MCITP 70-640: Group Policy Software Install Demonstration

This video looks at how to install, upgrade and remove software using Group Policy. The video also looks at how to set up a software share to store the install files and how software can be assigned and published.

GP Software Deployment
Before software is installed using Group Policy a test is done to see how fast the connection is. By default, if the connection is less than 500Kbps per second it will be considered slow. Group Policy will not install software over a slow link due to the time it would take to transfer the install files over the network. If you want to change the speed in which Group Policy tests for a slow link, this can be done at the following location.
Computer Configuration\Policies\Administrative Templates\System\Group Policy\Group Policy Slow Link Detection

Demonstration
In order to install software using Group Policy, the install files must be able to be read by the computer applying the Group Policy. The install files can be on the local computer but it is generally easier to put them on a file share. To share a folder, open the properties for that folder and select the sharing tab. For installing software, you only need to ensure that the read access is configured.

The settings for software installation in Group Policy are found in both user and computer configuration. They are found under Polices\Software Settings\Software Installation
To set up a new software deployment. Right click Software Installation and select, "new package".

A dialog will appear giving you the following options: published, assigned or advanced. Published will be greyed out for computer configuration. If you choose published, some options may not be changeable later on so it is recommenced to choose Advanced so all options can be changed later.

There are many options that can be configured in the properties for the software install some are listed below.

Uninstall the application when it falls out of the scope of management: If this option is ticked, the software will be uninstalled automatically when the Group Policy is no longer being applied to that user or computer.
Modifications tab: This tab allows you to assign an MST file to the package. An MST file can be created
Upgrades tab: On this tab you can upgrade existing packages.

If software has been published, it can be installed by opening Programs and Features in the control panel and then selecting the option, "install a program from the network".

If you want to redeploy an application, this can be done by right clicking the application, selecting all tasks and then selecting the option, "Redeploy application". You can also remove the application from all tasks if you want to. If you remove the application, you will get the option to allow the users to continue using the package or to remove the package straight away.

References
"MCTS 70-640 Configuring Windows Server 2008 Active Directory Second Edition" pg 353 -- 361

[itfreetraining]

There is MSI packaging software that allows you to bundle any files including exe files into an MSI package.

[itfreetraining]

Have a look in the event viewer and see if there is an error indication the problem. You may need to create an MST file for acrobat reader. The problem with that software from memory is that it wants you to accept the license conditions which you can't do when you perform an automated install. Using an MST file you can tick the option to auto accept the license. Then the software should install.

[itfreetraining]

It should be removed once that group policy is not longer being apply. Try forcing group policy to be reapply and than rebooting the computer twice. If group policy optimization setting is switched on, you may need to reboot the computer twice in order for the software to be removed.

[itfreetraining]

The manufacturer of the software should supply additional tools to do tasks like these. This maybe a program that creates an MST file or software that handles serial numbers over the network.

[itfreetraining]

I am bit confused by this. Are you refering to the shortcuts in the start menu. The package software should have any option to where to target the short cuts and which users.

[itfreetraining]

I have not used that one before. It looks fine. If you want a free install builder you can try NSIS.

[ggbk]

How o deploy msi package to the client machine which is connected to AD using VPN ? Please help

[melbruki]

how does the computer input the serial number when doing an automated install, as well as accepting user agreements ect...

thank you in advance

[TheAmazeer]

Cristal clear démonstration, that means that you master what you'r talking about...ty

[ohmamata]

If we deploy softwae via GPO how did we know about status? (success or not? / how many computer install successed ?

[fariskhlfa]

Thank you so much
Why it gives "fatal error while trying to install"?
Any suggestions for that? Thank you again.

[cham]

may i ask you one question, , how to make exe file into msi file, coz as i know gpo accept msi format only.

[HabiburRahman-dhec]

Thanks for ur nice video. Pls tell me how can i install software for default " Computers" OU so that software will be installed whern first time computer open. As I, understood from ur tutorial all computers have to move "New York Policy" OU but i want avoid this step.

[Quaddamagei]

ConfuserX: Are these deploying to thin clients? Thin clients' temp directory is provisioned very small out of the box (16 MBs). Acrobat uses over 30MBs... much more than default temp directory will allow. I expanded the RAM drive size and it works fine now.

[EyEvil]

Maybe it's a bug, when I create a GPO to auto-install Adobe Reader in the computer level it does not work. I did GPO for Java and Flash (active x and plugin) and the 3 work very well in my domain.

[MisterFloppyJackson]

Can you convert .exe install files to .msi
If you can, what if the .exe install file uses other files. Example a disc contains the software, on the CD there is the .exe install file itself, but there are also other files and folders the install .exe uses. Is there a way to insert these files in the MSI installer package. ???

[MisterFloppyJackson]

I successfully deployed software at computer level as the local user account and the administrator account. But other accounts not in the built in OU, such as the Standard Users OU that I created myself. I think I may and enabled a group policy setting that stops the user from seeing this software. If you want me to explain further let me know
Just wondering if you could help

[rager]

Even though this is an old video series, it's still very helpful and well done. That said, I think it's better to create new policies for different functions, especially in this case (installing software) where you will likely want to test it out with a few users before putting it into production.

[MisterFloppyJackson]

I have found windows advanced installer, would you reccomend that, or would you reccomend another?

[chico]

what if i need several programs? do i need to create several policies?