Group Policy Software Deployment

[CHiLL]

I am looking at starting GPO deployment for software across the network. Apart from an attempt last week, it isn't something we have looked at before. I've managed to create a GPO to install a piece of software specific for staff, and linked that GPO to the staff computer OU. I can see you can add multiple pieces software to install in that one GPO, but what if I want to install software that wasn't specific to just all staff, but for pupils too? Or what about software specific to pupils only, or admin staff only? Do I have to create a separate GPO for each piece of software?

[sted]

I am looking at starting GPO deployment for software across the network. Apart from an attempt last week, it isn't something we have looked at before. I've managed to create a GPO to install a piece of software specific for staff, and linked that GPO to the staff computer OU. I can see you can add multiple pieces software to install in that one GPO, but what if I want to install software that wasn't specific to just all staff, but for pupils too? Or what about software specific to pupils only, or admin staff only? Do I have to create a separate GPO for each piece of software?

if you want to be specific about what pc gets what software then yes you need say 1 policy for generic stuff (flash acrobat etc) one for teacher stuff one for admin stuff and one for pupil stuff at least or revert to scripting it so that if pc name=teach* do this and so on

[CHiLL]

if you want to be specific about what pc gets what software then yes you need say 1 policy for generic stuff (flash acrobat etc) one for teacher stuff one for admin stuff and one for pupil stuff at least or revert to scripting it so that if pc name=teach* do this and so on

Right OK, thanks. How does that apply to a mix of not only 32-bit and 64-bit client software, but a mix of 32-bit and 64-bit client machines?

 

I would ideally like to avoid scripting. We have recently implemented SCCM (which we only use for deploying the OS at the moment). I'd like to look at deploying software through that, or possibly using App-V (whether having an App-V server or using App-v via SCCM). The problem is I've had no training of either SCCM or App-V, and haven't got the time at the moment to look into it.

[sted]

32 bit msi's run fine on x64 (though if you have 32 and 64 bit versions of a programme say paint.net you can in the properties stop a 32 bit programme installing on 64bit os. 64 bit miss wont even be seen by a 32 bit os

[mrwoberts]

Can recommend this book to you - "Group Policy - Fundamentals, Security, and the Managed Desktop" By Jeremy Moskowitz

Amazon link (Other online retailers are available)

 

Currently £27.19

 

Chapter 11 - Software deployment via GP

 

This is basically where my experience is and this book is one of those you can just dip into. Of course, there is a wealth of info online, even YouT...

[free780]

If you can setup sccm I would avoid GPO deployment. It's too restrictive and you don't get much in the way of reporting. Because most software is at the system level when using GPO is has to be targeted at the PC. You also have to make sure any prerequisites are already installed.