Problem with a GPO msi install

[jamesmay]

Hi

 

I wonder if someone can tell me what to check on a machine that won't install msi files which are set to install using a gpo. The machine is in a room of identical pcs which are all very happy to install during boot up, but this one always skips straight to the login screen.

 

any suggestions?

 

thanks

 

james

[pooley]

Check dns settings, login and run "gpupdate /force /boot" make any difference?

Also double double check you have moved the PC into the correct OU on your server (Done myself a few times with this one)

 

Si

[elsiegee40]

Also double double check you have moved the PC into the correct OU on your server (Done myself a few times with this one)

 

Si

 

Second this one... Wasted a couple of hours about a month ago

[powdarrmonkey]

Look in the event viewer.

[AceDaz]

I always find that if I disjoin and rejoin onto the DOMAIN that it cures this. Long winded way...but it usually works

[randle]

Is this station actually a member of the relevant GPO's local group. Obviously depending on how you set up your AD this could have simply been missed when you were adding the rooms computers!!

 

Check the event viewer as mentioned before as this will give you the best indication of what's going wrong or not happening.

[powdarrmonkey]

Is this station actually a member of the relevant GPO's local group.

 

huh? GPOs aren't subject to local group memberships

[pooley]

huh? GPOs aren't subject to local group memberships

 

 

Umm he is asking, has he put the PC into the group that the GPO is linked to within AD

[powdarrmonkey]

Umm he is asking, has he put the PC into the group that the GPO is linked to within AD

 

My point still stands.

[buzzard]

is it not the group membership under security filtering in GPMC that he's refering to???

[randle]

If you follow the "MS" way of GPO deployment then your computers should be a member of a global security group which in turn is a member of a domain local security group and then this domain local group is assigned to your GPO.

 

I'm not saying this is the only way of doing it but I believe is best practice in "MS" world

Edited December 3, 2009 by randle
changed "local" to "domain local"

[SuperHans]

Try running RSOP for the machine to make sure it is getting the right machine/user policy which is installing the MSI

[powdarrmonkey]

Oh, now I see: you mean 'domain local', not 'local'.

[randle]

Yes sorry i wasn't making it clear. Have amended post to reflect this.

 

Also try running a gpresult on this station to check what GPOs are applying

[glennda]

try doing gpresult and see what gpo's the machine is actually picking up, if it is picking up the gpos then check event viewer.

 

Toby

[jamesmay]

Thanks for all your replies guys, tried everything you said, did rebinds, dns flsuhes, gp refreshes, looked at event log and said there was problems gpo but no detail about the reasons. thne i looked at the clock and was an hour out. put an hour onto it and restarted and now it magically applying all the msi files i just created......

[glennda]

Thanks for all your replies guys, tried everything you said, did rebinds, dns flsuhes, gp refreshes, looked at event log and said there was problems gpo but no detail about the reasons. thne i looked at the clock and was an hour out. put an hour onto it and restarted and now it magically applying all the msi files i just created......

 

 

ahh the clock problem! easy way to eliminate is put a net time command in startup/login script and the computer is never out of time by to much!

[Michael]

As above, inserting:

 

net time \\SERVERNAME /set /yes

 

in your logon scripts avoids these problems and keeps all machines in sync with your primary DC.

[ricki]

Hi Everyone

 

I have just created a new windows 7 image and have ghosted it and joined it to the domain and it trys to install msi's in the group policy but it does no. The event viewer says it was processed and gpresult says it was processed but not it is applying printer and proxy settings.

 

Did anyone come up with a solution for this.

 

I will try and restart the server and swicthes in the morning to see if thay helps as a load of windows updates have come out resently but the stragnge thing is the windows xp machines are not having this problem.

I have found this link to a hotfix but have not tried it.

Windows 7 Clients intermittently fail to apply group policy at startup

 

Has anyone got any suggestions?

 

Thanks for all your help.

 

Richard

[ricki]

I have tested replication and net and dcdiag. nothing

 

I have checked the eventviewer and cannot see anything on the server or client.

 

Have placed the computer in a new ou with a new gpo created on a server 2008 server to deploy one program and it will not work.

 

I have knocked the machine off the domain and put it back and it applies the user policies but will not install any msi's

 

I am getting a gpo core error.

 

Has anyone got any ideas

Richard

[chazzy2501]

if you navigate to the msi from the workstation will it install by hand?

[ricki]

Yes it will install by hand.

 

Richard

[ricki]

Have installed windows 7 on another machine and gpo's work correctly so it looks like its something in windows 7.

 

Has anyone ideas what?

 

Richard