the Windows network view of the NetSupport School Deploy tool.

File and print sharing

To allow the NetSupport School Deploy tool to connect to the target PC's Admin$ share to transfer the NetSupport School installer files, file and print sharing access will need to be enabled on the target PCs.

This setting can be enabled centrally by applying the below Windows Group Policy setting to the domain PCs:

  1. Open the Group Policy Management Microsoft tool.

  2. Either create a new Group Policy Object or select an existing Group Policy Object that will be applied to the required target PCs.

  3. Select to edit your chosen Group Policy Object.

  4. The Group Policy Management Editor will open.

  5. Navigate to the following location:

    Computer Configuration - Policies - Administrative Templates - Network - Network Connections - Windows Firewall - Domain Profiles

  6. Select the following Policy from the above location:

    Windows Firewall: Allow inbound file and printer sharing exception.

  7. Set the above Policy to Enabled.

The next time the domain PCs are restarted or the Group Policy refreshes on the PCs, it will then be possible to access the Admin$ share for these PCs.

Workgroup environment

When using the NetSupport School Deploy tool in a workgroup environment, ensure that the target PCs have been correctly configured with the items highlighted in the 'What are the requirements?' section.

Within a workgroup environment, these configurations will need to be made locally on the target PC:

Network discovery

In order for PCs in a workgroup to appear in the Windows Networking view of the NetSupport School Deploy tool, the Network Discovery setting needs to be enabled on each of the target PCs.

  1. Log on with local administrator rights to the target PC.

  2. Access the Control Panel.

  3. Open the Network and Sharing Centre.

  4. Select Change advanced sharing settings.

  5. Ensure that under your network profile the Network Discovery option is configured to: Turn on network discovery.

  6. Save changes.

File and print sharing

In order to deploy the NetSupport School Deploy tool to your PCs within a workgroup environment, you will need to ensure that file and print sharing is enabled on each of the target PCs.

  1. Open the Control Panel.

  2. Select Windows Defender Firewall.

  3. Choose the option Allow an app or feature through Windows Defender Firewall.

  4. Select the option to allow File and Printer Sharing and the associated exception (private and public). Click OK to save the changes.

Sharing and security model

In order to use the NetSupport School Deploy utility to remotely access the PCs within a workgroup using an administrator account, the sharing and security local policy will need to be configured to Classic mode on each of the target PCs.

  1. In Administrative Tools, select Local Security Policy.

  2. Select Security Settings - Local Policies - Security Options.

  3. Select Network access: Sharing and security model for local accounts.

  4. Alter the setting for this policy to Classic - local users authenticate as themselves.

UAC remote restrictions

For machines within a workgroup environment, you may need to disable UAC remote restrictions on these target PCs by following the steps below:

  1. Click Start, then click Run, type regedit and then press Enter.

  2. Locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

  3. If the LocalAccountTokenFilterPolicy registry entry does not exist, follow these steps:

    1.     On the Edit menu, select New, and then click DWORD Value.

    2.     Type LocalAccountTokenFilterPolicy, and then press Enter.

    3.     Right-click LocalAccountTokenFilterPolicy, and then click Modify.

    4.    In the Value data box type 1, and then click OK.

  4. Exit the Registry Editor.

See also:

Common errors