Group Policy help please.

Snow-Munki

Snow-Munki

Snow-Munki

Soldato
Joined
18 Oct 2002
Posts
10,075
Location
At home
Ok,

I want to test out pushing out a MSI that I built to all users here, so obviously want to test it first.

I have already created a test user, and using vmware here. Have also created a test Ou and put the computer and user into this test OU.

Then created a new group policy where inheritance is blocked, and then added the new MSI to be pushed out, however when the test user logs in, nothing happens at all,any ideas at all why this is ?

Thanks
 
Im guessing you are trying to create a default Apply GPO here i.e. an application that is to be rolled out to every machine in that OU? In the Advanced section of Group Policy, under Authenticated Users ensure that "Read" and "Apply Policy" are checked. Similarly, if it's a default deny group, make sure that Authenticated User has "Read" access and the security group containing the member computers has Read and Apply Group
 
erm, from what i remember you may need to add Domain Computers to the permissions. Cant remember where you do it exactly but its what stopped us installing Office2003 last year.

Just checked and you go into the properties of the package, then security and then add Domain Computers or the machine which you want to apply it to.
 
If you were (for instance) pushing out Acrobat Reader to the computers, you would need to attempt to open a pdf file for it to install. Also, you make want to check the file extension precedence in the software installation properties.
 
Otacon said:
If you were (for instance) pushing out Acrobat Reader to the computers, you would need to attempt to open a pdf file for it to install. Also, you make want to check the file extension precedence in the software installation properties.
Click to expand...

You can make it auto install to computers. We did it last year with office 2003. Cant remember the settings exactly off the top of my head, was quite a while ago but i know it is possible. Just required a restart of the machine and it installed it before logon.
 
Andyt_uk said:
You can make it auto install to computers. We did it last year with office 2003. Cant remember the settings exactly off the top of my head, was quite a while ago but i know it is possible. Just required a restart of the machine and it installed it before logon.
Click to expand...
Please dig that out if you can. We frigged it by adding some vbscript trickery into the GPO that installs the app. Other than that the option is disabled through GPMC.
 
must admit Im puzzled by the problems you guys are having with deploying applications via GPO. The only special settings I have are the security group, hosting the file on the DFS in an area where Auth users have read access and to remove the application when the machine falls out of the scope of management.
Might have to ask around at work to ask why our applications are set to "auto-install" by default
 
Otacon said:
Please dig that out if you can. We frigged it by adding some vbscript trickery into the GPO that installs the app. Other than that the option is disabled through GPMC.
Click to expand...

I'll try, we did it on my placement last year so it was quite a while ago. I'll try and contact the guys and see if they can remember. I'm pretty sure we just followed the guides on the MS site.
 
Andyt_uk said:
You can make it auto install to computers. We did it last year with office 2003. Cant remember the settings exactly off the top of my head, was quite a while ago but i know it is possible. Just required a restart of the machine and it installed it before logon.
Click to expand...

Same here. Standard method we use for deploying Symantec Enterprise edition.
 
Agreed- Appdeploy is a great resource ;)

Otacon said:
I wonder if I've just been unlucky in my choice of software then :dunno:
Click to expand...

Possibly- remember that unless a MSI is capable of installing silently you wont be able to deploy it via GPO.

i.e. if running msiexec /i MSIFILE.msi /t transform.mst (if applicable) /qn from the command line doesn't successfully install the msi then Group Policy wont be able to either!
 
you need to unblock inheritance(Block Inheritance is to select the OU container and not the individual policy).
Block Inheritance is a property of an AD container (site, domain or OU), not a property of a GPO.


copy files to the shared folder

create a new GPO called test
link the GPO to the what ever ou u want

Assigned as the deployment (assigning an application, you can assign it too a user or computer)

right-click on Computer Configuration\Software Settings\Software Installation, and select New -> Package

Specify the UNC path to the .msi

Select Assigned and click OK

then click on the msi file to get properties

tick install upon logon

logon to the workstation and it auto installs

or

Publishing an application to a user (you can't publish to a computer)
User Configuration Software Settings and right-click Software Installation. Select New, then click Package.

UNC path to the MSI file
click Advanced

name of the application that will appear in the Add New Program section
Deployment tab
publish
auto install

start a computer that is a member of domain , login. Open up the Control Panel, click Add/Remove Programs, select Add New Programs should see the application listed then click add

you can also make a zap script but it only publishes it.
 
Last edited:
M0KUJ1N said:
Agreed- Appdeploy is a great resource ;)



Possibly- remember that unless a MSI is capable of installing silently you wont be able to deploy it via GPO.

i.e. if running msiexec /i MSIFILE.msi /t transform.mst (if applicable) /qn from the command line doesn't successfully install the msi then Group Policy wont be able to either!
Click to expand...

nope doesn't work, brings up the msiexec dialog box of switches. guess i'll try and rebuild the msi then :)

Thanks !
 
You must log in or register to reply here.
Back
Top Bottom