Re: .MSI Software Installation

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 11/05/04 

Date: Fri, 5 Nov 2004 10:19:35 -0500

Basildon,

First of all you do not deploy software via GPO to groups. You deploy
software to containers ( well, in the case of a Site-level or Domain-level
deployment....most people are deploying software to the OU-level, however ).
Period! And the user account object or the computer account object must
reside directly in the container to which the GPO is linked in order for it
to be eligible to receive that GPO.

Secondly, you can control this by way of the Security Group Filtering
feature. Normally, when you create a GPO the security Group 'Authenticated
Users' is given the READ and APPLY GROUP POLICY rights. You could remove
this security group from the Security tab on the GPO and replace it with a
Security Group of your creating. You would need to make sure that the user
account objects or the computer account objects that you want to be affected
by this specific GPO are indeed members of this security group. Then, give
this security group the READ and APPLY GROUP POLICY rights. However, and I
repeat, the user account object or the computer account object M*U*S*T
directly reside in the OU (assuming that this is being done at the
OU-level ) in order for it to fall under the SOM of that GPO. NOTE: SOM
means Scope of Management.

Now, to your specific question. I have never tried to install multiple
software applications via one GPO. I will have to play with this to get a
handle on how it does ( not ) work.

There was also a post awhile back on this exact scenario. I think that it
might have been in the Group Policy newsgroup. You might want to do a
search for it. This is not as easy as it sounds......

HTH,

Cary

"Basildon Bond" <Basildon Bond@discussions.microsoft.com> wrote in message
news:EC186831-206A-4B16-A626-9728763D4EA7@microsoft.com...
> When deploying a .MSI software package to a group using group policy in AD
> everything seems to work. When an object is added to the group the
software
> is deployed to that object.
>
> If I create a group policy software installation, and include two or more
> packages in one deployment I cannot seem to deploy them in any particular
> order. So if I was to deploy Office 2000 then Outlook 2003 as an upgrade
it
> may install the Outlook 2003 first then ignore the rest of Office 2000
> because it has performed the upgrade first.
>
> Any ideas?

Relevant Pages

  • Re: GPO testing
    ... Group policy actually has nothing to do with groups. ... NOT work if user account is not in OU where GPO is linked? ... I put the users into a security group under the OU. ... - In Active Directory Users and Computers created an OU under the ...
    (microsoft.public.windows.group_policy)
  • Re: GPO testing
    ... If I go into Active Directory Users and Computers -> Users and right click on a user and then go to "Add to group.." ... Group policy actually has nothing to do with groups. ... GPO will NOT work if user account is not in OU where GPO is linked? ... I put the users into a security group under the OU. ...
    (microsoft.public.windows.group_policy)
  • Re: GPO testing
    ... Here are the steps I used to create and link the GPO: ... Placed two users in the security group Test Group. ... Went to GPMC and right clicked on Group Policy Results and selected ... Test Group on my XP workstation. ...
    (microsoft.public.windows.group_policy)
  • Re: Security Groups in OUs
    ... > APPLY GROUP POLICY rights to the GPO. ... > Let's say that you have an OU in which there are 55 user account objects. ... If one does not already exist, create a security group that ...
    (microsoft.public.win2000.group_policy)
  • Re: TS Security settings
    ... Essentially you are using GPO Loopback Processing in replace mode. ... Authenticated Users from the security and replace it with a security group ... > Why do you have the Terminal Server in the group policy? ...
    (microsoft.public.windows.terminal_services)