Trend Micro Worry-Free Setup Guide India — Step-by-Step Deployment for SMBs

This guide covers how to set up Trend Micro Worry-Free Business Security in an Indian SMB environment — from account provisioning through agent deployment, policy configuration and email protection activation.

Note: Trend Micro is purchased through authorised partners in India. Cloudfy Systems is an authorised Trend Micro partner. Contact us at +91 97600 50555 for provisioning.

What You Need Before Starting

Technical requirements:

• Windows 10/11 or Windows Server 2016/2019/2022 (for server agent)
• macOS 11+ for Mac endpoints
• Internet connection on each device (HTTPS outbound port 443)
• Admin rights on each device during installation

Admin access:

• Email address for the Worry-Free management account (typically IT admin)
• Current antivirus uninstalled or scheduled for removal

From Cloudfy:

• Licence activation code
• Link to your Worry-Free cloud console

Step 1 — Access the Worry-Free Console

After Cloudfy Systems activates your Worry-Free licence:

1. Navigate to https://wfbs-svc.trendmicro.com (or the URL in your activation email)
2. Log in with the credentials Cloudfy provided
3. The dashboard shows your licence status and an empty device list — ready for agent rollout

Dashboard overview:

• Dashboard tab: Protection summary — all devices, threat events, licence usage
• Devices tab: Per-device status, group management
• Security Events tab: Alert stream — malware detected, blocked URLs, quarantined files
• Reports tab: Scheduled reports, compliance exports
• Settings tab: Policies, exclusions, email scanning configuration

Step 2 — Create Device Groups

Before deploying agents, create logical device groups matching your organisation:

Suggested groups for Indian SMBs:

To create a group:

1. Go to Devices → Add Group
2. Name the group (e.g., "Finance Team")
3. Set the policy to apply — you can use the default policy initially and customise later

Step 3 — Download and Install the Security Agent

Manual Installation (Pilot — 1–5 devices)

1. In the console: Devices → Add Devices → Download Agent
2. Select OS (Windows x64, Windows x32, macOS)
3. Download the installer package
4. On the target device, run the installer as Administrator
5. The installer is typically 50–100 MB and takes 3–5 minutes
6. Device appears in the console within 10 minutes

Deployment via Active Directory GPO (Recommended for 10+ devices)

If your devices are domain-joined:

1. Download the agent MSI from the console
2. Copy the MSI to a network share accessible by all domain computers
3. In Group Policy Management (domain controller):
   • Create a new GPO: "Trend Micro Worry-Free Deployment"
   • Navigate to: Computer Configuration → Software Settings → Software Installation
   • Add new package: browse to the network share MSI
   • Set deployment to "Assigned"
4. Apply the GPO to target OUs
5. Devices receive the agent at next GPO refresh or reboot

Remote Push from Console

For devices on the same network where admin credentials are available:

1. Go to Devices → Add Devices → Scan Network
2. Enter the IP range of your internal network
3. Devices that allow remote admin connections are discovered
4. Select devices and click Install Agent Remotely
5. Enter admin credentials when prompted

Step 4 — Remove Existing Antivirus

Running Trend Micro alongside another antivirus causes conflicts. Remove any existing AV before or during Worry-Free deployment.

Common AV removal tools:

Windows Defender is automatically disabled when Trend Micro Worry-Free is installed and registered as the system's primary antivirus.

Step 5 — Configure the Security Policy

The default Worry-Free policy is a good starting point. Adjust these settings for Indian business environments:

Web Reputation (URL Filtering)

• Enable: Block pages with dangerous reputation ✓
• Enable: Block pages rated as phishing ✓
• Category filtering: Block as appropriate — suggested for most businesses:
  • Adult/Pornography: Block
  • Gambling: Block
  • Cryptocurrency Mining: Block
  • P2P File Sharing: Block
  • Others: Monitor only (don't block social media for all staff — discuss with management)

Ransomware Protection

• Enable: Ransomware Protection ✓
• Enable: Back up files before ransomware can encrypt them ✓ — this is the key setting for file recovery
• Configure: Notify administrator when ransomware is detected ✓ (enter admin email)

Device Control (USB)

• Choose based on your business policy:
  • Finance/HR teams: Block all USB storage devices (reduces data exfiltration risk)
  • General staff: Allow but log all USB activity
  • IT team: Allow with read/write access

Scan Schedule

• Real-time scanning: Enabled always ✓
• On-demand scan schedule: Weekly — Saturday 11 PM (off-hours) ✓
• Scan network drives: Enable for environments with file servers ✓

Notifications

Configure email alerts for:

• Malware detected: Send to IT admin
• Ransomware activity: Send to IT admin + management
• Device offline for 7+ days: Send to IT admin (device may have left the network)

Step 6 — Activate Email Security (Worry-Free Advanced Only)

If you purchased Worry-Free Advanced, activate email scanning:

For Microsoft 365

1. In console: Settings → Email Security → Microsoft 365 Configuration
2. Click Connect to Microsoft 365
3. Sign in with your Microsoft 365 Global Admin account
4. Grant the requested permissions (read email headers, quarantine messages)
5. Configure anti-spam level (High/Medium/Low — Medium recommended)
6. Configure phishing protection: Block (not Monitor)
7. Enable BEC (Business Email Compromise) detection: ✓

For Exchange On-Premise

1. In console: Settings → Email Security → Exchange Server Configuration
2. Enter your Exchange server hostname/IP
3. Install the Exchange transport agent (small agent on Exchange server)
4. Configure MX record or Smart Host routing if required

Test email security: Send a test email to your domain with a known test malware attachment (EICAR test file). Verify it is blocked and admin receives a notification.

Step 7 — Run First System Scan

After agent deployment and policy configuration:

1. Run a full system scan on pilot devices first
2. Review any detections — confirm they are genuine threats or identify false positives
3. For false positives: add exclusions in Settings → Global Exclusions
4. Roll out to remaining devices after false positives are resolved
5. Run the first organisation-wide scan on a Saturday night (off-hours)

Step 8 — Ongoing Maintenance

Weekly:

• Review Security Events dashboard — triage unreviewed alerts
• Check device list — confirm all devices are online and protected

Monthly:

• Download a threat report from the Reports tab
• Review quarantined items — confirm no legitimate files were quarantined
• Check for agent updates — Worry-Free updates automatically but confirm all agents are on the latest version

Quarterly:

• Review and update web filtering categories
• Conduct a phishing simulation test with your team
• Confirm licence count is accurate — add seats for new employees

Getting Help with Trend Micro Setup in India

Cloudfy Systems handles the full Trend Micro Worry-Free deployment for Indian businesses — provisioning, agent rollout, policy configuration and admin training. Contact us for setup support.

Visit: cloudfysystems.com/products/trend-micro | Call: +91 97600 50555