====== Install Software with Group Policy ======

**Training**: https://www.youtube.com/watch?v=zadvca6LlzA

**Troubleshooting Series**: http://deployhappiness.com/top-10-ways-to-troubleshoot-software-deployment/

:!: Installation can only happen on a reboot or logon and only if the GPO was downloaded beforehand. In a default environment, it is easiest just to reboot twice.

:!: If you deploy the software to the user side (assigned or published), the GPO must be linked to an OU containing users (or you have to enable loopback).

:!: When creating a GPO to deploy software, **always choose ''Advanced''**.

===== Network Share =====

  - **Create a network share** called ''Software''
  - **Set the permissions** on the share
    - **Network**
      - ''Administrators'' -> ''Full Control''
      - ''Authenticated Users'' -> ''Read''
    - **Filesystem**
      - ''Administrators'' -> ''Full Control''
      - ''Authenticated Users'' -> ''Read & Execute'', ''List'', ''Read''

:!: To install software in a Computer OU, the computer must have access to the share.

:!: The ''Authenticated Users'' group includes computers.

===== Computer Policies =====

Open both Group Policy Management Console ''gpmc.msc'' and ADUC.

**Computer Configuration -> Policies -> Administrative Templates -> System -> Group Policy**

  * ''Specify startup policy processing wait time'' -> ''90''

**Computer Configuration -> Policies -> Software Settings -> Software Installation**

  * **Right-Click -> New -> Package -> <browse via network to .msi> -> Advanced**
    * ''Advanced'' will allow editing all options later
    * ''Assigned'' installs to Computers
    * ''Published'' allows Users to install
 
===== Troubleshooting =====

In an administrative command prompt:

<file>
gpresult /r /z
</file>

:!: Use ''/s'' to specify a remote computer.