Deploy ThreatLocker Using Nerdio Manager for MSP (NMM)

Note: For organizations deploying to a large amount of endpoints, ThreatLocker recommends using a staggered deployment approach. Organizations that deploy to a large number of endpoints at once may experience increased bandwidth usage as Windows Core and application definitions are downloaded to each endpoint. QOS can be used to limit bandwidth to corecdn.threatlocker.com and apps.threatlocker.com

This article is based on documentation from Nerdio and has not been verified by the ThreatLocker team. Source: https://help.nerdio.net/hc/en-us/articles/360060124552-Overview-of-Scripted-Actions

Nerdio Manager for MSP (NMM) allows you to configure and run a scripted action to install Threatlocker agent on AVD host pools.

• Log into the NMM
• Login to the customer account
• Select Scripted Actions from the main menu
• The scripted action to install the ThreatLocker agent is available in the NMM repository. 
• Navigate to Settings>Portal to configure the scripted action variables ThreatlockerOrgName, ThreatLockerInstance, and ThreatlockerUniqueId. 
• Your OrgName is your identifier located on the Organizations page of the ThreatLocker portal. 
• Your Instance can be found by selecting the Help button within the ThreatLocker portal. It is the letter in parentheses next to ThreatLocker Access. 

• Your Unique ID can be found on the Deployment Center page or the Computers page. For more information see https://threatlocker.kb.help/getting-your-unique-identifier-from-threatlocker/
• Once the secure variables are configured, go to AVD>Host pools.
• Select a session host where you wish to install "Windows Scripts" and select "Run script".
• Select "Install Threatlocker agent" script from the Windows scripts drop-down and click "OK".
• Once the script has been executed, you can log into the session host and verify whether the ThreatLocker agent is installed under folder C:\Program Files\ThreatLocker.

How to Install ThreatLocker Automatically on Every New VM Created for a Host Pool

• At the Account level, navigate to AVD > Host Pools.
• Locate the host pool you wish to install the ThreatLocker Agent on.
• From the action menu, select Properties > VM Deployment.
• Toggle on Run Scripted actions when host VM is CREATED.
• From the drop-down list, select the ThreatLocker installation script.