Sysmon Redeployment on Windows - Multiple Endpoints

Updated Feb 12, 2024

Redeploy Sysmon using the Group Policy Management Console

If needed, you can redeploy the SysmonAssistant.msi package to multiple Windows endpoints using the Group Policy Management Console (GPMC).

  1. If needed, edit the distribution package.

    See Prepare the Sysmon Assistant installation package for more information.

    Note: To update Sysmon, see Redeploy Sysmon on Windows devices.

  2. Open the GPMC.

  3. Right-click the Sysmon Assistant object that you created, and then click Edit.

  4. For each user or each machine, expand the Software Settings element that contains the deployed package.

  5. Expand the Software Installation element that contains the deployed package.

  6. In the Group Policy window, right-click the package.

  7. Click All Tasks > Redeploy application.

  8. Click Yes to reinstall the application.

    The application is reinstalled in its previous location.

  9. Close the Group Policy snap-in, and then click OK to exit.

See also