Documente Academic
Documente Profesional
Documente Cultură
com/)
Home (http://www.tech-faq.com/) Blog (http://www.tech-faq.com/blog) Proxy (http://www.tech-faq.com/proxy) Web Tools (http://www.tech-faq.com/web-tools) Tutorials (http://www.tech-faq.com/tutorials) Software (http://www.tech-faq.com/software)
(http://www.tech-faq.com/feeds) Ads by Google Download Software Inventory Software Free Software Accounting Software
In order to deploy software with Group Policy, the following conditions apply: The organization must be running a Windows 2000 or Windows Server 2003 Active Directory domain. Client computers must be running Windows 2000 Professional or later. When using Group Policy to deploy software in an Active Directory domain, users basically need to edit an existing Group Policy Object (http://www.tech-faq.com/object.html) (GPO) or create a new GPO. The GPO needs to be linked to a site, domain, or organizational unit (OU). A GPO that is linked to one these components has a Software Installation node located under the Computer Configuration node and a software installation node located under the User Configuration node. Users can access a GPO linked to a site, domain, or OU through the Group Policy Editor console. The Software Installation node in the Group Policy Object Editor console can be considered the main tool used to deploy software. The Software Installation node also enables the centralized management of the initial deployment of software and the removal of software. Users can also centrally manage software upgrades, hotfixes, and patches from this location. Deploying software through Group Policy encompasses two types of software deployment: Assigning applications: the user should assign applications if certain users should have the applications available, irrespective of the actual computer the user is logged on to. Applications that are assigned are advertised to the user on the Start menu and are installed on initial use. Users can specify that the application be installed when someone next logs on to the workstation. Advertising is the process by which the application is prepared for installation. When Group Policy is used to deploy software and the software is included in the GPO linked to a site, domain, or OU, the software is referred to as being advertised to the user and computer. If assigning the application to a user, use the Software Installation node under User Configuration node, Software Settings. If assigning the application to a computer, use the Software Installation node under Computer Configuration, Software Settings. The process for assigning applications is listed below: 1. When the user logs on to the client computer, the WinLogon process advertises the application(s) on the Start menu or on the user s desktop. 2. The user selects the application from either one of these locations.
3. The Windows Installer service obtains the Windows Installer package for the selected application. 4. The request for the software is next passed on to the software distribution point (SDP). 5. The Windows Installer service initiates then installs the Windows Installer package for the requested software. 6. The Windows Installer service opens the application for the user. Publishing applications: When an application is published in Active Directory, the application is advertised to users in Control Panel, in the Add/Remove Programs applet. What this means is that the application is not automatically installed for the user and the user actually controls whether and when the application is installed. The user also controls the uninstallation of the application. The process for publishing applications is listed below: 1. 2. 3. 4. 5. 6. 7. The user logs onto the client computer and opens the Add Or Remove applet in Control Panel. The Add Or Remove applet gets its information on which software is available for installation from Active Directory. The user proceeds to select which application to install. The Add Or Remove applet obtains the software s location from Active Directory. The request for the software is passed on to the software distribution point (SDP). The Windows Installer service initiates then installs the Windows Installer package for the requested software. The user is now able to access the installed application.
In Group Policy, Software Installation utilizes the Windows Installer service to maintain and manage the state of software installation. The service runs in the background and enables the operating system (OS) to manage software installation based on information stored in the Windows Installer package.
If there are different users and computers that need different applications deployed, create OUs according to these software management requirements, place the necessary users or computers in the OU, then apply the GPO containing the software that should be deployed.
How to Create or Open a GPO and a GPO Console for Software Deployment
To create a new GPO: 1. Open the Active Directory Sites And Services. To create and link a GPO to a domain or OU, open the Active Directory Users and Computers console. 2. Right click the site, domain, or OU then click Properties on the shortcut menu. 3. When the Properties dialog box of the site, domain, or OU opens, click the Group Policy tab. 4. Click New and enter a name for the GPO. 5. Click Close. The GPO is by default linked to the site, domain, or OU in which it was created. To open an existing domain level GPO or OU level GPO: 1. 2. 3. 4. 5. Open the Active Directory Users and Computers console. Right click the domain or OU in the left console pane and click Properties on the shortcut menu. Click the Group Policy tab. In the Group Policy Object Links list, select the GPO and click Edit. The GPO is opened in the Group Policy Object Editor console.
