Games Microsoft Active Directory

Deploying Software through Group Policy

Deploying Software Through Group Policy

When Lively Listing was launched in Home windows 2000, one among its key design options was to ease the method of deploying software program inside a corporation. To this finish, Microsoft included the power to deploy and distribute software program with Group Policy. IntelliMirror applied sciences embrace Group Policy software program set up to simplify the administration vital for giant portions of customers and computer systems. The Software Set up and Upkeep element of the IntelliMirror applied sciences can be utilized to publish purposes over the community. Publishing is the terminology used to make purposes out there for set up from over the community. The Software Set up and Upkeep element can even routinely set up purposes based mostly on sure predefined standards on computer systems. As an example, purposes may be routinely put in on computer systems based mostly on particular customers or teams or it may be routinely put in on specified computer systems. The Software Set up and Upkeep element may also be used to uninstall purposes. To make these capabilities obtainable, the Software Set up and Upkeep element of the IntelliMirror applied sciences interrelates with Group Policy and the Lively Listing listing service.

To be able to deploy software program with Group Policy, the next circumstances apply:

  • The group have to be operating a Home windows 2000 or Home windows Server 2003 Lively Listing area.Deploying Software Through Group Policy
  • Shopper computer systems have to be operating Home windows 2000 Skilled or later.

When utilizing Group Policy to deploy software program in an Lively Listing area, customers principally have to edit an present Group Policy Object (GPO) or create a brand new GPO. The GPO must be linked to a website, area, or organizational unit (OU). A GPO that’s linked to at least one these elements has a Software Set up node situated underneath the Pc Configuration node and a software program set up node situated underneath the Consumer Configuration node. Customers can entry a GPO linked to a website, area, or OU through the Group Policy Editor console. The Software Set up node within the Group Policy Object Editor console might be thought-about the primary software used to deploy software program. The Software Set up node additionally allows the centralized administration of the preliminary deployment of software program and the removing of software program. Customers can even centrally handle software program upgrades, hotfixes, and patches from this location.

Deploying software program through Group Policy encompasses two kinds of software program deployment:

In Group Policy, Software Set up makes use of the Home windows Installer service to take care of and handle the state of software program set up. The service runs within the background and allows the working system (OS) to handle software program set up based mostly on info saved within the Home windows Installer package deal.

Group Policy Software Set up Elements

The elements concerned in deploying software program through Group Policy are mentioned subsequent.

  • Home windows Installer package deal: This can be a file with an .msi file extension that holds the directions for putting in, configuring, and eradicating software program. The forms of Home windows installer packages are:
    • Native Home windows Installer package deal information: This kind of Home windows installer package deal is developed as a software program element. The Home windows Installer service may be absolutely utilized. The Native Home windows Installer package deal information embrace one product that has quite a few options that may be put in individually.
    • Repackaged software information: The distinction between the 2 packages is that repackaged software information embrace one product that’s put in as one function.
  • Transforms: One other time period used for transforms is modifications. A rework is principally a report of modifications that have been made to the unique package deal file. Transforms allow customers to customise Home windows Installer packages and the set up options once they publish or assign the appliance. Through transforms, customers can embrace and exclude options for the set up. The forms of customization information that may be configured are listed under. Rework information have a .mst file extension:
    • Rework information: Rework information allow customers to customise the set up of the appliance.
    • Patch Information: These information have a .msp file extension, are used to replace present Home windows Installer packages with further info, and are used for the next functions:
      • Software patches
      • Service Packs
      • Software Updates
  • Software information: These are textual content information with a .zap file extension that embrace directions on easy methods to publish an software. As a result of .zap information don’t help Home windows Installer options, they deploy and set up purposes utilizing its unique Setup.exe or Set up.exe program.

Planning for Deploying Software utilizing Group Policy

When planning to deploy software program through Group Policy, embrace the next:

  • Embody the group’s software program necessities into the technique. Assess the organizational construction in Lively Listing and determine the out there GPOs.
  • Outline the way during which the purposes are going to be deployed to customers or computer systems. Are the purposes going to be revealed in Lively Listing or assigned to customers and computer systems?
  • Check the way through which the purposes are going to be assigned to be revealed.

