Windows XP Cookbook (Cookbooks)

2017-07-07 02:10:07

Problem

You want to remotely install a Microsoft application to users from a central server, using Group Policy.

Solution

Create a distribution point

You first need to create a distribution point for the software:

Log onto the server as an administrator.

Create a shared network folder where you'll put the Microsoft Software Installer (MSI) package that you're going to distribute.

Set permissions on the share to allow access to MSI package.

Copy or install the MSI package to the distribution point.

Create a Group Policy Object (GPO)

Once you've created a distribution point, you need to create a Group Policy Object (GPO), which will be used to distribute the software:

Run the Active Directory Users and Computers snap-in by choosing Start Programs Administrative Tools, and then choose Active Directory Users and Computers.

In the console tree, right-click your domain, choose Properties, click the Group Policy tab, and click New.

Type in the name that you'll call the policy and press Enter.

Click Properties and then click the Security tab.

Clear the Apply Group Policy checkbox for the security groups that you want to prevent from having this policy applied.

Select the Apply Group Policy checkbox for the groups to which you want to apply this policy.

Click OK.

Assign a package

Now you can install the software to the PCs, what's called "assigning" the package:

Run the Active Directory Users and Computers snap-in by choosing Start Programs Administrative Tools, and then choose Active Directory Users and Computers.

In the console tree, right-click your domain, choose Properties, click the Group Policy tab, select the Group Policy Object you've created for installing the software, and click Edit.

In Computer Configuration, expand Software Settings.

Right-click Software installation and choose New Package.

In the Open dialog box enter full Universal Naming Convention (UNC) path to the shared folder that contains the MSI package that you're going to install, for example, \\file server\share\filename.msi. Make sure that you don't browse to the location. Instead, type in the UNC path to the shared folder.

Click Open, then click assigned and click OK. You'll see the package listed in the right pane of the Group Policy window.

Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in. When the computer onto which you've assigned the software starts, the software will be automatically installed.

Discussion

This technique is best used when you're installing Microsoft software to multiple machines, and you want to manage them from a central server. The technique is called assigning software. When you assign software with Group Policy, the software is installed when the user of the computer logs on. When the user runs the software for the first time, the installation is finalized.

You can, however, also "publish" software with Group Policy. When you do this, the software is not automatically installed when the user logs on. Instead, the software will be displayed in the Add/Remove Programs dialog box when the user first logs on. The user can then install the software from there. This choice gives the user the option of installing the software or not, while when you assign software, it is automatically installed. For details on how to publish software using Group Policy, see MS KB 314934.