PDQ Deploy

The implementation of PDQ Deploy is known for being quick and straightforward, especially for IT teams familiar with Windows environments. Here's a detailed breakdown of the process and timeline:

1. Installation and Setup (15–30 minutes)

• Download and install PDQ Deploy from pdq.com.
• Installation is lightweight and typically completes in under 10 minutes.
• Configure admin credentials and network access.

• Optional: Install PDQ Inventory for dynamic targeting.

2. Package Configuration (30–60 minutes)

• Create or import deployment packages.
• Use the Package Library to access prebuilt packages for common apps.
• Customize packages using up to 10 deployment steps, including:
  • Install
  • Command
  • PowerShell
  • File Copy
  • Reboot
  • Scan
  • Sleep
  • Message
  • Logoff

  • Nested Package

3. Target Configuration (15–30 minutes)

• Define target machines manually or import from Active Directory.

• Use PDQ Inventory to create dynamic collections based on system attributes.

4. Deployment Execution (Varies by network size)

• Deploy packages using:
  • Manual Deploy Once
  • Scheduled Deployments
  • Heartbeat Triggers (deploy when a machine comes online)
  • Retry Queue for offline machines

• Monitor deployment progress in real-time.

5. Post-Deployment Monitoring and Reporting (Ongoing)

• View deployment results and logs.
• Redeploy to failed targets or from failed steps (Enterprise feature).

• Generate reports for auditing and compliance.

Total Time to Implement:

• Small to mid-sized environments: 1–2 hours for full setup and first deployment.
• Larger environments: 1–2 days, including testing, package customization, and integration with PDQ Inventory.

PDQ Deploy is highly customizable to meet specific business requirements. Here are the key customization capabilities:

• Custom Packages: You can create deployment packages tailored to your organization’s needs, including proprietary or internal applications.

• Custom Steps: Each package can include multiple steps, such as:
  • Install
  • Command
  • PowerShell
  • File Copy
  • Reboot
  • Message
  • Logoff
  • Sleep
  • Scan

  • Nested Packages

• Conditions and Filters: Packages can be configured to run only on specific:
  • OS versions
  • Architectures (x86/x64)
  • PowerShell versions

  • Logged-on states

• Scheduling and Triggers: Deployments can be scheduled or triggered by events like a machine coming online (heartbeat).
• Integration with PDQ Inventory: Enables dynamic targeting based on real-time system data.
• Central Server Mode: Allows multiple admins to manage deployments with private or shared packages.

These features make PDQ Deploy adaptable for businesses of all sizes and industries.

PDQ Deploy is known for its transparent and simple pricing model, with minimal hidden costs:

• License Cost:
  • Deploy & Inventory Bundle: $1,575 per admin/year.
  • PDQ Connect (for remote devices): $12 per device/year.
• Free Trial: 14-day full-featured trial available.
• Free Version: Offers basic deployment features with limited access to the Package Library.
• Setup Fees: None. Installation and setup are DIY and straightforward.
• Maintenance Fees: Included in the annual subscription; covers updates and new features.
• Support Charges:
  • Email Support: Included for licensed users.
  • Consultations: Free product consultations available.
• Discounts:
  • 15% off for small businesses (<50 employees), nonprofits, and educational institutions.

There are no surprise fees for updates or support, making it a cost-effective solution for IT teams.

PDQ Deploy incorporates multiple layers of security to protect sensitive data and ensure safe operations:

Data Encryption

• At Rest: Sensitive data (e.g., credentials) is encrypted using AES encryption with three separate keys:
  • One built into the application
  • One stored in the database

  • One stored in the Windows registry

    3

• In Transit: Uses SMB protocol and Windows authentication to securely transmit deployment data.

Credential Management

• Supports role-based access and least privilege principles.

• Integrates with Windows LAPS (Local Administrator Password Solution) for secure credential rotation.

Temporary Services

• Deployments create a temporary service on the target machine, which is removed after the task completes.

Package Integrity

• The Package Library is maintained and updated by PDQ to ensure safe, tested deployments.

Network Security

• Uses HTTPS for external communications (e.g., updates, license checks).

• Recommends using SMBv3 and disabling SMBv1 to avoid vulnerabilities.

These measures ensure that PDQ Deploy is secure for enterprise environments and compliant with IT best practices.

PDQ Deploy incorporates multiple layers of security to protect sensitive data and ensure safe operations:

Data Encryption

• At Rest: Sensitive data (e.g., credentials) is encrypted using AES encryption with three separate keys:
  • One built into the application
  • One is stored in the database

  • One is stored in the Windows registry

• In Transit: Uses SMB protocol and Windows authentication to securely transmit deployment data.

