Do w need a .mst file to deploy One Identity Defender Desktop Login using gpo?

Hi Martial,

A .mst file is not required, the .msi file is sufficient to deploy Defender Desktop Login via GPO.

For more details please refer to the Admin guide section here for installing Defender Desktop Login:

https://support.oneidentity.com/technical-documents/defender/6.4.1/administration-guide/30#TOPIC-2011277

In addition, you can also apply the configuration for the Defender Desktop Login using the GPO as explained in this section of the Admin guide:

https://support.oneidentity.com/technical-documents/defender/6.4.1/administration-guide/31#TOPIC-2011279

Thanks!

thanks one again.I installed the DefenderDesktopLoginGroupPolicy.exe on the server running Defender Security Server. is it correct??

DefenderDesktopLoginGroupPolicy.exe would be installed on the Domain Controller that will be used to push the Desktop Login settings via GPO and Not on the Defender server.

After DefenderDesktopLoginGroupPolicy.exe  is installed on the Domain Controller, then you can utilize the Group Policy Management editor to create a new GPO then edit the GPO to add the Desktop Login settings under expand Computer Configuration | Policies, and then select Defender Desktop Login.

Thanks,

Hi Ahmad and thanks one again.

 We have configure Defender Server access node for Desktop login.The domain User's PC reside on a subnet 10.1.15.0 with subnet mask 255.255.255.128  with the Defender Server on the subnet 172.24.40.0 with subnet mask 255.255.255.240.  What should be the subnet mask for the access node configured on defender server  for the 10.1.15.0 network???

The Access node will use the IP range and Subnet mask for the Client machines that will authenticate against Defender.

Therefore for Desktop Login machines, the IP range could be 10.1.15.0 and subnet mask could be 255.255.255.128 for 10.1.15.0/25 range or 255.255.255.0 if you wish to allow 10.1.15.0/24 range basically allowing any IP with 10.1.15.x to authenticate against Defender.

Thanks!

Thanks ahmad.. work fine for this deployment.