Kapsul Agent Installation via GPO

Deploy the Kapsul agent on your Windows servers via Group Policy

The Kapsul agent can be centrally deployed across all your Windows servers using Microsoft Active Directory Group Policy Objects (GPO).

Prerequisites

  • Administrative rights on the domain controller
  • Windows servers joined to the domain
  • Kapsul MSI package downloaded
  • Kabeen API key

Step 1: Prepare Network Share

  1. Create a shared folder accessible by all servers
  2. Copy the Kapsul MSI file to this share
  3. Verify permissions: computer accounts must have read access
\\server\share\kapsul\kapsul-agent.msi

Step 2: Create Deployment GPO

  1. Open the Group Policy Management console

  2. Create a new GPO linked to the OU containing your servers

  3. Edit the GPO and navigate to:

    • Computer Configuration > Policies > Software Settings > Software Installation

  4. Right-click > New > Package

  5. Select the MSI file from the UNC network path

  6. Choose Assigned as the deployment method

Step 3: Configure API Key

The Kapsul agent requires an API key for authentication. Configure it via Group Policy Preferences:

  1. In the same GPO, navigate to:

    • Computer Configuration > Preferences > Windows Settings > Registry

  2. Create a new registry entry:

    • Action: Create
    • Hive: HKEY_LOCAL_MACHINE
    • Path: SOFTWARE\Kabeen\Kapsul
    • Value name: ApiKey
    • Type: REG_SZ
    • Data: Your Kabeen API key

Step 4: Apply and Verify

  1. Force policy update on a test server:
gpupdate /force
  1. Restart the server to trigger installation
  2. Verify the Kapsul service is running:
sc query kapsul

Security Group Filtering

For gradual deployment:

  1. Create a security group (e.g., "Servers-Kapsul")
  2. In the GPO, Delegation tab > Advanced
  3. Remove "Authenticated Users" from application
  4. Add your group with "Read" and "Apply" rights

Troubleshooting

Installation doesn't start

  • Verify UNC path is accessible from the server
  • Check Windows event logs (Application + System)
  • Verify permissions on share and MSI file

Service doesn't start

  • Verify API key is correctly configured in registry
  • Check Kapsul logs in C:\ProgramData\Kabeen\Kapsul\logs
  • Verify network connectivity to api.kabeen.io:443
PreviousManual Kapsul Agent InstallationNextSilent Kapsul Agent Installation on Linux