Deploying Software through a GPO 4

[jjeffords]

Hey guys i have had the most rouble with deploying software through Group Policy in 2003. I have created an OU(ex Test Users)and have also set up a security group in that OU of two users ex Benny and John and have created a share \\homedc\c\softwaredeployment .
I have placed and administrative Install of Office 2003 into that directory. I have the permission of the test user security group set to be able to read and write on the share then i followed the instructions per this link

http://support.microsoft.com/default.aspx?scid=kb;EN-US;302430

Is there something i am missing? I mean isnt it the pro11.msi file that you set as a package to deploy? I have set everything up and when i log onto my mobile computer under the name Benny nothing is happening. I cant for the life of me figure out what i am missing. I have done this before but it has been quite some time.
You will get some serious kudos if you can set me straight !
Thanks
MCSEnNC

 

[jjeffords]

It is weird in playing around when i rebooted the server it installed the program i was trying to distribute to the workstations here locally on the DC.
I went to the domain and right clicked and created a GPO.
Which i would think would apply to the entire domain. but when i log in from another domain computer it does not start installing like it did on the DC.
Any help would be appreciated
MCSEnNC

 

[aznluvsmc]

From my understanding the Software policy is applied at the domain level. You created an OU that holds a security group. Did you place the user account in that OU also?

Did you check the permissions of the GPO also?

Steven S.
MCSA
A+, Network+, Server+, i-Net+

 

[aznluvsmc]

Sorry, did you assign the GPO or did you publish it?

Steven S.
MCSA
A+, Network+, Server+, i-Net+

 

[jjeffords]

Here is everything i did
Created an OU called Test Users and added the two account Benny and John to it.
Created test users domain local security group in the OU called TESTUSERS and made Benny and John members of it
Created a share called SoftwareDistribution and shared it not hidden giving permisson of read and write to the testusers security group
Got office 2003 CD and ran administrative install with the switch /a behind it and installed it into the directory SoftwareDistribution.The files that is places in there are as follows
Files (Directory)
Autorun.inf
OWC11.msi
PRO11.msi
Readme.htm
Setup.exe
Setup.htm
Once i did that went to AD Users and Computers Snap In and right clicked on the OU for TEST USERS and created a GPO called software distribution. and click on properties and the click on the security tab. I removed authenticated users and added TESTUSER Security Group and for the permissions i applied read write and Apply Group Policy.
After that i clicked edit for the GPO called SoftwareDistribution and went to the users settings and software and clicked on properties for the software settings and set the network directory as \\homedc\c\Softwaredistribution (where is installed office administratively)
I then right clicked and hit NEW and PACKAGE and then i DID NOT BROWSE. I manually typed in \\homedc\c\softwaredistribution\pro11.msi and then clicked assign when it popped up.
Then it placed itself on the right hand side.
After that i closed the group policy editor
then i went to the cmd and ran secedit command to force the update of the gpo throughout the domain.
Now i go to sign onto my mobile pc under the user name Benny and nothing happens. No installation no nothing. How long does it usually take to install. I thought it was instant. Also does it require reboot or just a simple log off and back on by the user or what.
Thanks in Advance
MCSENNC

 

[penauroth]

Try this:

1. Is there any other properties you are pushing down to users within the Users part of the GPO(sanity check)? If so, set something simple to ensure your policy is correctly configured and applied.

2. If you shared the /softwaredistribution dir, then there is no need to use the absolute path (\\homedc\c$\softwaredistribution\) - be sure to use the dollar sign after the drive letter. Instead, use the UNC (\\homedc\softwaredistribution\).





Paul

 

[jjeffords]

Ok well i got it to finaly work however i had to apply the group policy by right clicking on the domain in AD and then setting up a new GPO and under properties applying AD setting to that particular group. This is what gets me though. How do you apply a GPO to an organizational unit by itself to make it work? I mean i did everything and i mean everything identical in both scenarios but only way i could get it to work was by creating the GPO by right clicking on the domain and not on the OU.
I would like to set up more OUs and have gpos apply to them but i cant get them to do anything

 

[aznluvsmc]

You did not state whether you had assigned or published the GPO to the users.

