For anyone else doing this, I have created a script which, when run as a startup script in a GPO, appears to work for us: Computer Configuration -> Policies -> Windows Settings -> Scripts -> Startup REM Get the folder from which it was called
SET var=%~dp0
ECHO "%var%splunkforwarder.msi"
REM Install the MSI
MSIEXEC.exe /i "%var%splunkforwarder.msi" AGREETOLICENSE="yes" DEPLOYMENT_SERVER="server:port" SPLUNKUSERNAME="username" SPLUNKPASSWORD="password" /QN If you run this script with the latest splunkforwarder.msi in the same directory it should install or update as appropriate.
... View more