To open an existing site level GPO: 1. 2. 3. 4. 5. 6. Open the Active Directory Sites and Services console. Expand the Sites node. Right click the site in the details pane and click Properties on the shortcut menu. Click the Group Policy tab. In the Group Policy Object Links list, select the GPO and click Edit. The GPO is opened in the Group Policy Object Editor console.
To create an MMC for a GPO: 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Click Start, Run, enter mmc in the Run dialog box, and click OK. On the File menu, click Add/Remove Snap-In. Click Add in the Add/Remove Snap-In dialog box to access the Add/Remove Snap-In dialog box. Click Add. Select Group Policy Object Editor and click Add. Click Browse to find the GPO. Click the All tab in the Browse For A Group Policy Object dialog box. Select the GPO. Click OK. Close all open dialog boxes then click Save As in the MMC on the File menu. Provide a name in the File Name box. Click Save. The Group Policy Object Editor for the GPO can now be accessed under the Administrative Tools menu.
1. 2. 3. 4. 5.
6.
7. 8. 9. 10. 11.
Open the appropriate GPO for the software deployment. In the console tree, proceed to expand either the User Configuration node or the Computer Configuration node. Right click the Software Installation node and click Properties on the shortcut menu. When the Software Installation Properties dialog box opens, in the Default Package Location box of the General tab, enter the Uniform Naming Convention (UNC) path to the SDP for the Windows Installer packages. Configure the default action that should be performed on new packages in the New Packages section of the General tab. Choose one of the options listed below: Display The Deploy Software Dialog Box: This is the default configuration setting. The Deploy Software dialog box will be displayed when new packages are added to the GPO. On this dialog box, choose whether to assign or publish the application or configure the properties of the package. Publish: Remember that applications can only be published to users, not computers. Therefore, this setting is only available for User Configuration. When the option is selected, the application is automatically published with the default package properties or settings. Assign: When the Assign option is selected, any new software installation packages added to the GPO are automatically assigned with the default package properties or settings Advanced: When a new software installation package is added to the GPO, the package s properties dialog box is displayed. Configure the properties for the installation package. In the Installation User Interface Options section of the General tab, choose one of the following options: Basic: When selected, users are shown limited information on the installation process. Maximum: When selected, users are shown all the installation messages and screens on the installation process. Click the Advanced tab. Select the Uninstall The Applications When They Fall Out Of The Scope Of Management checkbox to automatically remove the application if the GPO no longer applies to users or computers. Select the Include OLE Information When Deploying Applications checkbox if information on Component Object Model (COM) components should be included with the package. Select the Make 32-Bit X86 Windows Installer Applications Available To Win64 Machines checkbox to enable 64-bit Windows client computers to install 32-bit Windows Installer applications. Select the Make 32-Bit X86 Down-Level (ZAP) Applications Available To Win64 Machines checkbox to enable 64-bit client computers to install applications published using a .zap file (application files).
How to Configure the Default Application for the Specified File Extension
A user would normally need to associate a file extension with an application when he/she has multiple applications that can use a specified file format. 1. 2. 3. 4. 5. 6. Open the appropriate GPO console. In the console tree, expand either the User Configuration node or the Computer Configuration node. Right click the Software Installation node and click Properties on the shortcut menu. When the Software Installation Properties dialog box opens, click the File Extensions tab. Use the Select File Extension list to check which applications are associated with the file extension. Use the Up or Down buttons of the Application Precedence list box to move an application that should be the default application for the particular extension to the top of the list. 7. Click OK.
