User Tools

Site Tools


networking:windows:active_directory:group_policy_software

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
networking:windows:active_directory:group_policy_software [2015/09/02 08:22]
gcooper created
networking:windows:active_directory:group_policy_software [2019/11/06 07:40] (current)
gcooper
Line 3: Line 3:
 **Training**: https://www.youtube.com/watch?v=zadvca6LlzA **Training**: https://www.youtube.com/watch?v=zadvca6LlzA
  
-**Troubleshooting**: http://deployhappiness.com/top-10-ways-to-troubleshoot-software-deployment/+**Troubleshooting Series**: http://deployhappiness.com/top-10-ways-to-troubleshoot-software-deployment/ 
 + 
 +:!: Installation can only happen on a reboot or logon and only if the GPO was downloaded beforehand. In a default environment, it is easiest just to reboot twice. 
 + 
 +:!: If you deploy the software to the user side (assigned or published), the GPO must be linked to an OU containing users (or you have to enable loopback). 
 + 
 +:!: When creating a GPO to deploy software, **always choose ''Advanced''**. 
 + 
 +===== Network Share ===== 
 + 
 +  - **Create a network share** called ''Software'' 
 +  - **Set the permissions** on the share 
 +    - **Network** 
 +      - ''Administrators'' -> ''Full Control'' 
 +      - ''Authenticated Users'' -> ''Read'' 
 +    - **Filesystem** 
 +      - ''Administrators'' -> ''Full Control'' 
 +      - ''Authenticated Users'' -> ''Read & Execute'', ''List'', ''Read'' 
 + 
 +:!: To install software in a Computer OU, the computer must have access to the share. 
 + 
 +:!: The ''Authenticated Users'' group includes computers. 
 + 
 +===== Computer Policies ===== 
 + 
 +Open both Group Policy Management Console ''gpmc.msc'' and ADUC. 
 + 
 +**Computer Configuration -> Policies -> Administrative Templates -> System -> Group Policy** 
 + 
 +  * ''Specify startup policy processing wait time'' -> ''90'' 
 + 
 +**Computer Configuration -> Policies -> Software Settings -> Software Installation** 
 + 
 +  * **Right-Click -> New -> Package -> <browse via network to .msi> -> Advanced** 
 +    * ''Advanced'' will allow editing all options later 
 +    * ''Assigned'' installs to Computers 
 +    * ''Published'' allows Users to install 
 +  
 +===== Troubleshooting ===== 
 + 
 +In an administrative command prompt: 
 + 
 +<file> 
 +gpresult /r /z 
 +</file> 
 + 
 +:!: Use ''/s'' to specify a remote computer.
networking/windows/active_directory/group_policy_software.1441203745.txt.gz · Last modified: 2015/09/02 08:22 by gcooper