...
Enter the name, e.g. "DualShield Windows Logon Client G2"
and then click "OK"
Expand "Group Policy Objects"
Select the newly created GPO, i.e. "DualShield Windows Logon Client G2"
On the right pane, in the section "Security Filtering", remove "Authenticated Users" and Add "DualShield 2FA Computers "
Now, right Right click the newly created GPO, and select "Edit"
...
Then, select the software installer package, e.g. "SetupDSClient-6.2.0121.0929-x64.msi"
The window below will popup
Select "Assigned", then click "OK"
That's it.
Next time, when a computer in the group "DualShield 2FA Computers" restarts, the software will be automatically installed on the computer.
...
On a PC, you can use the command "gpupdate /force" to force GPO update
If you have multiple domain controllers. make sure the newly created GPO is replicated across to all domain controllers.
...
- Edit the GPO using Group Policy Management Editor.
- Expand Computer Settings Configuration > Policies > Administrative Templates > System > Logon.
- Set “Always wait for the network at computer startup and logon” to Enabled.
Enable “Startup policy processing wait time” and set it to 90 seconds.
- Edit the GPO that applied to the computer using Group Policy Management Editor.
- Expand Computer Settings Configuration > Administrative Templates > System > Group Policy.
- Enable “Startup “Specify startup policy processing wait time” and set it to 90 120 seconds.
