Skip to content

deployment threat locker #500

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
s-nix merged 7 commits into from
Feb 12, 2026
Merged

deployment threat locker #500

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
4cf0619
deployment threatlocker
OvaisRashid08 Feb 10, 2026
73fb124
deployment thratlcoker
OvaisRashid08 Feb 10, 2026
24802fe
deployment
OvaisRashid08 Feb 10, 2026
1515adb
deployment
OvaisRashid08 Feb 10, 2026
a2f43d6
deployment
OvaisRashid08 Feb 10, 2026
24d5235
threatlocker
OvaisRashid08 Feb 10, 2026
506d07f
QA - Update
Rj98-sh Feb 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
119 changes: 18 additions & 101 deletions docs/ninjaone/automations/threatlocker-deployment-mac.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,123 +1,40 @@
---
id: '11444307-4a3f-4388-b5c5-096a50725b4e'
slug: /11444307-4a3f-4388-b5c5-096a50725b4e
title: 'Threatlocker Deployment [MAC]'
title_meta: 'Threatlocker Deployment [MAC]'
keywords: ['Threatlocker','MAC','GroupKey','Deployment']
description: 'This script deploys threatlocker agent on Mac machines'
title: 'ThreatLocker Deployment [MAC]'
title_meta: 'ThreatLocker Deployment [MAC]'
keywords: ['threatlocker','MAC','groupKey','deployment']
description: 'This script deploys ThreatLocker agent on Mac machines'
tags: ['security','setup','macos']
draft: false
unlisted: false
---

## Overview
This script deploys threatlocker agent on Mac machines.

This script deploys ThreatLocker agent on Mac machines.

## Sample Run

`Play Button` > `Run Automation` > `Script`
![SampleRun1](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/samplerun1.webp)

Search and select `Threatlocker Deployment [MAC]`
![SampleRun1](../../../static/img/docs/11444307-4a3f-4388-b5c5-096a50725b4e/image4.webp)

Set the required arguments and click the Run button to run the script.
`Run As`: System
`Preset Parameter`: `<Leave it Blank>`
![SampleRun1](../../../static/img/docs/11444307-4a3f-4388-b5c5-096a50725b4e/image5.webp)

`Run Automation`: Yes
![SampleRun1](../../../static/img/docs/1196b011-bfba-486a-8653-92066f19e527/image6.webp)
![SampleRun1](../../../static/img/docs/11444307-4a3f-4388-b5c5-096a50725b4e/samplerun.webp)

## Dependencies
- [cPVAL ThreatLocker Mac GroupKey](/docs/8305e5b2-41ee-44bb-848e-758ac72b185f)
- [cPVAL Threatlocker Deployment](/docs/c7aa0c9d-9b6b-4a78-bbf4-01a626acd6c2)
- [cPVAL Threatlocker Deployment - Exclude](/docs/c3329dd9-bdf8-42f6-aacc-bcfde0fa94da)
- [Threatlocker Deployment [NinjaOne]](/docs/a1efd808-41ad-4dee-9ea1-ff0c2a36e019)

## Automation Setup/Import

### Step 1

Navigate to `Administration` > `Library` > `Automation`
![Step1](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/step1.webp)

### Step 2

Locate the `Add` button on the right-hand side of the screen, click on it and click the `New Script` button.
![Step2](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/step2.webp)

The scripting window will open.
![ScriptingScreen](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/scriptingscreen.webp)

### Step 3
- [cPVAL ThreatLocker Mac GroupKey](/docs/8305e5b2-41ee-44bb-848e-758ac72b185f)
- [cPVAL ThreatLocker Deployment - MAC](/docs/11444307-4a3f-4388-b5c5-096a50725b4e)
- [Solution - ThreatLocker Deployment [NinjaOne]](/docs/a1efd808-41ad-4dee-9ea1-ff0c2a36e019)

Configure the `Create Script` section as follows:
## Parameters

`Name`: Threatlocker Deployment [MAC]
`Description`: This script deploys threatlocker agent on Mac machines
`Categories`: ProVal
`Language`: ShellScript
`Operating System`: Mac
`Architecture`: 64-bit
`Run As`: System
![CreateSript](../../../static/img/docs/11444307-4a3f-4388-b5c5-096a50725b4e/image1.webp)
| Name | Required | Default | Type | Description |
| ---- | -------- | ------- | ---- | ----------- |
| ThreatLocker Mac Groupkey | False | -- | `String/Text` | Set this variable to override the value stored in the organization-level custom field cPVAL ThreatLocker Mac GroupKey |

