Install UserLock in a Windows Server Core
This guide explains how to perform a silent installation, apply configuration using PowerShell, and verify your setup, all without a graphical interface.
UserLock fully supports installation on Windows Server Core (since v12.2).
You can deploy the server and complete its configuration without using any graphical interface, ensuring a lightweight and automated setup for secure environments.
Download the UserLock setup package to a local folder (for example,
C:\Temp\).Open a 64-bit Command Prompt as Administrator.
Run the following command (there must be no space between
/vand/qn.):powershellUserLock_Setup.exe /s /v/qn /vADDLOCAL=Service,PrivilegeElevation,Console,PowerShell
Minimum recommended configuration for Windows Server Core:
Service,PrivilegeElevation,PowerShellDefault configuration (standard Windows Server):
Service,PrivilegeElevation,Console,WebConsole,PowerShell,WebApps,Proxy,Help
If you want to include additional modules such as UserLock SSO or IIS MFA, please contact IS Decisions Support.
Note
The Windows Credential Provider is not compatible with Windows Server Core.
Some features, such as local MFA prompts, are therefore unavailable.
Download the configuration script:
SetUserLockConfiguration.zipExtract the ZIP contents to a folder, e.g.,
C:\Temp\SetUserLockConfiguration\.Run PowerShell (32-bit) as Administrator:
%SystemRoot%\syswow64\WindowsPowerShell\v1.0\powershell.exe4. Import the module and run the script:
Import-Module "${env:ProgramFiles(x86)}\ISDecisions\UserLock\Modules\UserLockPowerShell\UserLockPowerShell.psd1"
cd C:\Temp\SetUserLockConfiguration\
.\SetUserLockConfiguration.ps1 -AdminAccount 'UserLockSvc' -AdminDomain 'VCORP' -AdminPassword 'YourPassword'You can specify additional parameters:
Custom Protected Zone
powershell& '.\SetUserLockConfiguration.ps1' -AdminAccount 'UserLockSvc' -AdminDomain 'VCORP' -AdminPassword 'YourPassword' -Zone 'OU=MyOU,DC=MyDomain,DC=intra'Backup Server Setup
powershell& '.\SetUserLockConfiguration.ps1' -IsBackupServer -PrimaryServerName 'DC1' -AdminDomain 'VCORP' -AdminAccount 'UserLockSvc' -AdminPassword 'YourPassword'
Note
The first import command is required immediately after installation (before a reboot).
If the server has already restarted, you can skip this step.
Once the UserLock service is running:
Open the UserLock administration console.
Connect to the server.
Verify the configuration and license status.
To uninstall UserLock:
Open a 64-bit Command Prompt as Administrator
Run:
powershell"%ProgramFiles(x86)%\ISDecisions\UserLock\CheckBeforeUninstall.exe" "{E5C521D5-516C-45FA-85B6-B906D80E61DE}"