Re: how to install a .msp using GPO

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hello biff,

You can create a file named for example "update.cmd" with the content (without the -----------):
----------------------------------------------------------------------------------------------------------------------
:excute the update
if not exist %systemroot%\system32\update.log msiexec.exe /p "\\server\share\adobe.msp"

:Copy a logfile to remote workstation(doesn't matter if the file has content or not)
if not exist %systemroot%\system32\update.log copy "\\server\share\update.log" "%systemroot%\system32\update.log"
----------------------------------------------------------------------------------------------------------------------

On the share place the .msp and create the empty update.log. So if the update.log doesn't exist on the local computer it run's the command and copies the update.log to the machine, next time the check finds the update.log and do not execute the command.

File permissions on the share should be "System" and "Administrators" Full Control and "Authenticated users" read%execute. Because you run it as a startup script, it runs with system permission on the local computer.

Try it out with a test machine BEFORE applying to all computers.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Meinolf,

Thanks for the reply. I did not originally use a .msi for the initial
installation. I just used the setup.exe off of a CD.

If I create a batch file with

msiexec.exe /p \\server\share\adobe.msp

Will this install with the proper permissions? I don't need to
specify anything else in the script? What do you recommend as proper
share permissions assuming a large AD environment where each
department has their own OU and can only administer their OU. When
the script runs, does the share permissions look for computer objects
or users in order to process?

"Meinolf Weber [MVP-DS]" wrote:

Hello biff,

You can do it two ways, updating the .msi which you used for
deploying or adding the patch with a startup script.

Update the .msi on the install share:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;226936
Update machine with startup script containing:

msiexec.exe /p \\server\share\adobe.msp

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
I have a patch that I need to install for Adobe Acrobat. I would
like to do it with Group Policy.

However I did not install Adobe Acrobat initially with Group Policy.
If I go to Computer Config-->Software Settings-->Software
installation and try to add a new package, I can only select .msi
files. The Adobe Acrobat is a .msp file. What can I do?



.

Relevant Pages

  • Re: Assign and MSI to all Domain Users not working
    ... added the msi to the install assignment. ... Permissions on the share ... and you GPO with the MSI is applied... ... For Authentication you can authenticate explicitly: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Install via Computer Logon Script
    ... I don't think that machine startup script is meant to deploy software. ... Their exe try to expand, and may look for variable like %TEMP% which may not exist in this case. ... The only supported way is to extract the MSI from the Exe and use Software policy GPO to deploy. ... The final size of the install ...
    (microsoft.public.windows.group_policy)
  • Re: how to install a .msp using GPO
    ... I did not originally use a .msi for the initial ... Will this install with the proper permissions? ... Update machine with startup script containing: ...
    (microsoft.public.windows.group_policy)
  • RE: MSI rollout problems - please help!
    ... >> as far as I remember, if you set it under User Configuration the software is ... >>> MSI file. ... >>> allow our Allstaff group Read permissions to the folder, ... >>> and install at logon. ...
    (microsoft.public.windows.server.active_directory)
  • Re: how to install a .msp using GPO
    ... share permissions to full control is best practise. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Will this install with the proper permissions? ... deploying or adding the patch with a startup script. ...
    (microsoft.public.windows.group_policy)