GPO's

[GrimR]

As of this year we are renting all Laptops purchased.
This will allow us to implement a policy that prohibits the users installing non company software to there Laptops, including Games etc.
Anyone know of a good way to prevent the user from installing non company Software, while still allowing them to install Company software, I still want them to be local admins to allow the installations,I do not want to run around deploying new versions.

 

[58sniper]

If they are local admins, they have rights to do anything, including removing them from the domain, adding any software they want, etc.

The best solution is remove local admin rights, and use GPOs to push out the software. That way, you maintain control, and the software gets installed in a consistent way.

Pat Richard
Microsoft Exchange MVP

 

[GrimR]

58sniper , just a question on installing via GPO. I have tried this in the past, the problem was that a clerk logged into the network, and obviously the software installed, although he never ran the application, he then left to go to a client, which luckily was not hundreds of miles/KMs away, when there he attempted to open a document which gave him an error that the app could not connect to the server.
Any idea on how to prevent this from happening?
Secondly, there is one app that gets updated here, that does not have an .msi package, and I'm not great at creating msi packages, too damn lazy.
I suppose something like MOM would help. Whats your views on this.

 

[Dublin73]

on Windows 2000 Server there's a free utility for packaging msi s called WinInstall. It works really well. From google...

http://www.google.ie/search?client=...install+windows+2000&meta=&btnG=Google+Search

 

[markdmac]

I agree with 58sniper, GPOs are the way to go. You can create ZAP files to install the non-msi applications.

http://support.microsoft.com/default.aspx?scid=kb;en-us;231747&sd=tech

As for the problems you experienced, you would need to be a lot more specific on the application if you want recommendations to overcome the issue you describe.



I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[GrimR]

Mark this is as specific as I can get.
When you assign an application to a user, its icons are set up and the software is installed on first use. If the clerk is now sitting at a client and runs the installed application, it's not going to work. [I'm not sure of the exact error but straight away I removed the Group Policy as not to affect any other machines].How do I get around this. And obviously publishing is not an option.

By the way can .net framework 1 2 & 3 be installed in the same way?

 

[markdmac]

I was more looking for information on WHAT APPLICATION are they installing?

Does the application work if the user remains in your office? Why does it not work when disconnected? Is the working directory set to a network address? Or is this application some home grown application that relies on network connectivity? Does it work if they enable a VPN connection?

Yes, the .NET Framework can be installed via GPO.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[GrimR]

I was more looking for information on WHAT APPLICATION are they installing?
2 x in house App's with installable .msi's

Does the application work if the user remains in your office? Yes

Why does it not work when disconnected?
I take it that once assigned via GPO that the first time they use it, it looks to the server to install.

Is the working directory set to a network address?
Not that I know of. If I install it via script or manually install, and they leave it works fine.

Or is this application some home grown application that relies on network connectivity? No, runs stand alone

Does it work if they enable a VPN connection? Never tried,no need to, runs locally on the laptop.

I still believe it's a GPO issue as stated When you assign an application to a user, its icons are set up and the software is installed on first use.

 

[markdmac]

Seem to be running around in circles here. If installed from GPO and run while in the office the first time, does it work AFTER that when they leave the office?

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[GrimR]

Basically what I need to know is how do you do it.
e.g When you assign an application to a user, software is installed on first use.
If you assign to a computer, it will be installed the next time the computer starts.
I'm thinking computer would be best.

 

[markdmac]

Publish the applications to allow the user a choice to install them when they want.

Or assign to the computer and use script to remotely reboot the machines to ensure installation.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[GrimR]

Thanks, for your input.
Publish is not an option, they need to be installed.
I think assigning to a computer is the way to go. I'll just inform them to test before leaving.
At least once it's done and working, I can get rid of some scripts.