GPO or WSUS ? For deploying Powershell 2.0 automatically in my domain ?

[albertwt]

Hi All,

 

I'd like to know how or what is the fastest way to deploy Powershell 2.0 from:

http://support.microsoft.com/kb/96892

company wide using GPO ?

 

at the moment my GPO is consist of manually drag n drop of computer object into:

Windows XP, Vista and 7 (all version 32 bit and 64 bit) --> Workstations OU

Windows Server 2003 and 2008 (all version 32 bit and 64 bit non DC) --> Servers OU

 

that's it only those simple categorization and I wonder how to install the correct binary into the target machine ? there are so many different installation files for each version of OS. I've got WSUS in place and it doesn't seems to be installed automatically into my domain ?

 

Windows Management Framework Core (WinRM 2.0 and Windows PowerShell 2.0)

 

Windows Management Framework Core for Windows Server 2008 package.

Windows Management Framework Core for Windows Server 2008 x64 Edition package.

Windows Management Framework Core for Windows Server 2003 package.

Windows Management Framework Core for Windows Server 2003 x64 Edition package.

Windows Management Framework Core for Windows Vista package.

Windows Management Framework Core for Windows Vista x64-based systems package.

Windows Management Framework Core for Windows XP and Windows Embedded package.

 

Windows Management Framework BITS (BITS 4.0)

 

Windows Management Framework BITS for Windows Server 2008 package.

Windows Management Framework BITS for Windows Server 2008 x64 Edition package.

Windows Management Framework BITS for Windows Vista package.

Windows Management Framework BITS for Windows Vista x64-based systems package.

 

Thanks.

Edited April 19, 2010 by albertwt

[SYNACK]

I would use WSUS as it will be easier, you may need to go through the catagories to make sure that you have it avalible in your update catalogue. As long as your domain PCs are all pointed to the WSUS for their updates and set to do them automaticly it will just happen in the background. It will also provide details on which machines did not install it successfully and will request any needed updates via WSUS too.

 

I would use GPO if you did not have WSUS in place or only wanted to deliver it to a very specific subset of machines. I'm not sure if it comes as an MSI anyway so cold need a repackage to be deployable. If it is packaged as an MSI by MS then you could just add them all to the GPO as the ones that are the wrong architecture would fail the requirements and so not install leaving only the correct ones installed. This would mean a delay on startup for all machines while the policy is in place though as it will just keep trying to install the failed packages for the other OSes each time on boot.

 

You could also use separate GPOs for each architecture and WMI filtering to apply to only the right arch but its probably way easier to just use WSUS.

Edited April 19, 2010 by SYNACK

[albertwt]

ah yes i do have WSUS, I've just added the auto approve for the KB968930 in the WSUS and it is now on queue with the asterisk symbol in front of it.

 

I guess it's only a matter of time before it is all installed in all machine.

 

Thanks mate !