How to Change the Default Software Installation Behavior Over Slow Network Links
Group Policy considers all network connections that are slower than 500 Kbps (http://www.tech-faq.com/kbps.html) as slow links (default). At this point, the policies listed below are disabled: Disk Quotas Folder Redirection
Scripts Software Installation And Maintenance However, users can change the speed that Group Policy considers slow to change the default software installation behavior over slow network links. In addition to this, enable or disable the processing of policies listed below over a slow link: Disk Quota, EFS Recovery, Folder Redirection, Internet Explorer Maintenance, IP Security, Scripts, Software Installation, and Security. To change the default speed that Group Policy considers slow: 1. Open the GPO console. 2. In the console tree, expand either the User Configuration node or the Computer Configuration node then expand Administrative Templates, System, and Group Policy. 3. Double-click Group Policy Slow Link Detection in the details pane. 4. When the Group Policy Slow Link Detection Properties dialog box opens, select Enabled and enter the speed that should be used to define whether a connection is slow. Entering a value of 0 disables slow link detection. 5. Click OK.
8. 9. 10.
Share
1.
What s an example of a software package you d want to publish to users, and an example of a software package you d want to assign to users. Reply (/deploying-software-through-grouppolicy.html?replytocom=32866#respond)
redirection-using-group-policy.html) An example of published; software no one ever much uses. Example of assigned; FLASH, Adobe Reader,
etc..the essentials..make category s with your published and assigned.easier deployment. Reply (/deploying-software-through-group-policy.html?replytocom=50518#respond) Rick B says: June 14, 2011 at 4:48 pm (http://www.tech-faq.com/deploying-software-through-grouppolicy.html/comment-page-1#comment-41869) (Quote) (javascript:void(null))
2.
What do I do if we removed an application from the GPO and accidentally chose Allow Users To Continue To Use The Software, But Prevent New Installations when we should ve chosen Immediately Uninstall The Software From Users And Computers ? Reply (/deploying-software-through-group-policy.html?replytocom=41869#respond) Steven Causey says: August 1, 2011 at 8:18 pm (http://www.tech-faq.com/deploying-software-through-group-policy.html/comment-page-1#comment50516) (Quote) (javascript:void(null)) Simply find the the uninstall command line, or MSI installer code, and uninstall using a login scriptits no big deal. Use CPAU.exe, EXESCRIPT, and MOLEBOX PRO to convert your created batch, or vbs into an encrypted EXE with built-in credentialssimple man! Ill help if you need it stvncaus @ hotmail. com (dont spam me bro)
3.
Reply (/deploying-software-through-group-policy.html?replytocom=50516#respond) Steven Causey says: August 1, 2011 at 8:22 pm (http://www.tech-faq.com/deploying-software-through-group-policy.html/comment-page-1#comment50519) (Quote) (javascript:void(null)) I humbly offer my services to most.I have many, many years of experience, trial and error, scripting to repair screw-ups, bad MSI s I had to modify, etc. Reply (/deploying-software-through-group-policy.html?replytocom=50519#respond) IT guy says: August 18, 2011 at 5:07 pm (http://www.tech-faq.com/deploying-software-through-group-policy.html/comment-page-1#comment55461) (Quote) (javascript:void(null)) Very informative walk through. However, I have an issue with my GPO s. I have created and configured two GPO s. One for Mozilla 5.0 and one for my company s symantec anti-virus. I have successfully added the msi. packages under the software installation on both computer and user configurations. At boot up, the clients log in dialog displays that these packages are being installed. But when I check, the Mozilla version is not 5 but 3.6. Also the Symantec did seem to install its self on most clients. Strange thing is it gives errors Failed to load ect but still shows up in taskbar. After all my clients picked up the Symanted, I removed the GPO. Now every time a client logs in they get the Failed to install package, package is a network resource that is unavailiable. Im stumped. How can I prevent my clients form receving these error messeges? after the GPO has been removed and the software installed. Why is mozilla not updating itself and one last question, is it suppose to show the package is installing at login dialog, every time the
user logs in regardless if the package has been installed. Help? Reply (/deploying-software-through-group-policy.html?replytocom=55461#respond) The Cat says: August 31, 2011 at 4:45 pm (http://www.tech-faq.com/deploying-software-through-group-policy.html/comment-page-1#comment63001) (Quote) (javascript:void(null)) I d like to know how publishing works with a Windows 7 client. I m stuck in academia, do not have the machines available to test this myself at the moment. A published package is supposed to show up in Control Panel Add/Remove Software. However, Windows 7 does not say Add, it simply says Change or Remove Programs. Do published packages still show up here? Thanks,
4.
