Install UserLock in a Windows Server Core

This guide explains how to perform a silent installation, apply configuration using PowerShell, and verify your setup, all without a graphical interface.

Published June 16, 2025

Overview

UserLock fully supports installation on Windows Server Core (since v12.2).

You can deploy the server and complete its configuration without using any graphical interface, ensuring a lightweight and automated setup for secure environments.

1. Install the UserLock server

  1. Download the UserLock setup package to a local folder (for example, C:\Temp\).

  2. Open a 64-bit Command Prompt as Administrator.

  3. Run the following command (there must be no space between /v and /qn.):

    powershell
    UserLock_Setup.exe /s /v/qn /vADDLOCAL=Service,PrivilegeElevation,Console,PowerShell

Example configurations

  • Minimum recommended configuration for Windows Server Core:
    Service,PrivilegeElevation,PowerShell

  • Default configuration (standard Windows Server):
    Service,PrivilegeElevation,Console,WebConsole,PowerShell,WebApps,Proxy,Help

If you want to include additional modules such as UserLock SSO or IIS MFA, please contact IS Decisions Support.

Note

The Windows Credential Provider is not compatible with Windows Server Core.
Some features, such as local MFA prompts, are therefore unavailable.

2. Configure the server silently

  1. Download the configuration script:
    SetUserLockConfiguration.zip

  2. Extract the ZIP contents to a folder, e.g., C:\Temp\SetUserLockConfiguration\.

  3. Run PowerShell (32-bit) as Administrator:

powershell
%SystemRoot%\syswow64\WindowsPowerShell\v1.0\powershell.exe

4. Import the module and run the script:

powershell
Import-Module "${env:ProgramFiles(x86)}\ISDecisions\UserLock\Modules\UserLockPowerShell\UserLockPowerShell.psd1"
cd C:\Temp\SetUserLockConfiguration\
.\SetUserLockConfiguration.ps1 -AdminAccount 'UserLockSvc' -AdminDomain 'VCORP' -AdminPassword 'YourPassword'

You can specify additional parameters:

  • Custom Protected Zone

    powershell
    & '.\SetUserLockConfiguration.ps1' -AdminAccount 'UserLockSvc' -AdminDomain 'VCORP' -AdminPassword 'YourPassword' -Zone 'OU=MyOU,DC=MyDomain,DC=intra'
  • Backup Server Setup

    powershell
    & '.\SetUserLockConfiguration.ps1' -IsBackupServer -PrimaryServerName 'DC1' -AdminDomain 'VCORP' -AdminAccount 'UserLockSvc' -AdminPassword 'YourPassword'

Note

The first import command is required immediately after installation (before a reboot).
If the server has already restarted, you can skip this step.

3. Verify Installation

Once the UserLock service is running:

  1. Open the UserLock administration console.

  2. Connect to the server.

  3. Verify the configuration and license status.

Uninstall UserLock

To uninstall UserLock:

  1. Open a 64-bit Command Prompt as Administrator

  2. Run:

    powershell
    "%ProgramFiles(x86)%\ISDecisions\UserLock\CheckBeforeUninstall.exe" "{E5C521D5-516C-45FA-85B6-B906D80E61DE}"