Install UserLock in a Windows Server Core

UserLock fully supports installation on Windows Server Core (since v12.2).

You can deploy the server and complete its configuration without using any graphical interface, ensuring a lightweight and automated setup for secure environments.

1. Download the UserLock setup package to a local folder (for example, C:\Temp\).

2. Open a 64-bit Command Prompt as Administrator.

3. Run the following command (there must be no space between /v and /qn.):

   bash

   UserLock_Setup.exe /s /v/qn /vADDLOCAL=Service,PrivilegeElevation,Console,PowerShell

• Minimum recommended configuration for Windows Server Core:
  Service,PrivilegeElevation,PowerShell

• Standard configuration (as if you installed through GUI on Windows Server):
  Service,PrivilegeElevation,Modules,MFAIIS,Proxy,WebConsole,ClientTools,Console,PowerShell,Help

• If you do not use the ADDLOCAL property, only Console and PowerShellonly will be installed.

If you want to include additional modules such as UserLockSSO or Developper documentation, please contact IS Decisions Support.

Add the following to the end:

/v"INSTALLDIR=\"C:\temp\""

1. Download the configuration script:
   SetUserLockConfiguration.zip

2. Extract the ZIP contents to a folder, e.g., C:\Temp\SetUserLockConfiguration\.

3. Run PowerShell (32-bit) as Administrator:

%SystemRoot%\syswow64\WindowsPowerShell\v1.0\powershell.exe

4. Import the module and run the script:

Import-Module "${env:ProgramFiles(x86)}\ISDecisions\UserLock\Modules\UserLockPowerShell\UserLockPowerShell.psd1"
cd C:\Temp\SetUserLockConfiguration\
.\SetUserLockConfiguration.ps1 -AdminAccount 'UserLockSvc' -AdminDomain 'VCORP' -AdminPassword 'YourPassword'

You can specify additional parameters:

• Custom Protected Zone

  powershell

  & '.\SetUserLockConfiguration.ps1' -AdminAccount 'UserLockSvc' -AdminDomain 'VCORP' -AdminPassword 'YourPassword' -Zone 'OU=MyOU,DC=MyDomain,DC=intra'

• Backup Server Setup

  powershell

  & '.\SetUserLockConfiguration.ps1' -IsBackupServer -PrimaryServerName 'DC1' -AdminDomain 'VCORP' -AdminAccount 'UserLockSvc' -AdminPassword 'YourPassword'

Once the UserLock service is running:

1. Open the UserLock administration console.

2. Connect to the server.

3. Verify the configuration and license status.

To uninstall UserLock:

1. Open a 64-bit Command Prompt as Administrator

2. Run:

   bash

   "%ProgramFiles(x86)%\ISDecisions\UserLock\CheckBeforeUninstall.exe" "{C05318E5-6161-4E5B-A385-3CAD49C835CF}"