Packages assigned to computers via GPO not installing

[Chuckster]

I recently rebuilt a computer and noticed that not a single package is getting installed. The following error I get in the application event viewer is:

 

Source: Application Management

Event ID 102

The install of application Office XP from policy Software failed. The error was The installation source for this product is not available. Verify that the source exists and that you can access it.

 

Source: Application Management

Event ID 108

Failed to apply changes to software installation settings. Software changes could not be applied. A previous log entry with details should exist. The error was : The installation source for this product is not available. Verify that the source exists and that you can access it.

 

All software is availabe on server1 in a folder called applications. Permissions is set for full control for Administrators, Creator Owner and System.

 

Right-clicking the folder --> Sharing --> Permissions: Administrators have full control and Everyone has Read access.

 

I rebuilt another computer and I am getting the same problem.

 

Can anybody help me?

[kmount]

Could be wrong but I think you need read permissions to be added to the directory for a group containing the machine account as it wouldn't be using a user account at start up.

 

To test this, add "everyone" with read permissions and see if this resolves the problem and then you can work on the perms afterwards.

[si84]

I think Kim has hit the nail on the head. On our CC3 network we have to give everyone read access to the package folder but we have removed the list folder contents option so kids can't browse and pick off what software they like.

[dtakias]

Also do you point to the the packages via UNC path? Otherwise it will fail installing any of them.

[Michael]

I don't think this is a permissions issue. I agree with the comment above. When you specify the location of the MSI, you need to browse the network:

 

\\SERVERNAME\SHARENAME\FILENAME.MSI

 

If you pointed it to D:\APPLICATIONS\FILENAME.MSI this would fail and I suspect this is the problem.

[Chuckster]

I've included 'Everyone' in the security.

 

The following permission it has is: Read & Execute, List Folder Contents and Read.

 

How do I remove the List Folder Contents? Everytime I do, it unticks Read & Execute.

 

If I go into advance and edit the 'Everyone' group, but boxes do I need to untick so that users aren't able to see the applications or do anything sinister like copying them or deleting them?

[Michael]

How do I remove the List Folder Contents? Everytime I do, it unticks Read & Execute.

 

You can't, this is by design.

[Chuckster]

You can't, this is by design.

 

So what permission do you have set up on your apps folder, Michael?

[Michael]

If you're deploying applications I would recommend you apply modify permissions to domain administrators and SYSTEM should be enough as by the sounds of things you're deploying at computer level. The reason for this is some applications need to write back (maybe to a log file) or something along these lines. Allocating read & execute access isn't enough.

[broc]

I usually give DOMAIN COMPUTERS permission when pushing out software via GPO, not forgetting the share.

[Virtual_Jas]

I had the same problem earlier on today, but I think i may have the solution for you.

 

Turned out i didn't have "Authenticated Users" added to the permissions list. I set Domain Users, Authenticated Users and SYSTEM with modify permissions just in case.

 

Tested it out, and all was well!