Prerequisites

1. In the VDI golden image of PowerShell, make sure the Set-ExecutionPolicy is set to "RemoteSigned" to allow the script execution.
2. Set up the Deep Security Manager (DSM) to allow re-activation from known computers.
   1. On the DSM console, navigate to Administration > System Settings.
   2. Click the Agents tab.
   3. Tick Allow Agent-Initiated Activation checkbox and select For Any Computers radio button.
   4. Enable Allow Agent to specify hostname checkbox.
   5. For the section If a computer with the same name already exists, choose Re-activate the existing computer.
   6. Tick Allow re-activation of cloned VMs checkbox.
3. Create a PowerShell file (.ps1) and input the following. Make sure to edit the DSM location accordingly.

   Write-Host "Starting DSA Scripts..."
   cd "C:\Program Files\Trend Micro\Deep Security Agent"
   cmd /c "dsa_control.cmd -r"
   Write-Host "Waiting for 30 seconds before attempting to activate agent..."
   sleep 30
   cmd /c "dsa_control -a dsm://<IP or FQDN of the DSM Server>:4120"
   Write-Host "Waiting for 10 seconds before attempting heartbeat to manager.."
   sleep 10
   cmd /c "dsa_control.cmd -m"
   Write-Host "Completed..."
   Write-Host "Setting Powershell execution policy to Restricted..."
   Set-ExecutionPolicy Restricted

Procedure

1. Go to the Control Panel.
2. Open the Windows Task Scheduler and go to Administrative section.
3. On the Task Scheduler window, highlight the Task Scheduler Library and create a new task by doing either of the following:
   • On the top menu, click Actions > Create Task…
   • On the left section, right-click Task Schedule Library and select Create Task…
4. On the Create Task window under the General tab, label the DSA activation task accordingly and enable the following options:
   • Run whether the user is logged in or not
   • Run with highest privileges

   

5. Under the Trigger tab, set a trigger At startup.

   

6. Select the Actions tab and click New...
7. On the New Action window, set the following:

   Action: Start a Program
   Settings
   Program/Script: powershell.exe
   Add arguments (optional): -f "<full path of the PowerShell .ps1 file location>"

    

   "-f" means file.

   

   

8. Click OK. When the new VDIs are generated from the golden image, the start-process should automatically execute the PowerShell script to activate the agent protection.