Credential Management

• Supports role-based access and least privilege principles.

• Integrates with Windows LAPS (Local Administrator Password Solution) for secure credential rotation.

Temporary Services

• Deployments create a temporary service on the target machine, which is removed once the task is complete.

Package Integrity

• The Package Library is maintained and updated by PDQ to ensure safe, tested deployments.

Network Security

• Uses HTTPS for external communications (e.g., updates, license checks).

• Recommends using SMBv3 and disabling SMBv1 to avoid vulnerabilities.

These measures ensure that PDQ Deploy is secure for enterprise environments and compliant with IT best practices.

PDQ Deploy follows a frequent and automated update cycle, especially for its Package Library and core application:

Update Frequency

• Package Library: Updated every business day, with most packages published within 24 hours of vendor release.
• High-Priority Packages: Released the same day or the next business day if released after hours.

• Application Updates: PDQ Deploy itself receives regular version updates, typically every few months, with patch notes available on its site.

Update Management

• Auto Download Packages: Automatically update to the latest version if configured. Admins can set approval policies (e.g., auto-approve, manual approve) for updates.
• Manual Refresh: Admins can press F5 or use the View > Refresh option to manually check for updates.
• Deployment of Feature Updates: While it is possible, deploying full Windows feature updates requires caution, as PDQ Deploy may not accurately track their progress. It’s recommended to deploy in small batches and monitor manually.
• Enablement Packages: Smaller updates that activate pre-installed features are easier to manage and deploy.

PDQ Deploy maintains a clear and user-centric policy regarding data ownership and portability:

Data Ownership

• You Own Your Data: All deployment configurations, logs, and credentials are stored locally on your infrastructure. PDQ does not access or store your deployment data.

• No Cloud Dependency: PDQ Deploy is an on-premises solution, meaning all data remains within your network unless you choose to export or back it up externally.

Portability

• Export/Import Capabilities: You can export packages, schedules, and settings for backup or migration to another server.
• Moving to Another Machine: PDQ provides documentation on how to move your installation and data to a new computer, including database and repository migration.
• No Vendor Lock-In: Since PDQ Deploy stores data in accessible formats (e.g., XML, SQLite), you can extract and repurpose your data as needed.

These policies ensure that organizations retain full control over their deployment data and configurations.

PDQ Deploy offers flexible licensing that allows organizations to scale up or down based on their administrative needs:

• Per-Admin Licensing: Licenses are based on the number of administrators, not endpoints. This makes it easy to scale without worrying about device count.
• Adding Licenses: You can add more admin licenses at any time through your PDQ account portal or by contacting sales.
• Scaling Down: You can reduce the number of licenses at the end of your current subscription term. There’s no penalty for downsizing, but changes take effect only at renewal.
• PDQ Connect: For remote device management, PDQ Connect is licensed per device and can be scaled independently from PDQ Deploy.
• No Setup Fees: Scaling up doesn’t incur additional setup costs.

This model is ideal for growing or fluctuating IT teams.

PDQ Deploy offers transparent and user-controlled subscription management:

Renewal Terms

• Auto-Renewal: Enabled by default. You can manage this in your PDQ account dashboard.
• Manual Renewal: If auto-renew is off, you can renew early or request a quote for manual payment (credit card, PayPal, PO, EFT, etc.).

• License Delivery: New license keys are sent immediately upon renewal.

Cancellation Terms

• Cancel Anytime: You can cancel future renewals at any time via the dashboard.
• No Refunds for Mid-Term Cancellations: If you cancel after renewal, the subscription remains active until the end of the term.
• Survey Required: A short cancellation survey is part of the process.

This gives users full control over their subscription lifecycle.

PDQ Deploy is designed with enterprise-grade security and compliance in mind:

• SOC 2 Compliance: PDQ is SOC 2 certified, ensuring adherence to strict data security and privacy standards.

• Data Encryption:
  • At Rest: AES encryption with three unique keys (application, database, registry).

  • In Transit: Uses SMB and HTTPS for secure communication.

• Temporary Services: Deployments use temporary services that are removed after execution to minimize attack surfaces.
• Package Library Integrity: All packages are vetted and updated by PDQ to ensure safety and reliability.
• Windows Authentication: Uses standard Windows credentials and supports integration with secure credential management tools like LAPS.

These measures make PDQ Deploy suitable for organizations with strict compliance requirements.