Install Monitor on Windows devices

This article takes you through the installation steps for Monitor on Windows devices. 

Before you begin 

• You must be an IT Contact in Monitor. 

• Your Windows device should be running on Windows 11 or later.

• Secure a copy of your Unique Organisation ID and UNCL Serial ID.

  1. Go to Settings > Configuration.

  2. Select Config on your organization’s row.

  3. Under License information on the configuration panel, select the clipboard icons for Organization ID and UNCL serial.

• Download the Monitor client installer. You can download the client installer either from Monitor or the Smoothwall Product Download page.

  Source	Steps
  Monitor	Go to Settings > Configuration and select Config for your organisation. Under Install Monitor clients, select your Windows version:   Windows 64-bit  Windows ARM Save the installer in your folder.
  Smoothwall Product Download	On the Smoothwall Product Download page, select Windows - x64 and ARM. Download the installer to your folder. Unzip the file and use only the installers for your Windows devices.   sw-safeguarding-client-arm64-2.1x.x.msi for ARM devices sw-safeguarding-client-x64-2.1x.x.msi for 64-bit devices.

Install Monitor

You can install Monitor using either of the two methods: 

1. Silent installation using a command line  

2. Push installation using Active Directory Group Policy Object (GPO) 

Option 1: Perform a silent install using the command line

1. Create a script with the following command line:

   msiexec /i path-to-installer ORGID=orgid SERIALID=serialid PROXY=proxy:port ENABLEAZUREAD=#0 /qn

   Where:

   • path_to_installer is the full network path to the downloaded installation program.

   • orgid is the unique ID provided for your organisation.

   • serialid is the unique serial number for your organisation. This must start with UNCL and have no spaces.

   • proxy (optional) is your organisation's proxy setting. Monitor uses device settings if you don’t provide this. If the proxy connection fails, Monitor attempts to connect directly.

   • ENABLEAZUREAD (optional) is supported only from version 2.5.0 onwards. Set the value to "#1" if users log in with Azure Active Directory credentials. This value will activate the detection of the correct username/domain. If you set the value to "#0" or omit the option, then conventional (on-prem) Active Directory will be used.

   For example:

   msiexec /i \\mynetworkdrive\downloads\sw-safeguarding-client-arm64-2.10.1.msi ORGID=123456789 SERIALID=UNCL1234 /qn

2. You can modify these values after installation by editing the registry stored in the following locations:

   • Version 2.0.0: HKEY_LOCAL_MACHINE\SOFTWARE\Smoothwall

   • Version 2.1.0 and later: HKEY_LOCAL_MACHINE\SOFTWARE\Smoothwall\Safeguarding Client

Option 2: Push installation using Active Directory GPO

Use a GPO to create an unattended installation of Monitor on Windows devices in your network.

1. Create a GPO policy that deploys the Monitor client.

2. Configure the following registry settings.  

   Settings for MSI version 2.1.x

   Value Name	Value Type	Value Data
   Hive Path	Key Path	HKEY_LOCAL_MACHINE\SOFTWARE\Smoothwall\Safeguarding Client
   OrgID	REG_SZ	Your organization’s OrgID
   SerialId	REG_SZ	Your organization’s UNCL serial ID.
   ProxyServer	REG_SZ	Your organisation's proxy setting. Enter the value in this format:  ip.or.host:port This field is optional. If no proxy is provided, Monitor MS will use the device settings. If connections using the proxy settings fail, Monitor MS will attempt to connect directly.
   EnableAzureAd	REG_DWORD	Version 2.5.0 onwards only. This indicates whether your organisation uses Azure Active Directory to authenticate users. Set it to 1 if you use Azure AD, and to 0 if not. It defaults to 0 if the value is omitted.   Warning If you use Azure AD but do not set this to 1, then the wrong usernames/domains may be reported to Monitor.