Skip to main content

Install the Server Components

The Password Policy Enforcer (PPE) server installer includes the following components:

  • Password Policy Server (PPS) — also known as the PPE Service for DCs. This component is typically installed on all the domain controllers in a domain. See Domain and Local Policies for more information if your domain includes read-only domain controllers, or if you intend to enforce password policies for local user accounts.
  • Configuration Console — Graphical and command-line tools to configure PPE. Install this component on any computer that you want to configure Password Policy Enforcer from. This could be a domain controller, a management server, or your computer.
  • Mailer Service — Sends email on behalf of PPE. It is typically installed on one server in the domain.
note

The introduction has more information about these components, including their system requirements.

Manual Installation​

To manually install one or more server components:

  1. Run Netwrix_PPE_Server_11.2.0.148_x64.msi. The Setup wizard opens.

    Server Setup

  2. Click Next.

    Server Setup

  3. Review the End-User License Agreement, select the checkbox to accept the Agreement, then click Next.

    Server Setup

  4. Select one or more components to install, then click Next.

    Server Setup

  5. Review your selections, then click Install.

    Server Setup

  6. Click Finish when installation is complete. If prompted to restart the computer, then restart before using the installed components.

Automated Deployment​

If you have many domain controllers, use a software deployment tool or Group Policy to automate the deployment. You can also run msiexec to install from the command line. For example, run this command with elevated permissions to silently install only the PPS component and immediately restart the computer:

msiexec /i Netwrix_PPE_Server_11.2.0.148_x64.msi ADDLOCAL=FeatureServerPPE /q

The ADDLOCAL argument tells msiexec which components to install. ADDLOCAL=FeatureServerPPE,FeatureConsole,FeaturePPEMailerServer installs all the server components.

tip

Add an exclusion for %ProgramFiles%\Netwrix\Password Policy Enforcer\PPE.DLL to exclude PPE from antivirus or other security software. This is optional.

Uninstalling​

You can uninstall, repair, or change the installed server components from the Installed apps page in Windows Settings, or the Uninstall or change a program page in Control Panel. You can also run msiexec to uninstall from the command line. For example, run this command with elevated permissions to silently uninstall all the PPE server components without restarting the computer:

msiexec /x Netwrix_PPE_Server_11.2.0.148_x64.msi /q /norestart

Use the REMOVE argument to remove individual components. For example, REMOVE=FeaturePPEMailerServer