deny software install based on security

My question is related to the following post "Applying GPO for some PC in an
Organization Unit ".

The software is Acrobat 7 Pro. It is assigned and only installed on PCs that
are members of 'acrobat7_install' security group. Installing the software
is working great.
Let's say I need to remove Acrobat from XYZ PC today, then down the road I
need to reinstall it on the same PC. I can just add it back into the
security group. Seem simple enough.
This is how it is working for me right now.
The policy tries to install the software, but quickly skips it. The PC has
been rebooted many times, it's 'waiting for network to start' and it's been
three days since the PC was removed from the group, so it should have
replicated to all servers.

This is what is in RSOP:
"Software Installation did not complete policy processing because a system
restart is required for the settings to be applied. Group Policy will
attempt to apply the settings the next time the computer is restarted.
Additional information may have been logged. Review the Policy Events tab in
the console or the application event log for events between 8/24/2007
11:02:17 AM and 8/24/2007 11:02:17 AM. ". I do not see a relevant entry in
the Event Viewer.

I'm wondering what is preventing this software to be reinstalled on the PC?
It was installed by GPO and removed by GPO. To me, there should not be a
problem to reinstall it.

Thanks,
PaulO


.

Relevant Pages

  • Re: GPO testing
    ... Here are the steps I used to create and link the GPO: ... Placed two users in the security group Test Group. ... Right clicked on the new policy called "test" and selected edit. ... Test Group on my XP workstation. ...
    (microsoft.public.windows.group_policy)
  • Re: Publishing/Assigning Applications
    ... > default domain policy. ... you are not creating the GPO there AT the OU. ... Authenticated Users security group is given both the READ and APPLY GROUP ...
    (microsoft.public.win2000.group_policy)
  • Re: Local Group Policy is assigning only to user with admin rights !!???
    ... Typically one would put the computer account object in an OU by itself (or ... and then create a GPO using Loopback linked to ... care to remove the 'Authenticated Users' security group from the security ... this group the READ and APPLY GROUP POLICY rights and away you go. ...
    (microsoft.public.win2000.group_policy)
  • Re: deny software install based on security
    ... installing, in this case, its share access permissions caused by skinware. ... that are members of 'acrobat7_install' security group. ... The policy tries to install the software, ...
    (microsoft.public.windows.group_policy)
  • RE: Filtering GPO
    ... When filtering the security group for the Domain Admins, ... Apply Group Policy is all that is required to ensure this GPO does not apply ...
    (microsoft.public.windows.group_policy)
Loading