Re: Group Policy Software Installation
- From: "Cary Shultz" <cwshultz@xxxxxxxx>
- Date: Mon, 1 May 2006 06:40:47 -0400
Net Admin,
Did you download the correct version (with respect to language)? This has
always been a potential problem - the client software that you can download
from the Citrix web site is listed one language after another. It would be
easy to download the incorrect language.
--
Cary W. Shultz
Roanoke, VA 24012
"Net Admin" <NetAdmin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3767854F-93BC-4353-8EFF-20EA758C5DDF@xxxxxxxxxxxxxxxx
Ok Cary, I tried your suggestions and I get this event 119 warning on the
DC.
I looked it up on eventid.net and did as they suggested but that didn't
change anything. I did manage to get this thing to work last week on one
test
computer only once so I don't know what the heck is going on.
Thanks
"Net Admin" wrote:
Ok I will add the OU that the computers reside in to the NTFS ACLs. The
GPO
was created on the computers OU. I am not using GPMC, I like the default
way
to use Group Policy, should I be using GPMC? Good idea on the hidden
share
part, thanks.
The app is a Citrix ICA client, version 8.
If I instead applied the GPO to an OU for certain users would that be
better?
If I assigned the app to install at login then each time they login would
it
install or does it recognize that it is already done? How about the users
that use certain servers through Terminal Services, will the app try to
install on the servers every time they login? It will take approximately
2
days then I can remove the GPO because everyone will have logged in by
then.
Hey thanks a lot for your quick response!
"Cary Shultz" wrote:
I see the problem immediately. If it is set for the computer side of
things
then the computer account objects need to have some sort of access to
the
shared folder (read: Share and NTFS). I might suggest that you remove
the
EVERYBODY / Full Control share permissions and make it something like
Domain
Admins F/C and Domain Computers read and execute/list/read. Then, do
the
same thing for the NTFS permissions. And, since you probably do not
want
the normal users to be able to see this shared folder I might suggest
that
when you share the folder you append a dollar sign ($) at the end of
the
shared name. This will make it invisible (well, sorta).
Reboot the computers and away you go. Be aware that if the computers
are
Windows XP that it might take a couple of reboots (Logon Optimization).
Also, be aware that you can not publish applications that are set for
the
computer side. You can only assign them. Depending on what the
application
is you might want to consider Advanced Assign. You will need this if
you
are making use of an .mst file (Transforms file).
Additionally, is the GPO linked to the OU in which the computer account
objects physically reside?
Just out of curiosity, what is the application?
Are you using GPMC?
--
Cary W. Shultz
Roanoke, VA 24012
"Net Admin" <NetAdmin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:15F453D5-FFEA-48B9-ABDD-90A951250C1D@xxxxxxxxxxxxxxxx
I am trying to deploy an app via group policy. It has an msi extension
and
I
have set the policy under computer configuration, software settings.
It
doesn't seem to want to take. When loggin in, nothing has changed or
attempts
to change. The .msi is located on a share with Everyone-full control
share
permissions and domain users have read and execute, list, and read
NTFS
permissions.
If I run the .msi normally I get the file security warning asking if
I
want
to run the file because the publisher could not be verified. It is a
trustworthy program that we have been using for a year now. Could
that be
why
it won't take?
Is the .msi all I need? I was going to repackage the .exe of the same
program but it started to get a little complicated that's why I
downloaded
the .msi. I do get an event warning in eventviewer but I have to go
to
work
to get it for you. Do you need the id? It's an application event
warning
about software installation but it says nothing was halted. I hope
this is
enough info,thanks!
.
- References:
- Re: Group Policy Software Installation
- From: Cary Shultz
- Re: Group Policy Software Installation
- From: Net Admin
- Re: Group Policy Software Installation
- From: Net Admin
- Re: Group Policy Software Installation
- Prev by Date: Re: remote procedure failed
- Next by Date: Re: Net time
- Previous by thread: Re: Group Policy Software Installation
- Next by thread: Re: Group Policy Software Installation
- Index(es):
Relevant Pages
|