Re: Pushing software with Group Policy

Steve Foster [SBS MVP] wrote:
kj [SBS MVP] wrote:

Configuring the gpo for the computer, it runs under the workstion
"system" account which has no network priviledges, (but admin on the
workstaion). You need to give "everyone" read access to the
\\testserver\acrobat share and all files (acrobat.msi) that are
required to install the package.

Access to the GPO deployment share will be using the AD computer
account, so I specifically grant "Domain Computers" access to the GPO
deployment share, rather than "Everyone".

That'll work too as the local "system" account can use the member
workstation computer$ account for credentials. Probably a better practice to
use a computer group than a slackers approach to giving "everyone" rights.
If it was something more "restricting" than Acrobat reader, it certainly
would be the case.

Not sure the OP got the whole security settings that must be on the *share
and the files*, though.

OP, here's a couple of links for reference;

http://support.microsoft.com/kb/302430/en-us

http://support.microsoft.com/kb/314934/en-us

--
/kj


.

Relevant Pages

  • RE: XP sp2 NT domain trust 2003 AD
    ... I gave the user back her NT workstaion and she hasnt been ... > domain server, does this guy get locked out too. ... What are your password and account lockout policies. ...
    (microsoft.public.windows.server.active_directory)
  • Re: The trust relationship between this workstaion and the primary domain failed
    ... account, then your issue may be invalid DNS support. ... > I've got this message "The trust relationship between this workstaion and ...
    (microsoft.public.windowsxp.security_admin)
  • other cached id when connecting as user.
    ... workstaion to a stand alone XPpro machine using local XP ... to get account lockout issues and it looks like it is ... associated w/ this connection - Does anyone know why? ...
    (microsoft.public.win2000.security)
  • Re: Incoming E-Mail - cant create contact in OU
    ... central admin pool different than the web app. ... that account a little (if the web app is compromised or something, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Security Breach in AD! Help!
    ... > about 5 minutes the user was removed from the built in admin group. ... > changed the default domain policy, the default domain controller policy, ... >> auditing of account logon for success and failure and account management ... >> success and failure in Domain Controller Security Policy. ...
    (microsoft.public.win2000.security)