Watchguard SSO MSI Deployment Issues

[ahmed24]

I have software deployment policies in Group Policy. I have just downloaded WG-Authentication-Client_11_9_4.msi to deploy it using Group Policy. I created a Policy for the entire domain and under computer configuration I added the software installation. I created a share that gives read access to everyone. However, on my Windows 7 and 8 workstations the msi just does not seem to install. It however does install on the Windows 10 machines and server 2008 servers. Any idea what could be wrong?

[DJ-1701]

That's odd... if an MSI deploys on one version of Windows, it should on the others unless the installer is 64-Bit and the OS is 32-Bit, or unless there are prerequisites that the installer needs. Does it install fine on 7/8 manually?

[ahmed24]

That's odd... if an MSI deploys on one version of Windows, it should on the others unless the installer is 64-Bit and the OS is 32-Bit, or unless there are prerequisites that the installer needs. Does it install fine on 7/8 manually?

 

All the machines are 64bit but the SSO client is a 32-bit application and has been setup to "Make this 32-bit X86 available on Win64 machines" I just tried to install it manually on one machine that has the issue and it takes very long and then it pops up with security alert saying it needs to download from the Internet. So it seems that the Windows 7 and 8 machines are missing some kind of prerequisites. Is there a way to find out what prerequisites are missing? and is there a way to bundle the prerequisites into the Group Policy deployment so that it checks if the prerequisites are installed and if not then install the prerequisites?

 

Thanks

[DJ-1701]

Usually if it's allowed to continue you usually see evidence of what's trying to install. I assume it's Dot Net Framework 4 or 4.5, as that appears to be native in Windows 10 now. If that is the case, you could possibly push it out through WSUS rather than GPO that way it could target just the machines that are required. Otherwise it might require creative scripting to install as I assume you aren't using SCCM, WPKG-gp, CC4 or any other kind of software delivery method?