Computer's software re-installing software via AD

[bbell22]

I have 4 laptops that when they log in to the network it re-installs all of the programs in our Software Deployment Group Policy. The thing is the programs are on the laptop. This is random, almost like once a month. And if they are a Network Admin they are logging on to the laptop and have now admin rights. Out network is server 2000, the laptops are XP SP2. The only other thing in common is they are are based out of our corp. office, but have periodically be working out of one of our branch offices connecting via our Watchguard VPN tunnel.

 

[bbell22]

One more thing, it is acting like the network group policies are being overwritten by the local.

 

[markdmac]

Unless the programs were originally instaleld via the GPO, a reinstall will occur. Don't know if that is the case for you or not.

Your VPN may have been preventing GPOs from processing. Check to see if you have slow link detection turned off or not.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[bbell22]

They were installed by GPO. Also I unchecked the box that says to uninstall this application when it falls out of scope of management. Like I stated, it is so random when it happens and the only commonality are the fact they are all laptops, XP SP2, and when they are at the remote site.

 

[markdmac]

Does the remote site use the same GPO or a different one?

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[bbell22]

Each site has their own GPO.

 

[markdmac]

THat would explain it then. The applicaiton is tied to a GPO, so if you have multiple GPOs for the sites that do the same install, switching sites would prompt that.

What is more strange is that you don't see it happen on every machine in that scenario.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[bbell22]

We have multiple Group Policies, but they are tied to a GPO. For example we have a corp. software installtion policy and a separate installation policy for the remote site. Their computers are tied to it, so it you were to log in down their, those policies would not apply just the ones from Corp. I hope I cleared that up a little.

 

[markdmac]

Not entirely. Sorry.

Do you have a mix of Win2K and Win2K3? Are you linking GPOs? Can you through text map out the policy layout and AD layout?

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[bbell22]

We have a Mixed. We are linking GPOS.

We have a Computer policy for our laptops related to security.
We have a computer policy for every plant related to software installation.
We then have a computer group for every application(MSOffice, Adobe,etc). There is one for every plant
The computers are assigned to an application group (ex. laptop1 is assigned to the MSOffice 2003 group) and the Software installation Policy.

In the software installation policy is a list of the applications with the settings (mst location, assigned or published)

 

[markdmac]

Is there any ryme or reason to which apps reinstall? Any reason the saem apps are not using the same GPO (linked) between sites?

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[bbell22]

All that are in the software intallation policy. Because the software is installed from different servers depending on the plant location.

 

[markdmac]

The only other thing I can suggest to you is to ensure all policies have the same version of the software. Since they are different policies, I would expect the behavior.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[bbell22]

But if they are not assigned to the group at the remote site, the gp would not be applied when you login.

 

[markdmac]

I'd double check the security set on the policies. Beyond this I am afraid I can offer no more insite.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[bbell22]

Thank you for your help