Computer policy gets pushed out to Win 7 but not XP

[dbustamante]

Hey All,

Im trying to push Google Chrome to my network via Group Policy and it's worked awesome for my Windows 7 machines BUT on my Windows XP machines (%97 of my network) it does not apply. I've tried updating my group policy on the local machine (gpupdate /force) and still no luck. This is what show's when i do a GPresult on one of my XP machines.

Applied Group Policy Objects
-----------------------------
Default Domain Policy
Secuity
Gang
Policie Managers
Computer Policy
Tester Group
Phone Recordings
Transportation

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Ncomputing
Filtering: Denied (Security)

Uniformed Staff
Filtering: Denied (Security)

E learning PC's
Filtering: Denied (Security)

Health Fair
Filtering: Denied (Security)

Reception
Filtering: Denied (Security)

Medical
Filtering: Denied (Security)

Human Resources
Filtering: Denied (Security)

ACA Documentation
Filtering: Denied (Security)

Chrome Installer
Filtering: Denied (Security)

Local Group Policy
Filtering: Not Applied (Empty)

Intake Staff
Filtering: Denied (Security)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Staff
Domain Admins
Keefe
Policie Managers
Gang Intel
Security
Local Policys

So it show's Chrome Installer was denied because of security but i have it set up for domain computers and everyone to have full control of that folder both under sharing and security. So i'm not sure why it would get pushed out to my Windows 7 machines and not my XP machines. Any help is greatly appreciated! Thank you!

 

[ShackDaddy]

Do you have a WMI filter set?

On the Scope tab of the policy, at the bottom, you can apply a scope to limit which systems the policy applies to. It may be limiting the policy to only apply to Vista/Win7.

Additionally, there are some aspects of policies that may be incompatible with XP systems that haven't been patched properly to allow ClientSideExtensions.

http://www.microsoft.com/en-us/download/details.aspx?id=3628

Can you lay out exactly how you built that deployment policy? Where in the GP hierarchy do the settings you used exist? Depending one how you did it, ClientSideExtensions may be required.

Dave Shackelford
ThirdTier.net

 

[dbustamante]

Hey Thanks for the reply!!I forgot to mention I’m working off of a Server 2003 domain so I’m not sure that link will work for my domain. I created the policy in the domainComputers section so it will silently install. I downloaded the Chrome MSI (Chrome MSI package for Win8/Win7/Vista/XP is what it said when I downloaded it) and the Chrome template I left everything set to (not configured) in the template and added the MSI to the software settings. I’m looking at the scope of my policy and it shows <none> for my WMI filter. I have it set to Enforced Yes and Linked Enabled Yes Path domain/domainComputers and under my Security Filtering I have domain computers added. On the Shared folder itself I have it set up with Sharing and Security both with everyone full control and domain computers full control. I've basically set it up the way I set up all my other MSI files but for some reason it only get's pushed to my windows 7 machines. You think it might be the extension's causing the problem?