Install Monitor on Windows devices

This article takes you through the installation steps for Monitor on Windows devices. 

Before you begin 

• You must be an IT Contact in Monitor. 
• Your Windows device should be running on Windows 11 or later.

• Secure a copy of your Unique Organisation ID and UNCL Serial ID.

  Monitor version	Steps
  Monitor 2.0	Go to Settings > Configuration. Select Config on your organization’s row. Under License information on the configuration panel, select the clipboard icons for Organization ID and UNCL serial.
  Legacy Monitor	In Monitor > Organizations, select Edit on your organization’s tile. Select Licensing information on the left navigation menu. Select the Copy icons next to the UNCL serial and Organization ID codes.

• Download the Monitor client installer.

  Monitor version	Steps
  Monitor 2.0	Go to Settings > Configuration and select Config for your organization. Under Install Monitor clients, select your Windows version:   Windows 64-bit  Windows ARM Download the installer to your folder.
  Legacy Monitor (For Windows 64-bit devices only)	In Monitor > Organizations, select Edit on your organization’s tile. Select Clients on the left navigation menu. Select the Operating System. Select Get and download the installer to your folder.
  Both	Go to the Smoothwall Product Download page. Select Windows - x64 and ARM. Download the installer to your folder. Unzip the file and use only the installers for your Windows devices.   sw-safeguarding-client-arm64-2.1x.x.msi for ARM devices sw-safeguarding-client-x64-2.1x.x.msi for 64-bit devices.

Install Monitor

You can install Monitor using either of the two methods: 

1. Silent installation using a command line  
2. Push installation using Active Directory Group Policy Object (GPO) 

Option 1: Perform a silent install using the command line

1. Create a script with the following command line:

   msiexec /i path-to-installer ORGID=orgid SERIALID=serialid PROXY=proxy:port ENABLEAZUREAD=#0 /qn

   Where:

   • path_to_installer is the full network path to the downloaded installation program.
   • orgid is the unique ID provided for your organization.
   • serialid is the unique serial number for your organization. This must start UNCL and have no spaces
   • proxy (optional) is your organization's proxy setting. Monitor uses device settings if you don’t provide this. If the proxy connection fails, Monitor attempts to connect directly.
   • ENABLEAZUREAD (optional) is supported only from version 2.5.0 onwards. Set the value to "#1" if users log in with Azure Active Directory credentials. This value will activate the detection of the correct username/domain. If you set the value to "#0" or omit the option, then conventional (on-prem) Active Directory will be used.

   For example:

   msiexec /i \\mynetworkdrive\downloads\sw-safeguarding-client-arm64-2.10.1.msi ORGID=123456789 SERIALID=UNCL1234 /qn

2. You can modify these values after installation by editing the registry stored in the following locations:
   • Version 2.0.0: HKEY_LOCAL_MACHINE\SOFTWARE\Smoothwall
   • Version 2.1.0 and later: HKEY_LOCAL_MACHINE\SOFTWARE\Smoothwall\Safeguarding Client

Option 2: Push installation using Active Directory GPO

Use a GPO to create an unattended installation of Monitor on Windows devices in your network.

1. Create a GPO policy that deploys the Monitor client.

2. Configure the following registry settings.  

   Settings for MSI version 2.1.x

   Value Name	Value Type	Value Data
   Hive Path	Key Path	HKEY_LOCAL_MACHINE\SOFTWARE\Smoothwall\Safeguarding Client
   OrgID	REG_SZ	Your organization’s OrgID
   SerialId	REG_SZ	Your organization’s UNCL serial ID.
   ProxyServer	REG_SZ	Your organization proxy setting. Enter the value in this format:  ip.or.host:port This field is optional. If no proxy is provided, Monitor MS will use the device settings. If connections using the proxy settings fail, Monitor MS will attempt to connect directly.
   EnableAzureAd	REG_DWORD	Version 2.5.0 onwards only. This indicates whether your organization uses Azure Active Directory to authenticate users. Set it to 1 if you use Azure AD, and to 0 if not. It defaults to 0 if the value is omitted.   Warning If you use Azure AD but do not set this to 1, then the wrong usernames/domains may be reported to Monitor.