Installing the Centrify Browser Extension for IE on remote Windows computers

You can automate the installation of the Centrify Browser Extension(Internet Explorer version) onto remote Windows computers using a silent installation or using a Windows Group Policy Object (GPO).

Computers must have Microsoft Installer 3.1 or later to install the Centrify Browser Extension.

To deploy the browser extension on remote Windows computers using a “silent” unattended installation or using a GPO, you need to specify the appropriate command line options and Microsoft Windows Installer (MSI) file. You can also use a software distribution product, such as Microsoft System Center Configuration Manager (SCCM), to deploy software packages.

An automated installation may fail if remote computers do not have the appropriate configuration. If you are installing silently or from a GPO, verify that the remote Windows computers meet the requirements described in System requirements and supported browsers.

To install the Centrify Browser Extension for Windows silently:

  1. Open a Command Prompt window or prepare a software distribution package for deployment on remote computers.

    For information on preparing to deploy software on remote computers, see the documentation for the specific software distribution product you are using. For example, if you are using Microsoft System Center Configuration Manager (SCCM), see the Configuration Manager documentation.

  2. Run the installer for the browser extension package for a 32-bit or 64-bit architecture.

    Note:   If the system has a 64-bit operating system, use the 64-bit package, CentrifyIEExtensionSetup(x64).msi. CentrifyIEExtensionSetup(x64).msi includes the binary for both 32-bit and 64-bit versions of Internet Explorer.

    For example, on 32-bit operating systems, run the following command:

    msiexec /qn /i "CentrifyIEExtensionSetup(x86).msi"

    On 64-bit operating systems, run the following command:

    msiexec /qn /i "CentrifyIEExtensionSetup(x64).msi"

To install the Centrify Browser Extension from a Group Policy Object:

  1. Copy the CentrifyIEExtensionSetup(x64).msi files to a shared folder on the domain controller or another location accessible from the domain controller.

    If you are installing on a 32-bit architecture, the installer file name is CentrifyIEExtensionSetup(x86).msi. When you select a folder for the installer file, you might want to right-click and select Share with > Specific people to verify that the folder is shared with Everyone or with appropriate users and groups.

  2. On the domain controller, click Start > Administrative Tools > Group Policy Management.
  3. Select the domain or organizational unit that has the Windows computers where you want to deploy the browser extension, right-click, then select Create a GPO in this domain, and Link it here.

    For example, you might have an organizational unit specifically for Privileged Access Service-managed Windows computers. You can create a Group Policy Object and link it to that specific organizational unit.

  4. Type a name for the new Group Policy Object, for example, Privileged Access Service Browser Extension Deployment, then click OK.
  5. Right-click the new Group Policy Object, then click Edit.
  6. Expand Computer Configuration > Policies > Software Settings.
  7. Select Software installation, right-click, then select New > Package.
  8. Navigate to the folder you selected in Copy the CentrifyIEExtensionSetup(x64).msi files to a shared folder on the domain controller or another location accessible from the domain controller., select the .msi installation file, then click Open.
  9. Select Published, then click OK.
  10. Close the Group Policy Management Editor, right-click the Privileged Access Service Browser Extension and verify Link Enabled is selected.

By default, when computers in the selected domain or organizational unit receive the next group policy update or are restarted, the browser extension will be deployed and the computer will be automatically rebooted to complete the browser extension deployment. If you want to test deploy, you can open a Command Prompt window to log on to a Windows client as a domain administrator and force group policies to be updated immediately by running the following command:

gpupdate /force

For more information about how to configure and use Group Policy Objects, see the documentation on the Microsoft Windows website.