Fortinet black logo

EMS Administration Guide

Preparing Windows endpoints for FortiClient deployment

You must enable and configure the following services on each Windows endpoint before deploying FortiClient:

  • Task Scheduler: Automatic
  • Windows Installer: Manual
  • Remote Registry: Automatic

You must configure Windows Firewall to allow the following inbound connections:

  • File and Printer Sharing (SMB-In)
  • Remote Scheduled Tasks Management (RPC)

Active Directory (AD) group deployments require an AD administrator account. For non-AD deployments, you can share the deployment package URL with users, who can then download and install FortiClient manually. You can locate the deployment package URL in Deployment & Installers > FortiClient Installer.

You must enable and configure the following services on each Windows endpoint before deploying FortiClient:

  • Task Scheduler: Automatic
  • Windows Installer: Manual
  • Remote Registry: Automatic

You must configure Windows Firewall to allow the following inbound connections:

  • File and Printer Sharing (SMB-In)
  • Remote Scheduled Tasks Management (RPC)

Active Directory (AD) group deployments require an AD administrator account. For non-AD deployments, you can share the deployment package URL with users, who can then download and install FortiClient manually. You can locate the deployment package URL in Deployment & Installers > FortiClient Installer.