Group Policy software install using DFS

[ricki]

Hi

 

Please can someone help. We have just had a windows 2008 server fitted the first one in the domain and we wish to implament deployment of group policy software using a DFS path so if we have to change servers in tthe future all we have to do is put the share some where else and move the link.

 

The software msi's have been tested and they will install ok.

The software msi's can be installed through group policy looking at \\servername\share\program\xxx.msi

 

But when I try to deploy with software through the DFS path to the msi in the share on the same server it will not install.

 

The permissions on the share and ntfs nust be ok as you can use group policy to install direct from the share.

 

Has anyone got any ideas why this will not work The dfs name is domain\config$\software\

 

Thanks for all your help.

 

Richard

[ricki]

Hi

 

I am sorry to ask again. Has anyone get any ideas why I cannot deploy software through dfs using msi's. If I deploy software using the share on the computer it works great. If I deploy the same software from the same location through dfs it fails because it cannot find source or does not has permission.

 

I have checked the share and everyone has full control.

I have checked the ntfs permissions and system has read, domain admin have full, staff and students have read.

 

The ntfs permisions much be correct as it will deploy from the share and the same share is used but through dfs.

 

I cannot see any permissions in dfs do I have to set something else in dfs to fix this.

 

Thanks for all your help.

 

Richard

[cromertech]

What are the exact errors you are getting? If they are permission denied errors then try adding everyone read permissions and see if it works then you can restrict it after it's working. You might need to add domain computers or give network service permission.

[sukh]

Hi

 

Can you access the DFS share from a PC using the DFS path and install?

 

Sukh

[SYNACK]

DFS also has some permissions that may be set incorrectly, I know that deploy via DFS can work as I have it going at various schools that way.

[ricki]

Hi

 

Can you access the DFS share from a PC using the DFS path and install?

 

Sukh

 

Yes and you can install manually from the location

[ricki]

Hi

 

Can you access the DFS share from a PC using the DFS path and install?

 

Sukh

 

Yes and you can install manually from the location

[ricki]

DFS also has some permissions that may be set incorrectly, I know that deploy via DFS can work as I have it going at various schools that way.

 

"I know it should work" and is a good idea.

 

Richard

[ricki]

DFS also has some permissions that may be set incorrectly, I know that deploy via DFS can work as I have it going at various schools that way.

 

HI have you any ideas what settings might be wrong. I cannot find any security permissions in dfs except what link to share permissions

 

Richard

[sukh]

Hi

 

Can you access the DFS share from a PC using the DFS path and install as a normal user? I.e no high privledges such as domain admin. User a student account to see if you can access the DFS share on a PC. I'm thinking the $ may have an issue, therefore can you also try to remove this as a share and use a normal share.

 

domain\config$\software\

 

Sukh

[SYNACK]

The thing that I would check is that the domain computers group has read permissions to the folder and share as when software is installed by policy it runs under the machine account. The settings that I was thinking of are present on Server 2008 DFS roots and show up when you are first building the root. They are just security settings access to the root itself, if the machine accounts can't read the whole way up the folder path it could fail. The other thing that could be having issues is if it is not resolving in DNS quick enough. You should be able to speed this up by using the FQDN of the DFS root like \\domain.local\config$\software\ which may help.