GPO Software deployment

[neilmc]

Trying to deploy Boardworks, GCSE separate science across the network, as Im sick of trying to install it onto every machine.

Using server 2008 R2

 

I am new to software deployment, so I have read as much as i can and this is what i have done.

 

> Created a share called remdeploy

> given access to everyone to read

> Placed the MSI into the remdeploy folder

 

>Created an OU in GPO called Software

 

> Created a new GPO for the software

>Computer Configuration

>Policies

>software settings

>SOftware installation

>New >Package

 

>Source \\server\remdeploy\software.msi

 

Deployment tab

>assigned

 

As far as i can tell ive done everything right, and as far as i can tell the MSI works fine.

 

Anyone any Ideas?

[glennda]

I thought as boardworks is just interactive powerpoints you can just save on a network drive/share?

[FN-GM]

Does it actually install?

 

What permissions have you got on your shared folder in installers live? Who has access?

 

Also do you have this group policy selected on all computers?

 

Computer Configuration\Administrative Templates\System\Logon\

Always wait for the network at computer startup and logon

 

It should be fine if you have the permissions right and the above turned on

Edited September 27, 2010 by FN-GM

[neilmc]

Yea that would be the ideal way of doing it. but it actually only wants to me on 4 machines (the science staff) and I want to the software deployment working so that if I have to re installed windows i don't have tokeep installing sotware via disc. Its not just this piece of software thats the problem I haven't managed to sucessfully deploy any piece of software.

[FN-GM]

Yea that would be the ideal way of doing it. but it actually only wants to me on 4 machines (the science staff) and I want to the software deployment working so that if I have to re installed windows i don't have tokeep installing sotware via disc. Its not just this piece of software thats the problem I haven't managed to sucessfully deploy any piece of software.

 

what about what i suggested

[timzim]

Check the Event Log on one of the machines to which you've assigned the software. If you check immediately after a reboot it should tell you why it didn't/can't install the software.

[neilmc]

Does it actually install?

 

What permissions have you got on your shared folder in installers live? Who has access?

 

Also do you have this group policy selected on all computers?

 

Computer Configuration\Administrative Templates\System\Logon\

Always wait for the network at computer startup and logon

 

It should be fine if you have the permissions right and the above turned on

 

Permissions are set so that 'everyone' has read access also domain users have read access and domain computers have read access

 

That policy is enabled, and also I have enabled "Verbose vs normal status messages" to see what is was doing at start up, it seems to hang on the deploying policy software (i think it said), for about 20 seconds but then just continues on, and no software is installed

[witch]

Is it being overridden by another policy - common user or somesuch?

[FN-GM]

Is it being overridden by another policy - common user or somesuch?

 

nothing can over ride these type of policy.

 

Does it make any attempt to instal? Also are you just putting the .msi file or all files with the installer.

 

Thanks

[pritchardavid]

did is what you have done wrong

 

You need to add the user security group on the shared folder

 

Authenticated Users - To at least read and write

[neilmc]

nothing can over ride these type of policy.

 

Does it make any attempt to instal? Also are you just putting the .msi file or all files with the installer.

 

Thanks

 

I bassically did what the read me file said on the disk and i quote

 

In order to deploy the Boardworks GCSE Separate Sciences application from a server running Windows 2000 Server or Windows 2003 Server using group policy then please follow the instructions below:

1. Create an administrative install of the product by typing the following at a command prompt at the location of the installer files e.g. your CD-ROM drive: msiexec /a BoardworksGCSESeparateSciences.msi

2. When prompted for a path to install the product choose a network share location that is accessible by your network clients.

3. Modify your group policy object to install the administrative BoardworksGCSESeparateSciences.msi file to the appropriate network clients or users.

 

it seemed to install the software to my remdeploy folder, and create a 'program files' folder all i did was add the .msi to gpo

[teejay]

Permissions are set so that 'everyone' has read access also domain users have read access and domain computers have read access

 

That policy is enabled, and also I have enabled "Verbose vs normal status messages" to see what is was doing at start up, it seems to hang on the deploying policy software (i think it said), for about 20 seconds but then just continues on, and no software is installed

 

If that is the case, check the event log on the PC it's failing on and you will have an error event in there, post the event details on here and we can help, without an idea of the error message we will be shooting in the dark.

