How can I bulk patch FortiClient VPN with PowerShell?

November 15, 2026 2 answers
Asked by !tilde+turnstile_7

I need to update FortiClient VPN on about 90 computers. I have a CSV of hostnames and an EXE installer on a network share. Can PowerShell uninstall and reinstall it silently, then apply the VPN configuration?

Answers

Nerwick.7t

PowerShell remoting is one route. Read the hostnames from the CSV, copy the required removal tool and installer to each computer, then run the removal and install commands remotely. You could use administrative shares for the copy and PowerShell sessions for execution.

You'll need WinRM enabled and suitable administrative access on the target machines. Check Fortinet's documentation for the removal tool, silent installation options, and configuration commands for your specific version. Test the whole sequence on a few machines before sending it to all 90, and log successes and failures.

k37~ticketcase_914:

Copying the installer locally first also avoids depending on the remote session being able to access the network share.

Reply to this answer
Varnel-2s

Another option is to check whether your EXE extracts an MSI during installation. If it does, that MSI may be easier to use for an automated deployment. Confirm that it is suitable for your FortiClient version and test its install and configuration behavior before using it across the fleet.

Reply to this answer

Add your answer

Answers are reviewed before publication.

Related Discussions