Agentless - Microsoft Windows

Agentless Microsoft Windows patch deployment is supported over TCP/IP. Connectivity is supported using RPC protocols, services, and shares.

The traditional advantage of "Agentless" is that there is no client-side installation or configuration of software necessary. Many Administrators find this desirable.

In the case of Windows clients (as opposed to Unix), all files and services used for patch installation are removed once the patch deployment is complete, leaving the system clean of any 'footprints'.

Many administrators prefer "Agentless" windows support for:

• Network clients left "on" all the time.

• Network clients which are not mobile.

• Network clients which don't necessarily require the encryption and private-port services provided by the Leaf-Agent option, ie., "non-hardened" machines.

Agentless Windows client support relies on networking services that are normally enabled in a Microsoft networking environment. Sometimes on individual hosts, one or more of these services are disabled.

See "What do I need to Query Agentless Windows Targets?" or the flip-side... "Why does my Windows Query Fail?".

See "Leaf vs. RPC Summary" for a table of Agentless vs. Leaf-Agent attributes.

SecurityEXPERT can deploy settings to Windows Agentless targets.