Deploying the ThreatLocker Agent through Kaseya VSA X

Note: For organizations deploying to a large amount of endpoints, ThreatLocker recommends using a staggered deployment approach. Organizations that deploy to a large number of endpoints at once may experience increased bandwidth usage as Windows Core and application definitions are downloaded to each endpoint. QOS can be used to limit bandwidth to corecdn.threatlocker.com and apps.threatlocker.com

Below, you will find the steps for deploying the ThreatLocker agent through Kaseya VSAX.

Step 1: Set up the script.

• Save the following script as a .ps1 file:

http://static.threatlocker.com/deployment/A/ThreatLockerDeploymentScript-VSAXv2.md

• Open the script and change the following variables to match the organization you will be deploying to:
  • UniqueID - Change this to the Unique Identifier found in your ThreatLocker Portal. For help finding this information, please refer to the following article: Getting your Unique Identifier from ThreatLocker | ThreatLocker Help Center
  • OrganizationName - The Organization's Identifier.
    • This information is located beneath the Organization Name in the Organization Settings sidebar.
  • Instance - The instance your organization belongs to. This can be found by selecting the Help button in the top-right corner of your portal, then locating the letter in the section labeled ThreatLocker Access.
  • 

Note: If you are deploying with FedRAMP, you MUST manually change the URLs in the script to the following:

https://api.threatlockerfed.com/installers/threatlockerstubx64.exe

AND

https://api.threatlockerfed.com/installers/threatlockerstubx86.exe

• In your Kaseya portal, navigate to Automation->Scripts
• Create a new Folder.
• Create a new script located in the new folder and name the script.

• Enable Windows to insert the PowerShell script.
• Save

Step 2: Set up the task.

• Navigate to Automation->Tasks
• Create a new task.
• Name the task.
• Adjust the scope of the task to all machines you want to deploy to.

• Navigate to the scripts tab.
• locate the folder where you saved the ThreatLocker script.
• Click the plus sign to add the script.

• Save the task.
• Run the task.

Note: Each group you deploy to in VSAX will need to have a custom field for Original Machine Group Name assigned in order for ThreatLocker to gather the name of the group. You can find this under Configuration->Organizations