Installing Situate Agent on Windows

The windows agent is distributed as a .MSI installer. This document describes how to perform this task on a single computer. If the computer is to be a member of an AD domain, it's assumed that this step has already been performed as situate will discover the security environment and configure its self appropriately.

There are many tools available for distributing and installing .MSI files in an enterprise. Steps to use those tools will not be covered in this document.

Step 1. Download the Installer

Go to XonaSoftware's Download page, expand the section for the version you want to install, expand Windows X64, and click "Basic Agent" to download the installer.

Step 2. Double Click

Double click the .MSI installer. The install process does not bring up a window. A silent install is performed.

Step 3. Add Your Agent to a Situate Domain

Once installed, you will need to add your agent to a Situate domain. The instructions for doing this can be found at Managing Assets.

Reboot

It is not necessary to reboot your computer after installing situate.

Situate is designed to be installed silently during work hours without any interruption.

Uninstall

Run a cmd.exe as administrator and enter "net stop situate agent" (Note: while this step is not necessary, it prevents windows from believing a reboot is necessary. It is not.)

Open the system menu and click "Settings". Click "System" on the Settings menu. Select "Apps & Features" from the left. Select "Situate Agent" and click "Uninstall".

Privileges and Policies

In order for Situate to run tasks as other users, it needs to have certain privileges. These are:

• Act as part of the operating system (SeTcbPrivilege)
• Replace a Process Level Token (SeAssignPrimaryTokenPrivilege)
• Adjust Memory Quotas for a Process (SeIncreaseQuotaPrivilege)
• Backup Files and Directories (SeBackupPrivilege)
• Restore Files and Directories (SeBackupPrivilege)
• Shut down the system (SeShutdownPrivilege)

As part of the installation, situate creates a local user and grants that user each of these privileges. It is important that GPO policies do not later restrict the situate user. Doing so will cause situate agent to fail to start and situate will log an error that describes the privilege it needs. For example:

10:19:20: Not running with required privilege: SeShutdownPrivilege
10:19:20: Situate has detected an installation or configuration error
10:19:20: that prevents it from continuing.