Install Monitor on Windows devices

This is a guide to deploying Monitor on Windows devices with x64 processors.  

Before you begin 

Ensure you have the following installation requirements.

• At least Windows 11.
• Copy your Unique Organisation ID and UNCL Serial ID from Monitor > Organisation (select Edit) > License information.
• Download the Monitor installer sw-safeguarding-client-x64-2.10.1.msi from Monitor > Organisation (select Edit) > Clients or software.smoothwall.com.

Installation

You can choose to do this in either of two ways:

1. Creating a silent install using the command line
2. Creating an active directory group policy object (GPO)

Option 1: Create a silent install using the command line

You can create an unattended installation to push the Monitor Client out to all network devices.

1. Download the installer file.
2. Create a script that includes the following command line:

msiexec /i path-to-installer ORGID=orgid SERIALID=serialid PROXY=proxy:port ENABLEAZUREAD=#0 /qn

where:

• path_to_installer is the full network path to the location of the relevant downloaded installation program.
• orgid is the unique ID provided for your organization.
• serialid is the unique serial number for your organization, this must start UNCL and have no spaces
• proxy is your organization proxy setting. This is OPTIONAL. If you don't provide a proxy, Monitor uses the device settings. If a connection using the proxy settings fails, Monitor attempts to connect directly.
• ENABLEAZUREAD is optional, and is only supported on version 2.5.0 onwards. Set the value to "#1" if users login with Azure Active Directory credentials. This will enable the correct username/domain to be detected. If you set the value to "#0", or omit the option, then conventional (on-prem) Active Directory will be used instead.
  For example:

msiexec /i \\mynetworkdrive\downloads\Visigo_x64.msi ORGID=123456789 SERIALID=UNCL1234 /qn

You can manually modify these values after installation by editing the registry. They are stored at the following locations:

Version 2.0.0: HKEY_LOCAL_MACHINE\SOFTWARE\Smoothwall
Version 2.1.0 and later: HKEY_LOCAL_MACHINE\SOFTWARE\Smoothwall\Safeguarding Client

Option 2: Create an Active Directory Group Policy Object (GPO)

Using an Active Directory Group Policy Object (GPO), you can create an unattended installation to push the Monitor MS Client out to all network devices. For a detailed description of how to setup such a GPO, refer to your Active Directory documentation.

Create a GPO policy that:

• Deploys the installer for Windows 64-bit
• Configures the following registry settings. Please note that the settings differ whether you are using MSI version 2.0.x or 2.1.x+

For MSI version 2.1.x:

Version 2.0.0: HKEY_LOCAL_MACHINE\SOFTWARE\Smoothwall
Version 2.1.0 and later: HKEY_LOCAL_MACHINE\SOFTWARE\Smoothwall\Safeguarding Client

Value Name	Value Type	Value Data
OrgID	REG_SZ	The OrgID provided for your organization, without spaces
SerialId	REG_SZ	The UNCL serial ID provided for your organization, without spaces
ProxyServer	REG_SZ	Your organization proxy setting. This field is OPTIONAL, if no proxy is provided Monitor MS will use the device settings. If connection using the proxy settings fails Monitor MS will attempt to connect directly. Format is ip.or.host:port
EnableAzureAd	REG_DWORD	Version 2.5.0 onwards only. Indicates if your organisation uses Azure Active Directory to authenticate users. Set this to 1 if you use AzureAD, or 0 if not. Defaults to 0 if omitted. Note: If you use AzureAD but do not set this to 1 then the wrong usernames/domains may be reported to Monitor.

 

Example registry setting for OrgID and SerialId for MSI version 2.1.x and later:

Client version 1.x - for customers with just an Organisation ID

Customers who just have an organisation ID will need to use the older 1.x version installer until they are upgraded to the UNCL serial ID system.

Installation

You can install version 1.x either by creating a silent install using the command line or creating an Active Directory Group Policy Object (GPO).

Option 1: Creating a silent install using the command line

You can create an unattended installation to push the Monitor MS Client out to all network devices.

Create a script that includes the following command line:

msiexec /i "path-to-installer" ORGID="orgid" PROXY="proxy:port" /qn

where:

• path_to_installer is the full network path to the location of the relevant downloaded installation program.
• orgid is the unique ID provided for your organization.
• proxy is your organization proxy setting. This is OPTIONAL. If you don't provide a proxy, Monitor uses the device settings. If a connection using the proxy settings fails, Monitor attempts to connect directly.

For example:

msiexec /i \\mynetworkdrive\downloads\Visigo_x64.msi ORGID=123456789 /qn

Option 2: Creating an active directory group policy object (GPO)

Using an Active Directory Group Policy Object (GPO), you can create an unattended installation to push the Monitor MS Client out to all network devices. For a detailed description of how to setup such a GPO, refer to your Active Directory documentation.

1. Contact our Support Team for a copy of the version 1.x installer.
2. Create a GPO policy that deploys installer. 
3. Configure the following registry settings:

Hive Name HKEY_LOCAL_MACHINE
Key Path SOFTWARE\Smoothwall

Value Name	Value Type	Value Data
OrgID	REG_SZ	The unique ID provided for your organization.
ProxyServer	REG_SZ	Your organization proxy setting. This field is OPTIONAL, if no proxy is provided Monitor MS will use the device settings. If connection using the proxy settings fails Monitor MS will attempt to connect directly. Format is ip.or.host:port

 

Example registry setting for OrgID:

Hive Name HKEY_LOCAL_MACHINE
Key Path SOFTWARE\Smoothwall