Deploying ThreatLocker with N-Central

3 min. readlast update: 12.27.2023

View in Browser

Note: For organizations deploying to a large amount of endpoints, ThreatLocker recommends using a staggered deployment approach. Organizations that deploy to a large number of endpoints at once may experience increased bandwidth usage as Windows Core and application definitions are downloaded to each endpoint. QOS can be used to limit bandwidth to corecdn.threatlocker.com and apps.threatlocker.com

  Creating the Deployment Script

  • Log into your N-Central dashboard.
  • Be sure you are managing the root of the N-Central System 
    • (Structure may vary slightly, depending on the version of N-Central )
undefined

  • Select Configuration > Scheduled Tasks > Script/Software Repository.
undefined

Select Add > Automation Policy. 

undefined
  • Get the latest deployment script for N-Central from the Deploy Agents section of the Deployment Center in the ThreatLocker Portal. 
  • Browse to the .amp file you have downloaded.
  • Select Save. 
    • The Imported Am File will fill in the Name And Description fields. 
undefined

Configuring Custom Properties

Add Unique Identifier Custom Property

  • Select N-Central “Monitoring System” (Global Root) Organization
  • Select “Administration > Custom Properties” 
undefined
  • Select the ADD dropdown
  •  Select By Customer”
  •  select Text Type  
undefined
  • The property Name will be called "ThreatLocker Unique Identifier" 
  • The default text will be your Unique Identifier
You only need to deploy using the Unique Identifier for your(parent) organization
undefined

  1. Select "Propagate to all-new Service Organizations/Customers/Sites
  2. Check the Customer / Sites (using checkboxes) 
  3. Highlight all existing 
  4. Click “Save”  

Add Client Name Custom Property

  • Select the ADD dropdown
  •  Select By Customer”
  •  select Text Type   
undefined
  • The Property Name will be called "Client Name" 
  • The Default Text will be "Enter Client Name Here" - This is the location that you will enter your Client name. N-Central will create your ThreatLocker organization based on what you enter in the Default Text area. For example, if you inputted "Enter Client Name Here" in the Default Text box, an organization named Enter Client Name Here would be created in ThreatLocker.
Repeat this step for each individual Client Name you wish to have an organization created for in ThreatLocker.

undefined
  1. Select "Propagate to all-new Service Organizations/Customers/Sites
  2. Check the Customer / Sites (using checkboxes) 
  3. Highlight all existing 
  4. Click “Save”   

Update Custom Properties at The Client Level

Depending on the install type of N-Central you will have to leave the root level to find the Customers option

undefined

  • Navigate to the Administration tab on the left nav
  • Select “Customers” 
undefined
  • Manage A customer that you would like to deploy to. 
  • Select The Hyper Linked Customer Name which will present you with a view that allows us to edit the custom properties. 
undefined
  1. Go-To “Custom Properties” Tab
  2. Click the “Pencil” icon next to each of the created “Custom Properties” and fill in with the Client Specific name that matches this company you managed and input your Unique Identifier - (Use Parent Org Unique Identifier for all customers If you have Child Orgs) 
  3. Click “Save”

undefined

Deploying Threatlocker

  • Select the Customer you will be deploying to
  • Select “Actions > Run an Automation Policy” 
undefined

undefined

  1. Search & Choose “ThreatLocker Deployment”
  2. Select the appropriate “Input Parameters” for each of the options
  3. Setup the rest of this process the same as normal   
Was this article helpful?