gpo install software

[browolf]

i got a gpo attached to an ou full of computers that has macromedia flash 8 in the software installation section of the computer settings. It seems to be that every time these machines boot up it says installing flash 8. surely this isnt right.

[kevinmcaleer]

That usually happens when a file in the MSI conflicts with a file in another MSI of the same name location or different version, same name and location.

 

You can investigate the MSI file with something like WinInstall LE 2003 (I think it is still free):

 

http://downloads.ondemandsoftware.com/download/installs/winstall87/wininstallle.exe

 

There is an excellent website dedicated to MSI files and app deployment. Funnily enough its called http://www.appdeploy.com They have a searchable archive of How to documents. I deployed Adobe Acrobat reader using this method.

 

-Kev

[ChrisH]

It means the installation isnt finishing for some reason and its keeping retrying. Check your logs.

[ajbritton]

Look in event logs to see what Windows Installer says it is doing. Sounds like either component guid clash or missing key path. Where did the MSI come from? If you repackaged it yourself, it is likely that you left some stuff in the package which should not be there.

[browolf]

i have these errors e.g.

16:21:32 event 301 The assignment of application Macromedia Flash Player 8 from policy testinstalling succeeded.

 

16:21:48 event 102 The install of application Macromedia Flash Player 8 from policy testinstalling failed. The error was The installation source for this product is not available. Verify that the source exists and that you can access it. .

 

i found a suggestion that it might be that the machine accounts dont have permissions to the share where the file is being installed from.

[ChrisH]

What permissions do you have set then?

[ajbritton]

You need to give Authenticated Users List/Read permission to the full path to the MSI. Not sure about the share permissions. I usually set these to 'Everyone:Full Control'. Alternatively, you could try giving 'Domain Computers' List/Read permission to the full path. I've not tried this but it should work.

[Geoff]

You need to assign 'Authenticated Users' Read Rights.

[browolf]

i have domain users set to read on the share permissions and the security permissions. how does 'authenticated users' differ to 'domain users'? this is win2k server btw

[ChrisH]

It just encompases a bigger scope ie anyone who has sucessfully authenticated on the network as opposed to a single group. Remember the software is being installed by the machine though and not a user so I think that may be your problem as your specifically saying users have access. I dont think machine accounts are part of Domain users.

[browolf]

you're right. and it seems to have fixed the problem. thanks.

[ChrisH]

Exxxxxxxxxxxxxxcellent /off Mr Burns