User Tools

Site Tools


networking:windows:active_directory:group_policy_software

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
networking:windows:active_directory:group_policy_software [2015/09/02 08:32]
gcooper
networking:windows:active_directory:group_policy_software [2019/11/06 07:40] (current)
gcooper
Line 4: Line 4:
  
 **Troubleshooting Series**: http://deployhappiness.com/top-10-ways-to-troubleshoot-software-deployment/ **Troubleshooting Series**: http://deployhappiness.com/top-10-ways-to-troubleshoot-software-deployment/
 +
 +:!: Installation can only happen on a reboot or logon and only if the GPO was downloaded beforehand. In a default environment, it is easiest just to reboot twice.
 +
 +:!: If you deploy the software to the user side (assigned or published), the GPO must be linked to an OU containing users (or you have to enable loopback).
 +
 +:!: When creating a GPO to deploy software, **always choose ''Advanced''**.
 +
 +===== Network Share =====
 +
 +  - **Create a network share** called ''Software''
 +  - **Set the permissions** on the share
 +    - **Network**
 +      - ''Administrators'' -> ''Full Control''
 +      - ''Authenticated Users'' -> ''Read''
 +    - **Filesystem**
 +      - ''Administrators'' -> ''Full Control''
 +      - ''Authenticated Users'' -> ''Read & Execute'', ''List'', ''Read''
 +
 +:!: To install software in a Computer OU, the computer must have access to the share.
 +
 +:!: The ''Authenticated Users'' group includes computers.
  
 ===== Computer Policies ===== ===== Computer Policies =====
 +
 +Open both Group Policy Management Console ''gpmc.msc'' and ADUC.
 +
 +**Computer Configuration -> Policies -> Administrative Templates -> System -> Group Policy**
 +
 +  * ''Specify startup policy processing wait time'' -> ''90''
 +
 +**Computer Configuration -> Policies -> Software Settings -> Software Installation**
 +
 +  * **Right-Click -> New -> Package -> <browse via network to .msi> -> Advanced**
 +    * ''Advanced'' will allow editing all options later
 +    * ''Assigned'' installs to Computers
 +    * ''Published'' allows Users to install
 + 
 +===== Troubleshooting =====
  
 In an administrative command prompt: In an administrative command prompt:
networking/windows/active_directory/group_policy_software.1441204378.txt.gz · Last modified: 2015/09/02 08:32 by gcooper