McAfee Agent installation remotely (WHF non-VPN users)

[ddinz]

I am trying to deploy mcafee agents to wfh systems that has no vpn access. I've sent the framepkg from the epo server to the users via email but the windows defender is blocking the installation process. Those systems are used by end-users that do not have admin privileges. Some use LAPS for their admin credentials. What are the steps that I shall do to push the agent installation? Consider me a newbie to epo 😅

[cdinet]

I would suggest checking in the embedded credentials package of MA and use that to send to clients.  Embed some local administrator account (domain admin) that does have install rights.  This will only work with the embedded credentials agent package and you would only use this for this type scenario.  Agent install guide has these instructions:

Install with custom installation packages
Use custom installation packages to install the agent on systems that are not managed by McAfee ePO.
If you use a distribution method other than deployment capabilities (such as logon scripts or third-party
deployment software), you can create a custom installation package (FramePkg.exe). For Windows systems,
you can create the package with embedded administrator credentials. This is needed in a Windows
environment if users do not have local administrator rights. The user account credentials you embed are used
to install McAfee Agent.
Because an installer package created for this purpose has embedded credentials, access to it should be severely
restricted. Installer packages with embedded credentials should only be used in specific situations where another
deployment method is not available. For additional, important information about the use of embedded
credentials, see KB65538.
Task
1 Select Menu | Systems | System Tree, then select New Systems.
2 Next to How to add systems, select Create and download agent installation package.
3 Select the appropriate Agent version.
4 Select or deselect Embed Credentials in Package. If selected, type the appropriate Credentials for agent installation.
If you want these credentials to be remembered the next time you complete this task, click Remember my
credentials for future deployments.
5 If you want the installer to use a specific Agent Handler, select it from the drop-down list. If not, select All
Agent Handlers.
6 Click OK.
7 When prompted, select the file to be downloaded. Click to open the file, or right-click to save the file.
8 Distribute the custom installation package file as needed.