+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 21 of 21
Windows Thread, Managed software will not install in Technical; Default Domain policy disables Windows Firewall (we are behind Cisco PIX and MS ISA at LA level plus ISA in ...
  1. #16

    Join Date
    Oct 2009
    Location
    Manchester, UK
    Posts
    11
    Thank Post
    5
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Default Domain policy disables Windows Firewall (we are behind Cisco PIX and MS ISA at LA level plus ISA in the local LAN). The System/Logon/Wait for network is also enabled in Default Domain Policy.
    This only seems to delay the presentation of the CRTL+ALT+DEL screen. Ideally what I need is for the network to be initialised before the system attempts to run ANY system Group Policies but with this being a laptop, I don't want it to be sat waiting for a network connection when it is intended to be running without one.

    Just to clarify the issue. When Windows boots you see a series of splash screens, 'Preparing Network Connections', 'Applying Computer settings' etc, one of these should be 'Applying Software Installation Settings...' which then changes to 'Installing Managed Software..... <Title>'. I am not seeing the 'Applying Software Installation Settings...' message at all. It is not that windows is trying to run the install and failing, it just isn't trying it at all. All Managed Software applications are applied to the 'Computer' settings in the GPO, not to the user. Application Log errors show that the laptop cannot connect to the domain controller during startup and aborts running Group Policies. By the time the CTRL+ALT+DEL screen appears, the domain is available and you can log on.

    The suggestion of LAN drivers being slow to kick in is the suggestion I am pursuing at the moment.
    The NIC in the laptop is a Realtek 8139 and the installed driver is version 5.719.325.2009 dated 25/3/2009.

    Any suggestions on how to force the LAN drivers to initialise quicker, or earlier would be appreciated, or where to obtain a reliable driver for this card.

  2. #17

    Join Date
    Mar 2007
    Posts
    421
    Thank Post
    14
    Thanked 16 Times in 10 Posts
    Rep Power
    18
    The last time I had a software policy that failed to apply was due to permissions. The install source needs to allow read access to Domain Computers (or whatever group the PC/laptop is in) and I'd missed that out when creating the share.

  3. #18

    Join Date
    Oct 2009
    Location
    Manchester, UK
    Posts
    11
    Thank Post
    5
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks to everyone who suggested things to look for. I have now resolved this (I think/hope) by installing an older NIC driver.
    To help anyone who may be searching for this in the future, Windows update had installed Realtek Driver 5.719.325.2009, I have now installed Driver Version 5.505.1004.2002 and everything now seems to be working perfectly. The problem was that the network driver was not initialising quickly enough to be able to contact the DC and process Group Policies.

  4. #19
    ozzy's Avatar
    Join Date
    Oct 2007
    Posts
    260
    Thank Post
    39
    Thanked 39 Times in 36 Posts
    Rep Power
    21
    Quote Originally Posted by smithk2306 View Post
    Default Domain policy disables Windows Firewall (we are behind Cisco PIX and MS ISA at LA level plus ISA in the local LAN). The System/Logon/Wait for network is also enabled in Default Domain Policy.
    This only seems to delay the presentation of the CRTL+ALT+DEL screen. Ideally what I need is for the network to be initialised before the system attempts to run ANY system Group Policies
    The wait for network policy needs to be a local machine policy not domain policy for this fix to work, if the laptop is not picking up your managed software instalation, or part of it, it's most likley won't be picking the default domain policy, give it a try it's only one machine and take 2mins to set up. it sorted all my problems that I had with gpo software instalation, as for boot time to log on screen thats only a few seconds more and I doubt anyone would even see a change

    good luck we all need a bit of it sometimes, Bloody Windows
    Last edited by ozzy; 25th November 2009 at 04:05 PM.

  5. #20

    Join Date
    Nov 2009
    Location
    leeds
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    had this same problem on a batch of computrers in the ict suite, the problem i found was fixed by installing service pack 3 - might not fix ur issue but worth a try if you havent installed sp3 yet on the lappy. i had the same message in event log regarding domain controller.

    oops can see its fixed now! i must install my graphics driver on this machine the page jumps too quickly!!!
    Last edited by dumb0; 26th November 2009 at 09:25 AM. Reason: im abit dumb

  6. #21


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,506
    Thank Post
    227
    Thanked 848 Times in 727 Posts
    Rep Power
    287
    ive also had an issue before where certain network cards (read intel 1000 somethigns in dell gx something) wouldnt deploy msi's via a hp switch unless the switch had fireware updated or cards were set to 10mb (might of been 100mb 1/2 duplex)

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. How do I install software by GPO
    By djgreek in forum Windows Server 2000/2003
    Replies: 11
    Last Post: 31st August 2009, 09:13 AM
  2. Replies: 5
    Last Post: 18th July 2008, 01:57 PM
  3. Install software using AutoIT??
    By SpuffMonkey in forum How do you do....it?
    Replies: 3
    Last Post: 21st March 2007, 01:50 PM
  4. I Want The Teachers To Install There Own Software On The W.S
    By tickmike in forum How do you do....it?
    Replies: 8
    Last Post: 8th September 2006, 11:45 AM
  5. ..Install software?
    By kingswood in forum How do you do....it?
    Replies: 21
    Last Post: 4th August 2005, 04:00 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •