Install PROTECT Agent

The GuardWare PROTECT Agent is installed on endpoint devices and applies file protection policies directly on the device. It enables users to protect sensitive files, apply classifications, and enforce access restrictions while working in their normal applications.

With the Agent deployed, organisations can protect data at the endpoint, control how files are shared, and enforce policy-based access to sensitive content.

Before installing the Agent, whitelist PROTECT and confirm the device meets the system requirements.

Azure AD Users

For users registered with Azure AD, proceed directly to the Install GuardWare PROTECT Agent section.

Local AD and External Users (On-Premises and Outside the Organisation)

If your users are registered with on-premises Active Directory (local AD), complete the Pre-installation steps below and then proceed to install the PROTECT Agent.

This also applies to users who are outside your organisation, such as partners, contractors, or clients, who are not part of your organisation’s Azure AD or Local AD.

Pre-Installation Setup

Local AD users and external users need an invitation from GuardWare Australia to use GuardWare PROTECT. Once you receive an invitation, follow these steps:

1. Accept the invitation sent to your email.
2. After accepting, you’ll be prompted to send a code to your email. Click Send code.

1. Enter the code sent to your email and sign in.
2. GuardWare requests certain permissions. Read the requested permission and accept. You’ll then be directed to the Welcome page, where you can see details on how to get started.

Install GuardWare PROTECT Agent

1. Double-click the provided PROTECT Agent installer file to begin the installation.
2. In the Setup Wizard, click Next to continue.

1. Read and accept the End User Licence Agreement (EULA) and click Next.

1. Choose the folder where you want to install GuardWare PROTECT and click Next. By default, PROTECT will be installed in: C:\Program Files\.
2. Click Install. The installation may take a few minutes to complete.

1. If you do not have Microsoft Azure CLI installed, a Setup Wizard will prompt you to install it. Read and agree to the licence agreement terms and click Install.

1. If you do not have Microsoft Visual C++ Redistributable installed, a Setup Wizard will prompt you to install it. Read and agree to the licence agreement terms and click Install.
2. Once the installation is complete, click Finish to exit the Setup Wizard and continue with the PROTECT Agent installation.
3. During the agent installation, a User Account Control (UAC) dialog box may appear. This is a standard Windows security feature that verifies whether you want to allow the installer to make changes to your computer. When this dialog appears:

   1. Verify that the publisher is GuardWare Australia Pty Ltd.
   2. Click Yes to allow the installation to proceed. Clicking No cancels the installation.
4. Once the PROTECT Agent installation is complete, click Finish to exit the wizard.
5. You’ll be prompted to restart your device. Click Yes. After restarting your device, follow the steps in Post-Installation Setup.

   

Restarting is mandatory for GuardWare PROTECT to install successfully.

Post-Installation Setup

After restarting your device, a Welcome Wizard appears automatically. If you do not see it right away, please wait a few minutes.

1. In the Welcome wizard, click Login with Azure.

1. For Azure AD users:

   1. Select your work email address and click Continue.

      
   2. Select your Tenant ID and Subscription and click Submit.

      1. Tenant ID: The unique identifier of your Azure AD.
      2. Subscription: Defines the set of resources and the billing account.

         

      Select the Subscription that contains your Key Vault. If multiple appear, select the one where the Key Vault and Service Principal for GuardWare PROTECT are set up. If you’re not certain which subscription applies, you can verify it in the Azure Portal under Subscription or contact your administrator.

      
2. Click Exit when the setup is complete.
3. For external users:

   1. Select Work or school account.
   2. Enter the email address where you received the invitation, and click Next.
   3. Check your email for a verification code, then enter the code and click Sign in.
   4. When prompted to sign in automatically across desktop apps and browsers, select No, this app only (for better security). This ensures your Azure login is used only within GuardWare PROTECT, preventing other apps or browsers on the same device from automatically accessing your credentials. You can always sign in separately to other apps when needed.
   5. Click Exit when the setup is complete.
4. During the process, if a Windows Security prompt appears stating that Windows Firewall has blocked some features of GWProtectDesktop, click Allow. If the prompt does not appear or you did not allow it in the above step, follow the steps below to allow GWProtectDesktop to communicate through Windows Defender Firewall. Allowing GWProtectDesktop through the firewall ensures the PROTECT Agent can communicate with required services and enforce file protection policies correctly.

   1. Open Control Panel > System and Security > Windows Defender Firewall.
   2. Click Allow an app or feature through Windows Defender Firewall.
   3. Select Change settings.
   4. Locate GWProtectDesktop in the list and enable the Private and Public networks.
   5. Click OK to save the changes.

      

You can now use GuardWare PROTECT to add protection to sensitive files, set classifications, restrict access to Security Groups, add expiry dates, restrict circulation, and so on.

Uninstall GuardWare PROTECT Agent

Make sure to remove protection from your protected files before uninstalling PROTECT; otherwise, you won't be able to access them afterwards.

To remove GuardWare PROTECT from your device:

1. Double-click the PROTECT Agent installer.
2. In the Setup Wizard, click Next to continue.

1. You’ll get options to modify, repair, or remove PROTECT. Choose Remove, then click Remove to uninstall GuardWare PROTECT.

1. (Optional) To review or change installation settings, click Back. To exit without uninstalling, click Cancel.
2. During the uninstallation, you may see the following dialogs:

   1. Installer Information

      When the Installer Information appears, click OK to continue with the uninstallation.
   2. User Account Control (UAC) This is a standard Windows security feature that verifies whether you want to allow the installer to make changes to your computer. When this dialog appears:

      1. Verify that the publisher is displayed as GuardWare Australia Pty Ltd.
      2. Click Yes to allow the uninstallation to proceed. If you select No, the uninstallation will be cancelled.
3. After uninstallation is complete, you will be prompted to restart your device. Click Yes.

Restarting is mandatory for GuardWare PROTECT to uninstall fully.