Reply (/deploying-software-through-group-policy.html?replytocom=63001#respond) Leave a Reply Post your comments and questions below, but please follow our commenting guidelines (http://www.tech-faq.com/comment-guidelines).
Name (required) Mail (w ill not be published) (required)
(javascript:;) (javascript:;) (javascript:;) (javascript:;) (javascript:;) (javascript:;) (javascript:;) (javascript:;) (javascript:;) (javascript:;) (#) (javascript:;)
Path:
(ja ascript:;)
Submit Comment
(http://ad.doubleclick.net/click;h=v8/3bce/0/0/%2a/n;44306;0-0;0;29017966;3823-300/100;0/0/0;u=,ns30218780410_1322587217,123e52df6508afd,cecodesk,ax.-ns.mosmphon_m-ns.itbuitma_lns.itennetw_l-ns.itclclou_l-ns.cecodesk_m;~okv=;net=ns;u=,ns30218780410_1322587217,123e52df6508afd,cecodesk,ax.-ns.mosmphon_m-ns.itbuitma_lns.itennetw_l-ns.itclclou_l-
(http://ad.doubleclick.net/click;h=v8/3bce/0/0/%2a/h;44306;0-0;0;29017966;4307-300/250;0/0/0;u=,ns-30319835120_1322587235,123e52df6508afd,cecodesk,ax.-n ns.cecodesk_m;~okv=;net=ns;u=,ns-30319835120_1322587235,123e52df6508afd,cecodesk,ax.-ns.mosmphon_m-ns.itbuitma_l-ns.itennetw_l-ns.itclclou_l-
ns.cecodesk_m;;kw=;tile=1;sz=300x250,336x280;net=ns;cmw=nowl;contx=cecodesk;an=;bu=541;br=12717;dc=s;btg=ns.mosmphon_m;btg=ns.itbuitma_l;btg=ns.ite
ns.cecodesk_m;;ppos=atf;kw=;tile=2;sz=300x100;net=ns;cmw=nowl;contx=cecodesk;an=;bu=;br=;dc=s;btg=ns.mosmphon_m;btg=ns.itbuitma_l;btg=ns.itennetw_l;b
Microsoft Active Directory Understanding Organizational Units (http://www.tech-faq.com/understanding-organizational-units.html) What s New in Windows Server 2003 Active Directory (http://www.tech-faq.com/new-in-windows-server-2003-active-directory.html) Understanding Group Types and Scopes (http://www.tech-faq.com/understanding-group-types-and-scopes.html)
Understanding Forests and Domains (http://www.tech-faq.com/understanding-forests-and-domains.html) Understanding and Managing Operations Master Roles (http://www.tech-faq.com/understanding-and-managing-operations-masterroles.html)
Understanding Active Directory (http://www.tech-faq.com/understanding-active-directory.html) Understanding Trust Relationships (http://www.tech-faq.com/understanding-trust-relationships.html) Troubleshooting Group Policy (http://www.tech-faq.com/troubleshooting-group-policy.html) Troubleshooting Active Directory Availability (http://www.tech-faq.com/troubleshooting-active-directory-availability.html) The Global Catalog Server (http://www.tech-faq.com/the-global-catalog-server.html) Publishing Resources in Active Directory (http://www.tech-faq.com/publishing-resources-in-active-directory.html) Planning a Group Policy Strategy (http://www.tech-faq.com/planning-a-group-policy-strategy.html) Forest and Domain Functional Levels (http://www.tech-faq.com/forest-and-domain-functional-levels.html) Deploying Software through Group Policy (http://www.tech-faq.com/deploying-software-through-group-policy.html) Managing Recipient Objects, Address Lists, and Distribution and Administrative Groups (http://www.tech-faq.com/managing-recipientobjects-address-lists-and-distribution-and-administrative-groups.html)
Managing Active Directory Performance (http://www.tech-faq.com/managing-active-directory-performance.html) Creating and Managing Forests and Domains (http://www.tech-faq.com/creating-and-managing-forests-and-domains.html) Creating and Managing Domain Controllers (http://www.tech-faq.com/creating-and-managing-domain-controllers.html) Implementing Folder Redirection with Group Policy (http://www.tech-faq.com/implementing-folder-redirection-using-group-policy.html) Implementing and Managing Group Policy Objects (GPOs) (http://www.tech-faq.com/implementing-and-managing-group-policy-objectsgpos.html)