Anyways, if you got it working by applying it at the Domain level through the exact same process that you used at the OU level then I can only think that your AD may be screwed up. I know not much help.

Steven S.
MCSA
A+, Network+, Server+, i-Net+

 

[markdmac]

Deploying Microsoft Office Software Via Group Policy

1. Insert the office CD and cancel the auto install wizard
2. Create an Administrative Install
a. Create a folder for the Administrative Install
b. Start>Run> D:\Setup.exe /a
c. When prompted enter the install key
d. Browse to where to put the Administrative Install (path from step A)
3. Download the Administrative Patches for your version of Office. Extract the files.
a. 2003:

http://www.microsoft.com/office/ork/2003/admin/default.htm

b. XP:

http://www.microsoft.com/office/ork/xp/admin/default.htm

c. 2000:

http://www.microsoft.com/office/ork/2000/admin/default.htm

4. Download any Office Service Packs
5. Install the patches by running MSIEXEC.
msiexec /a \\uncpath\OfficeInstall\Office.msi /p \\uncpath\Patches\patch.msp
Where Office.msi and patch.msp are the actual file names on your system.
6. Download the Office Resource Kit for your version of Office
a. 2003:

http://www.microsoft.com/downloads/...10-a6e5-4334-8925-3bcf308cfbaf&displaylang=en

b. XP:

http://www.microsoft.com/office/ork/xp/appndx/appa04.htm

c. 2000:

http://download.microsoft.com/download/6/b/3/6b34f4c7-44e6-4d85-91d9-1acf9479da7d/orktools.exe

7. Install the ORK
8. Run the Custom Installation Wizard
a. Point to your MSI file and answer the questions in the Wizard. Save the file in the same location as your Administrative Install Point.
9. Create a software deployment GPO and assign\publish the software package.
a. Choose Advanced so you can specify the MST file. Configure the package to use your MST on the Modifications tab.
b. Disable the user configuration settings for the GPO if they are not being used.


I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[Eddiefdz]

Sorry to jump in on your thread here, but I am having similar problems doing this. First of all, what is the difference between assiging it or publishing it? Also, if i deploy this at the domain level, i would only want the apps to install to the users or pc's that are part of that OU not to everyone. Why is it that for MCSEnNC it ran the install on the DC? Is it even supposed to do that unless the DC is part of that group? Please shed some light on this for me.

Eddie Fernandez
CCNA, Network+, A+, MCP

 

[aznluvsmc]

When deploying software through a GPO you can either Assign it or Publish it to users or you can Assign it to computers.

When you Assign a software, the program group is added to the Start Menu and when the user either tries to open the program or open a file with an extension associated with the program, it will automatically be installed on first use.

When a program is Published (you cannot publish to computer objects) the user must actually install it from the Add/Remove programs menu.

If you only want a software GPO to be applied to the OU then you must create the GPO at the OU level. I'm not sure why MCSEnNC cannot get the OU level GPO to work. I've gotten mine to work.

Steven S.
MCSA
A+, Network+, Server+, i-Net+

 

[Eddiefdz]

Great news! It works. Thanks aznluvsmc and markdmac star for both of you. Just one more question. How can i get all my software into MSI packages? For example, if i want to use this to deploy all the software to new users that logon to new pc's on the domain, how can i get all my installs as MSI's?

Thanks.

Eddie Fernandez
CCNA, Network+, A+, MCP

 

[ReddLefty]

Be ready for a whole new set of headaches. Software Deployement has it's own set of issues, patches, problems and work-arounds... but the benefits are by far greater than the headaches.

Try going to this site:

http://www.appdeploy.com/

It has information about all the tools, softwares, patches and even some packaging tips as well as forums for people who have issues on creating packages or software deployement issues. Tek-Tips also has an application forum, but it's not as active as the AppDeploy site.



"In space, nobody can hear you click..."

 

[markdmac]

If you want to make your own MSI packages, check out the following:

http://support.microsoft.com/default.aspx?scid=kb;en-us;257718

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[weescotty]

I am having similar probs, but only when publishing zap files. My assigning msi installations work fine, but I cannot get any zap files to publish.
Yes I am publishing to users.

Any ideas?