$ 0 0 is endpoint protection a machine-by-machine individual install process or is there an AD integrated(or like) push way to install?