## Automation Setup/Import

### Step 4

Paste the following Shell script in the scripting section:

```
#!/bin/bash
GroupKey= Ninja-property-get cpvalThreatlockerMacGroupkey
#install
if [ ! -d /Applications/Threatlocker.app ]
then
curl --output-dir "/Applications" -O https://updates.threatlocker.com/repository/mac/1.0/Threatlocker.app.zip
echo "Downloading Threatlocker"
open /Applications/Threatlocker.app.zip
sleep 5
osascript -e 'quit app "Finder"'
rm -d /Applications/Threatlocker.app.zip
if [ ! -d /Applications/Threatlocker.app ]
then
echo "Not able to download the file"
exit 1
else
open /Applications/ThreatLocker.app --args -groupKey $GroupKey
echo "Installing Threatlocker"
sleep 15
echo "Verifying Group Key"
sleep 15
if [ ! -d /Library/Application\ Support/Threatlocker ]
then
echo "GroupKey is Invalid"
exit 1
else
echo "Threatlocker Installed"
exit 0
fi
fi
fi
```
![CreateSript](../../../static/img/docs/11444307-4a3f-4388-b5c5-096a50725b4e/image2.webp)

## Script Variables

Click the `Add` button next to `Script Variables`.
![AddVariableButton](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/addvariablebutton.webp)

## Saving the Automation

Click the `Save` button in the top-right corner of the screen to save your automation.
![SaveButton](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/savebutton.webp)

You will be prompted to enter your MFA code. Provide the code and press the Continue button to finalize the process.
![MFA](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/mfa.webp)

## Completed Automation
![CompletedAutomation](../../../static/img/docs/11444307-4a3f-4388-b5c5-096a50725b4e/image3.webp)
[Automation Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/scripts/threatlocker-deployment-mac.sh)

## Output
- Activity Details

- Activity Details
160 changes: 19 additions & 141 deletions docs/ninjaone/automations/threatlocker-deployment.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,164 +1,42 @@
---
id: '1196b011-bfba-486a-8653-92066f19e527'
slug: /1196b011-bfba-486a-8653-92066f19e527
title: 'Threatlocker Deployment'
title_meta: 'Threatlocker Deployment'
keywords: ['Threatlocker','windows','GroupKey','Deployment']
description: 'This script will check for ThreatLocker and attempt to install if not present on Windows Machines. It matches the organization to the client name. If no match is found, it will create the company in the Threatlocker Portal. By default, servers will be installed into the Servers group, and workstations will be installed into the Workstations group'
title: 'ThreatLocker Deployment'
title_meta: 'ThreatLocker Deployment'
keywords: ['threatlocker','windows','groupKey','deployment']
description: 'This script will check for ThreatLocker and attempt to install if not present on Windows Machines. It matches the organization to the client name. If no match is found, it will create the company in the ThreatLocker Portal. By default, servers will be installed into the Servers group, and workstations will be installed into the Workstations group'
tags: ['security','setup','windows']
draft: false
unlisted: false
---

## Overview
This script will check for ThreatLocker and attempt to install if not present on Windows Machines. It matches the organization to the client name. If no match is found, it will create the company in the Threatlocker Portal. By default, servers will be installed into the Servers group, and workstations will be installed into the Workstations group.

This script will check for ThreatLocker and attempt to install if not present on Windows Machines. It matches the organization to the client name. If no match is found, it will create the company in the ThreatLocker Portal. By default, servers will be installed into the Servers group, and workstations will be installed into the Workstations group.

## Sample Run

`Play Button` > `Run Automation` > `Script`
![SampleRun1](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/samplerun1.webp)

Search and select `Threatlocker Deployment`
![SampleRun1](../../../static/img/docs/1196b011-bfba-486a-8653-92066f19e527/image4.webp)

Set the required arguments and click the Run button to run the script.
`Run As`: System
`Preset Parameter`: `<Leave it Blank>`
![SampleRun1](../../../static/img/docs/1196b011-bfba-486a-8653-92066f19e527/image5.webp)

`Run Automation`: Yes
![SampleRun1](../../../static/img/docs/1196b011-bfba-486a-8653-92066f19e527/image6.webp)

![SampleRun1](../../../static/img/docs/1196b011-bfba-486a-8653-92066f19e527/samplerun.webp)

## Dependencies
- [cPVAL Threatlocker Auth Key](/docs/0ff9eab8-6df8-4154-9ecc-4f5bdedd648a)
- [cPVAL Threatlocker Organization Name](/docs/573751d4-0648-4da9-8ec3-0ab96d4730de)
- [cPVAL Threatlocker Deployment](/docs/c7aa0c9d-9b6b-4a78-bbf4-01a626acd6c2)
- [cPVAL Threatlocker Deployment - Exclude](/docs/c3329dd9-bdf8-42f6-aacc-bcfde0fa94da)
- [Solution - Threatlocker Deployment [NinjaOne]](/docs/a1efd808-41ad-4dee-9ea1-ff0c2a36e019)

## Automation Setup/Import

### Step 1

Navigate to `Administration` > `Library` > `Automation`
![Step1](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/step1.webp)

