Fortinet black logo

Version:

7.2.1
7.2.0
7.0.9

Version:

7.0.8
7.0.7
7.0.6

Version:

7.0.4
7.0.3
7.0.2

Version:

7.0.1
7.0.0
6.4.9

Version:

6.4.8
6.4.7
6.4.4

Version:

6.4.3
6.4.2
6.4.1

Version:

6.4.0
6.2.9
6.2.8

Version:

6.2.7
6.2.6
6.2.4

Version:

6.2.3
6.2.2
6.2.1

Version:

6.2.0
6.0.8
6.0.6

Version:

6.0.5
6.0.4
6.0.3

Version:

6.0.2
6.0.1
6.0.0

Table of Contents

EMS Administration Guide

6.0.4
7.2.1
7.2.0
7.0.9
7.0.8
7.0.7
7.0.6
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.9
6.4.8
6.4.7
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.9
6.2.8
6.2.7
6.2.6
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.0.8
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
Download PDF
Copy Doc ID 2794de92-fe56-11e8-b86b-00505692583a:12424
Copy Link

Preparing Windows endpoints for FortiClient deployment

The following services must be enabled and configured on each Windows endpoint before FortiClient is deployed to them:

  • Task Scheduler: Automatic
  • Windows Installer: Manual
  • Remote Registry: Automatic

The Windows Firewall must be configured to allow the following inbound connections:

  • File and Printer Sharing (SMB-In)
  • Remote Scheduled Tasks Management (RPC)

For AD group deployments, an AD administrator account is required. For non-AD deployments, the installer URL can be shared with users, who can then download and install FortiClient manually. You can locate the installer URL in Manage Installers. Go to Profile Components > Manage Installers.

note icon

When adding endpoints using an Active Directory domain server, FortiClient EMS automatically resolves endpoint IP addresses during initial deployment of FortiClient. FortiClient EMS can deploy FortiClient (Windows) to Active Directory endpoints that do not have FortiClient installed, as well as upgrade existing FortiClient installations if the endpoints are already connected to the EMS server.

Previous
Next

Preparing Windows endpoints for FortiClient deployment

The following services must be enabled and configured on each Windows endpoint before FortiClient is deployed to them:

  • Task Scheduler: Automatic
  • Windows Installer: Manual
  • Remote Registry: Automatic

The Windows Firewall must be configured to allow the following inbound connections:

  • File and Printer Sharing (SMB-In)
  • Remote Scheduled Tasks Management (RPC)

For AD group deployments, an AD administrator account is required. For non-AD deployments, the installer URL can be shared with users, who can then download and install FortiClient manually. You can locate the installer URL in Manage Installers. Go to Profile Components > Manage Installers.

note icon

When adding endpoints using an Active Directory domain server, FortiClient EMS automatically resolves endpoint IP addresses during initial deployment of FortiClient. FortiClient EMS can deploy FortiClient (Windows) to Active Directory endpoints that do not have FortiClient installed, as well as upgrade existing FortiClient installations if the endpoints are already connected to the EMS server.

Previous
Next