[neilmc]

The only error that I can see is this.........

 

The content source cannot be accessed.

 

Context: Application, SystemIndex Catalog

 

Details:

The object was not found. (HRESULT : 0x80041201) (0x80041201)

 

But the status was a warning not a error

 

but can't seem to find any other errors

[timzim]

did is what you have done wrong

 

You need to add the user security group on the shared folder

 

Authenticated Users - To at least read and write

 

No, you shouldn't really want your users to write to the share - they only need read & execute access. Make sure your deployment folder is on a network share which has read access for Everyone: you can always hide it with a $, e.g. \\server1\deployment$

 

Note: if you are assigning the software via Computer Configuration/Policies/Software Settings/Software Installation you will need to give Read access to the GPO for the MACHINE not the USER as it's not the User who is installing the software but the Machine (set this under Scope tab/Security Filtering for GPO). In this case you'll also have to make sure the Machine has read access to the share/install folder (although since machine accounts are also members of Authenticated Users, easier to give that group Read access to folder).

[neilmc]

I seem to have all the correct information, security etc but for some reason just cannot seem to get it to deploy i have given the machine 3 or 4 gpupdate /force and restarted the machine still without any joy, I'm starting to wonder if the MSI is working as it shud but all i did is follow the instructions so i thought it would be nice and easy.

[teejay]

First, has the share got read & execute permissions for everyone or just read?

Second, if you login to the machine, can you browse to the share and run the msi?

[timzim]

First, has the share got read & execute permissions for everyone or just read?

 

Share permissions can only be Full Control, Change or Read. You're talking about folder permissions - different animal!

[neilmc]

The share can only have read, and the folder permissions has read and execute

[neilmc]

Does each MSI need its own folder or does it not matter can they all be sat in the remdeploy folder?

[teejay]

Share permissions can only be Full Control, Change or Read. You're talking about folder permissions - different animal!

Sorry, I meant the permissions on the root folder of the share, brain not in gear ;-)

[timzim]

Does each MSI need its own folder or does it not matter can they all be sat in the remdeploy folder?

 

Each need their own, if only to simplify management for you. Be a hell of a mess if they all sat in one folder.

[6Foot2]

I seem to have all the correct information, security etc but for some reason just cannot seem to get it to deploy i have given the machine 3 or 4 gpupdate /force and restarted the machine still without any joy, I'm starting to wonder if the MSI is working as it shud but all i did is follow the instructions so i thought it would be nice and easy.

 

Have you checked that there are no problems with the MSI?

 

Can you double click the MSI [with the MSI in its current location/folder] while logged on as the local or network administrator and have the software install?

 

Just a thought.

[pritchardavid]

No, you shouldn't really want your users to write to the share - they only need read & execute access. Make sure your deployment folder is on a network share which has read access for Everyone: you can always hide it with a $, e.g. \\server1\deployment$

 

Note: if you are assigning the software via Computer Configuration/Policies/Software Settings/Software Installation you will need to give Read access to the GPO for the MACHINE not the USER as it's not the User who is installing the software but the Machine (set this under Scope tab/Security Filtering for GPO). In this case you'll also have to make sure the Machine has read access to the share/install folder (although since machine accounts are also members of Authenticated Users, easier to give that group Read access to folder).

 

sorry I meant to say only read

[neilmc]

Have you checked that there are no problems with the MSI?

 

Can you double click the MSI [with the MSI in its current location/folder] while logged on as the local or network administrator and have the software install?

 

Just a thought.

 

The MSI installed fine. but im guessing that since it asks for me to accept the t's & c's and asks for a custom or typical installation i need to create an answer/responce file?

[teejay]

The MSI installed fine. but im guessing that since it asks for me to accept the t's & c's and asks for a custom or typical installation i need to create an answer/responce file?

 

Run the msi from a command prompt as msiexec /i nameofmsi.msi /quiet and see if it installs.