Install Trellix Agent 5.8.x on Windows using logon scripts

You can install Trellix Agent 5.8.x using logon scripts on Windows systems. The logon script runs when user logs on to the network and checks if Trellix Agent is installed on the client system, and, if not, then installs it.

System Tree groups represent a collection of systems. You must group and organize systems in your network. By default, all systems are added to the Lost & Found group, and you must move them manually to the required group.
Refer to Windows operating system documentation to create a logon script.
We recommend this method when:
- The domain names or sorting filters are assigned to your System Tree groups.
- You already have a managed environment and want to make sure that new systems logging on to the network are managed and are running a current version of Trellix Agent.

Create Trellix Agent installation package.
1. On the ePO - On-prem console, select Menu → Systems → System Tree, then select New Systems.
2. Select Create and download agent installation package.
3. Select the appropriate Embedded Agent version for Windows from the list.
4. Specify the embedded credentials.
  You can specify the embedded credentials only for Agent Embedded package for Windows. For Agent package for Windows, deselect the Embed Credentials in Package checkbox to receive the default package.
5. Assign the appropriate Agent Handler to communicate with ePO - On-prem server for deployment:
  - All Agent Handlers: All Agent Handlers can communicate with ePO - On-prem server.
  - Select Agent Handler: Select a specific Agent Handler from the list that you prefer to communicate with ePO - On-prem server.
    Additionally, you can select one more Agent Handler from Secondary Agent Handler if the agents are unable to communicate with the primary Agent Handler.
6. Click OK.
  The installation package file FramePkg.exe is created.
7. Right-click and save the file.
8. Copy the installation package file from the ePO - On-prem console to a shared folder on a network server accessible by the target system.
  Systems logging on to the network are automatically directed to this shared folder to run the installation package and install Trellix Agent.
  - For ePO - On-prem 5.10.0 Service Pack 1 or later, the default location of the installation package file is: <Program Files>\Trellix\ePolicy Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409\FramePkg.exe.
  - For ePO - On-prem 5.10.0 or earlier, the default location of this installation package file is: <Program Files>\McAfee\ePolicy Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409\FramePkg.exe.
Create a batch file ePO.bat that contain commands to execute on systems when user logs on to the network. The batch file checks for the registry entry and verify if Trellix Agent is installed in the shared folder.
This example shows the /install command-line option and checks the default installation path for Trellix Agent files.
```
@ECHO OFF
SETLOCAL
set MA_KEY_NAME="HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\Agent"
set MA_VALUE_NAME=InstallPath

FOR /F "usebackq skip=2 tokens=1,2*" %%A IN (
 `REG QUERY %MA_KEY_NAME% /v %MA_VALUE_NAME% 2^>nul`) DO (
    set Home="%%C"
)

IF DEFINED home SET home=%home:"=%
if defined Home echo "McAfee Agent 5.0 is already installed"
if NOT defined Home "\\MyServer\Agent$\Update\FramePkg.exe /install=agent"
exit /b 0
```
For more information on installing, upgrading, and managing Trellix Agent using commands, see command-line options for Trellix Agent.
Save the batch file ePO.bat to the NETLOGON$ folder of your primary domain controller (PDC) server.
The batch file runs from the PDC server every time a system logs on to the network.
Add a line to your logon script that calls the batch file on your PDC server.
For example: CALL \\<PDC>\NETLOGON$\EPO.BAT