Problem with a GPO msi install

Hi

I wonder if someone can tell me what to check on a machine that won't install msi files which are set to install using a gpo. The machine is in a room of identical pcs which are all very happy to install during boot up, but this one always skips straight to the login screen.

any suggestions?

thanks

james

Check dns settings, login and run "gpupdate /force /boot" make any difference?
Also double double check you have moved the PC into the correct OU on your server (Done myself a few times with this one)

Si

Quote:

---

Originally Posted by pooley

Also double double check you have moved the PC into the correct OU on your server (Done myself a few times with this one)

Si

---

Second this one... :( Wasted a couple of hours about a month ago :o

Look in the event viewer.

I always find that if I disjoin and rejoin onto the DOMAIN that it cures this. Long winded way...but it usually works

Is this station actually a member of the relevant GPO's local group. Obviously depending on how you set up your AD this could have simply been missed when you were adding the rooms computers!!

Check the event viewer as mentioned before as this will give you the best indication of what's going wrong or not happening.

Quote:

---

Originally Posted by randle

Is this station actually a member of the relevant GPO's local group.

---

huh? GPOs aren't subject to local group memberships :confused:

Quote:

---

Originally Posted by powdarrmonkey

huh? GPOs aren't subject to local group memberships :confused:

---

Umm he is asking, has he put the PC into the group that the GPO is linked to within AD

Quote:

---

Originally Posted by pooley

Umm he is asking, has he put the PC into the group that the GPO is linked to within AD

---

My point still stands.

is it not the group membership under security filtering in GPMC that he's refering to???

If you follow the "MS" way of GPO deployment then your computers should be a member of a global security group which in turn is a member of a domain local security group and then this domain local group is assigned to your GPO.

I'm not saying this is the only way of doing it but I believe is best practice in "MS" world

Try running RSOP for the machine to make sure it is getting the right machine/user policy which is installing the MSI

Oh, now I see: you mean 'domain local', not 'local'.

Yes sorry i wasn't making it clear. Have amended post to reflect this.

Also try running a gpresult on this station to check what GPOs are applying

try doing gpresult and see what gpo's the machine is actually picking up, if it is picking up the gpos then check event viewer.

Toby