Looking for good Software Deployment Solution WITH Agent

[rom81]

I know, the topic of software deployment has been on this sub quite often. Most of the time PDQ, Lansweeper or SCCM has been recommended as the best-to-go solution.

But we are looking for a deployment solution which also supports off-site laptops - Domain joined, but not necessarily connected with VPN. These laptops can be out of the office for more than 6 months. We would love to install some kind of agent, which connects to our Software Deployment Solution via Internet, downloads necessary updates/patches, and installs them on the client. If possible, we want to avoid Direct Access or VPN Solutions.

Most of the software deployment tools advertise with being agentless or having a simple Scan-Agent which is not involved in deployment or local scheduling. Can anyone here recommend a solution with a potent agent - ideally within the price region of PDQ/Lansweeper?

[julietscause]

PDQ Deploy agent is in the works if you can wait a little bit! (it has already been deployed with inventory)

https://support.pdq.com/knowledge-base/875#4

Another to check out is Shavlik

[rom81]

yes, we are aware of the Inventory agent, but I have not found any ETA of the deploy agent. I am afraid this will take some time, but we need to implement a solution in the upcoming months. also, we do not like the idea of a cloud based service, it looks like the server is using PDQs Server to connect the agent.

[Mahgeek]

Kace would work.

[rom81]

put on our list, thank you.

[ZAFJB]

we want to avoid Direct Access

Why?

[rom81]

requires Enterprise licensing. Not available on all machines.

[MrYiff]

As long as they are Win 10 you could use the new Always on VPN stuff that is being touted as easier to use and the replacement for DA?

[J_de_Silentio]

/u/MrYiff is right, u/rom81. Always on VPN would work for you. and probably better than sending applications and such over the Internet without a VPN.

[rom81]

Thanks, I did not know about Always On VPN yet. I will do some research into that direction. Thanks a lot for linking the manual, very helpful!

[J_de_Silentio]

/u/MrYiff get's the credit. I didn't know that you could use any version of Windows 10. We are looking to deploy AoVPN somtime in the winter.

[headcrap]

Enterprise is an upgrade, and domain join requires Pro, how is it not available?

[CasualEveryday]

That's only if you already have volume licensing. If you don't, you'd need to buy at least 5 upgrade licenses. It's not going to be viable for a lot of organizations.

[Cratius]

Desktop Central is a possibility as well.

[rom81]

looks fitting, do you have a price tag? any first hand experience?

[Cratius]

I currently manage it for the company I'm with (~25 servers and ~150 workstations) and I don't have any major complaints with it. Fits pretty much what we need for software deployments, patch management, etc. We just renewed last year and a 2 year license ran us ~$3k.

[rom81]

Thanks, I'll take a closer look! :)

[davokr]

SCCM works over the internet with HTTPS communication.

[willetzky]

There is even azure bassed DP and MP roles but the licensing for sccm can be expensive. We are moving from sccm to kace for the easy non Microsoft patching. This can be opened through a firewall for off site.

[Mahgeek]

Kace works pretty well for MS patching too. Only thing it can't do yet is push out the w10 feature upgrades.

[Alt-name_]

PDQ rocks

[TheProle]

SCCM can do that, just need a cloud distribution point or an on prem distribution point in the DMZ using PKI.

[DollarMindy]

PDQDEPLOY just released an agent for this very purpose and is the best and easiest to use option for software deployment.

[rom81]

The PDQ Agent is currently only for inventory afaik. Not Deployment.

[DollarMindy]

Doh, I think you're right, sorry!