Webroot AD Deployment

Webroot can be deployed using Group Policy (GP) which ensures that all systems connected to an AD environment are automatically receiving the installation instructions of Webroot.

1. Download the Generic MSI installer - Note: you will need to provide key and group details in order for this to successfully deploy into your environment.
   https://anywhere.webrootcloudav.com/zerol/wsasme.exe
2. The installation command for MSI will require a Key and  GROUP name. The group name is provided after doing the following
   1. Open the Admin Portal
   2. Enter the EndPoint Group
   3. Enter the Enpoint Protection
   4. Select Group management
   5. Create a Group - EG: "MSI Deployed"
   6. Select the Newly created Group
   7. Use the Actions DropDown Menu 
   8. Select "Deploy Endpoints to this Group"

You will be presented with instructions on command line. The most important part of this process is that it will have the group information as part of it. 
This should now be ready to have the computers run a "GPUPDATE /force" or alternatively wait a few restarts. Webroot should now be installed.
Deploy Endpoints to this Group
Please find below instructions on how to deploy endpoints directly into a specified group:
On the endpoint, download the Webroot SecureAnywhere installer file:
https://anywhere.webrootcloudav.com/zerol/wsasme.exe
Run the installer from a command line, using these commands:
wsasme.exe/key=xxxx-xxxx-xxxx-xxxx-xxxx /group=151843080810437779 /silent
For further deployment guidance, please reference the Deployment section of the help guide.

1. Create the Group Policy Process
   1. Open Group Policy Management and perform the following
   2. Create New or use Existing Policy
   3. Navigate to Computer Config -> Windows Settings -> Scripts (Startup/Shutdown)
   4. Edit Startup
   5. Select Add
   6. Browse to the WSASME.exe (downloaded earlier) via the network share. (eg: \\domain.local\SysVol\domain.local\scripts\wsasme.exe)
      Note: The network Share must be accessible to the computer. So you will need to allow it access. In my case i have added it directly to the SYSVOL folder which already has access.
   7. Within the Script Parameters type "/key=xxxx-xxxx-xxxx-xxxx-xxxx /group=151843080810437779 /silent" (without the quotations) 
      Note: Please replace the Key with the Actual Key from within the Webroot portal
   8. Select Ok and close your Policy. 
   9. Confirm in the Scope settings you are happy with the Security Filtering. (Domain Computers instead of Authenticated Users)

You will need to run GPUPDATE or restarts in order to activate the new installation of WebRoot.

Note: New versions will need a new WSASME.exe file