### Step 2

Locate the `Add` button on the right-hand side of the screen, click on it and click the `New Script` button.
![Step2](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/step2.webp)

The scripting window will open.
![ScriptingScreen](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/scriptingscreen.webp)

### Step 3

Configure the `Create Script` section as follows:

`Name`: Threatlocker Deployment
`Description`: This script will check for ThreatLocker and attempt to install if not present on windows machines.
It matches the organization to the client name, if no match is found, it will create the organtization in Threatlcoker.
`Categories`: ProVal
`Language`: PowerShell
`Operating System`: Windows
`Architecture`: All
`Run As`: System
![CreateSript](../../../static/img/docs/1196b011-bfba-486a-8653-92066f19e527/image1.webp)


### Step 4

Paste the following Shell script in the scripting section:
- [cPVAL ThreatLocker Auth Key](/docs/0ff9eab8-6df8-4154-9ecc-4f5bdedd648a)
- [cPVAL ThreatLocker Organization Name](/docs/573751d4-0648-4da9-8ec3-0ab96d4730de)
- [cPVAL ThreatLocker Deployment](/docs/c7aa0c9d-9b6b-4a78-bbf4-01a626acd6c2)
- [Solution - ThreatLocker Deployment [NinjaOne]](/docs/a1efd808-41ad-4dee-9ea1-ff0c2a36e019)

```
[Net.ServicePointManager]::SecurityProtocol = "Tls12"
## Parameters

## Variables
[String]$organizationName = Ninja-property-get cpvalThreatlockerOrganizationName
[String]$UniqueIdentifier = Ninja-property-get cpvalThreatlockerAuthKey
| Name | Required | Default | Type | Description |
| ---- | -------- | ------- | ---- | ----------- |
| ThreatLocker AuthKey | False | -- | `String/Text` | Set this variable to override the value stored in the organization-level custom field cPVAL ThreatLocker AuthKey |
| ThreatLocker Org Key | False | -- | `String/Text` | Set this variable to override the value stored in the organization-level custom field cPVAL ThreatLocker OrganizationName |

## Automation Setup/Import

if(!($organizationName ))
{
Throw 'Error: Missing Organization Name. Configure it in NinjaOne field ''cpvalThreatlcokerOrganizationName'''
}

if(!($UniqueIdentifier))
{
Throw 'Error: Missing Threatlocker Authenticatio Key. Configure it in NinjaOne field ''cpvalThreatlockerAuthKey'''
}

$service = Get-Service -Name ThreatLockerService -ErrorAction SilentlyContinue;

if ($service.Name -eq "ThreatLockerService" -and $service.Status -eq "Running") {
return "Already Installed"
}


## Check if directory exists and create if not
if (!(Test-Path "C:\ProgramData\_automation\script\Threatlocker")) {
mkdir "C:\ProgramData\_automation\script\Threatlocker";
}

## Check the OS architecture and download the correct installer
try {
if ([Environment]::Is64BitOperatingSystem) {
$downloadURL = "https://api.threatlocker.com/updates/installers/threatlockerstubx64.exe";
}
else {
$downloadURL = "https://api.threatlocker.com/updates/installers/threatlockerstubx86.exe";
}

$localInstaller = "C:\ProgramData\_automation\script\Threatlocker\ThreatLockerStub.exe";

Invoke-WebRequest -Uri $downloadURL -OutFile $localInstaller -Usebasicparsing;

}
catch {
Write-Output "Failed to get download the installer";
return;
}

## Attempt install
try {
& "C:\ProgramData\_automation\script\Threatlocker\ThreatLockerStub.exe" key=$UniqueIdentifier Company=$organizationName
}
catch {
Write-Output "Installation Failed";
return
}

## Verify install
$service = Get-Service -Name ThreatLockerService -ErrorAction SilentlyContinue;

if ($service.Name -eq "ThreatLockerService" -and $service.Status -eq "Running") {
Write-Output "Installation successful";
return;
}
else {
## Check the OS type
$osInfo = Get-CimInstance -ClassName Win32_OperatingSystem

if ($osInfo.ProductType -ne 1) {
Write-Output "Installation Failed";
return
}
}
```
![CreateSript](../../../static/img/docs/1196b011-bfba-486a-8653-92066f19e527/image2.webp)

## Saving the Automation

Click the Save button in the top-right corner of the screen to save your automation.
![SaveButton](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/savebutton.webp)

You will be prompted to enter your MFA code. Provide the code and press the Continue button to finalize the process.
![MFA](../../../static/img/docs/b97b3d2c-ecc6-42ff-9236-36b14765c9b7/mfa.webp)

## Completed Automation
![CompleteAutomation](../../../static/img/docs/1196b011-bfba-486a-8653-92066f19e527/image3.webp)
[Automation Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/scripts/threatlocker-deployment-windows.ps1)

## Output

- Activity Details
- Activity Details
Loading