Group Policy Terminology and Concepts (http://www.tech-faq.com/group-policy-terminology-and-concepts.html) Configuring and Troubleshooting Active Directory Replication (http://www.tech-faq.com/configuring-and-troubleshooting-active-directoryreplication.html)
Backing Up and Restoring Active Directory (http://www.tech-faq.com/backing-up-and-restoring-active-directory.html) Active Directory Terminology and Concepts (http://www.tech-faq.com/active-directory-terminology-and-concepts.html) Active Directory Security Principal Accounts (http://www.tech-faq.com/active-directory-security-principal-accounts.html) Active Directory Security (http://www.tech-faq.com/active-directory-security.html) Active Directory Management Tools (http://www.tech-faq.com/active-directory-management-tools.html) Active Directory Objects (http://www.tech-faq.com/active-directory-objects.html) Active Directory (http://www.tech-faq.com/active-directory.html) How to Maintain Active Directory (http://www.tech-faq.com/how-to-maintain-active-directory.html) How to Backup Active Directory (http://www.tech-faq.com/how-to-backup-active-directory.html) Active Directory Groups (http://www.tech-faq.com/active-directory-groups.html) Group Policy (http://www.tech-faq.com/group-policy.html) Directory Partitions (http://www.tech-faq.com/directory-partitions.html) How to Delegate Administrator Privileges in Active Directory (http://www.tech-faq.com/how-to-delegate-administrator-privileges-in-activedirectory.html)
Active Directory Replication (http://www.tech-faq.com/active-directory-replication.html) Tree and Forest in Active Directory (http://www.tech-faq.com/tree-and-forest-in-active-directory.html) Active Directory Operations Masters (http://www.tech-faq.com/active-directory-operations-masters.html) Global Catalog (http://www.tech-faq.com/global-catalog.html) Global Catalog in Active Directory (http://www.tech-faq.com/global-catalog-in-active-directory.html) Logical Structure of an Active Directory (http://www.tech-faq.com/logical-structure-of-an-active-directory.html) Physical Structure of Active Directory (http://www.tech-faq.com/physical-structure-of-active-directory.html) Replication Topology in Active Directory (http://www.tech-faq.com/replication-topology-in-active-directory.html) Active Directory Organizational Units (http://www.tech-faq.com/active-directory-organizational-units.html) Active Directory Authentication Types (http://www.tech-faq.com/active-directory-authentication-types.html)
(http://ad.doubleclick.net/click%3Bh%3Dv8/3bce/3/0/%2a/r%3B246865330%3B0-0%3B0%3B29017966%3B4986300/600%3B44248093/44265880/1%3Bu%3D%2Cns-30316445632_1322587227%2C123e52df6508afd%2Ccecodesk%2Cax.-ns.mosmphon_mns.itbuitma_l-ns.itennetw_l-ns.itclclou_l-ns.cecodesk_m%3B%7Eokv%3D%3Bnet%3Dns%3Bu%3D%2Cns30316445632_1322587227%2C123e52df6508afd%2Ccecodesk%2Cax.-ns.mosmphon_m-ns.itbuitma_l-ns.itennetw_l-ns.itclclou_lns.cecodesk_m%3B%3Bppos%3Datf%3Bkw%3D%3Btile%3D2%3Bsz%3D300x250%2C300x600%3Bnet%3Dns%3Bcmw%3Dnowl%3Bcontx%3Dcecodesk%3Ban%3D%3B
Path: Microsoft Windows (http://www.tech-faq.com/microsoft-windows) Microsoft Active Directory (http://www.tech-faq.com/microsoftwindows/microsoft-active-directory) Deploying Software through Group Policy () Tec -FAQ (http://www.tech-faq.com) - Privacy Policy (http://www.memebridge.com/about-us/privacy-policy.html)