A number of greatest practices and methods to think about are listed under:

  • Software could be deployed on the website degree, area degree, or organizational unit degree in Lively Listing. It is strongly recommended that customers deploy software program as excessive within the Lively Listing hierarchy or tree as potential. Software ought to be deployed near the basis within the Lively Listing tree as a result of it permits customers to make use of one GPO to deploy software program to a number of customers.
  • Deploy a number of purposes with a single GPO as a result of it’s simpler to manage a number of purposes from the identical GPO than to handle a number of GPOs. Consumer logon time can also be accelerated as a result of much less GPOs have to be processed.
  • If there are totally different customers and computer systems that want totally different purposes deployed, create OUs in line with these software program administration necessities, place the required customers or computer systems within the OU, then apply the GPO containing the software program that ought to be deployed.

The Course of for Deploying Software through Group Policy

The overall course of essential to deploy software program through Group Policy is summarized under:

  • Create software program distribution factors (SDPs): One of many steps in deploying software program is to make sure that customers are capable of entry the required information. SDPs are the shared folders on the community that include the information wanted to put in the deployed purposes. Every consumer that might want to deploy software program ought to have the ability to entry the SDP. The NTFS permissions ought to be Learn and Execute for the SDP and the required subfolders, in order that customers have permissions to entry the folder that incorporates the software program set up package deal.
  • Create a GPO for software program deployment and a GPO console for software program deployment: When deploying software program through Group Policy, the Group Policy Object Editor is used for the next duties:
    • Configure software program deployment set up choices.
    • Assign purposes
    • Publish purposes
    • Improve purposes
    • Take away managed purposes.
  • Configure the software program deployment set up properties for the GPO: The Software Set up Properties dialog field incorporates 4 tabs which might be used to set configuration choices for the software program that must be deployed:
    • Common tab: That is the place customers set the default location of all packages, set the default worth for publishing or assigning, and set set up consumer interface choices.
    • Superior tab: This tab consists of choices resembling mechanically uninstalling purposes when the GPO not applies to the consumer or pc, storing Object Linking and Embedding (OLE) info in Lively Listing, and enabling 64-bit Home windows shoppers to put in 32-bit Home windows Installer purposes.
    • File Extensions tab: Customers configure which file extensions must be accessed by purposes on the File Extensions tab.
    • Classes tab: Purposes classes serve a helpful objective when a corporation has a big amount of revealed purposes. The Classes tab permits customers to create and arrange purposes by classes so customers are capable of simply find the purposes within the Add/Take away Packages applet of Management Panel.
  • Add the set up packages to the GPO: On this step, add the set up packages to the GPO and specify whether or not the appliance is to be assigned or revealed to customers and computer systems.
  • Configuring Home windows Installer package deal properties: As soon as a WindowsInstaller package deal is added to a GPO, customers can change the properties of the package deal to switch the class of the appliance, whether or not the appliance is assigned or revealed, configures safety settings, and provides or removes transforms (modifications). The Properties dialog field for the Home windows Installer package deal is the place customers configure Home windows Installer package deal properties with the tabs listed under.
    • Common tab: That is the place customers change the package deal’s default identify. Customers can even choose a help URL to direct customers to a help Net web page. Customers can select the help URL from the Add Or Take away Packages applet.
    • Deployment tab: On the Deployment tab, choose settings for the next:
      • Deployment sort
      • Deployment choices
      • Set up consumer interface choices
    • Upgrades tab: The Upgrades tab shouldn’t be obtainable for packages that have been created from software information or .zap information. The tab is used to put in upgrades. Step one is to create a Home windows Installer package deal that accommodates the improve. The second step is to configure settings for the improve within the Upgrades tab.
    • Classes tab: That is the place software classes are set in order that customers can simply find the appliance within the Add Or Take away Packages applet in Management Panel.
    • Modifications tab: That is the place customers customise an set up package deal by including or eradicating transforms.
    • Safety tab: configure the customers or teams that ought to be capable of entry the appliance on the Safety tab.

Easy methods to Create a Software Distribution Level (SDP)

  1. Go online to the file server for use as an SDP.
  2. Create the community share and the required folders for the software program.
  3. The permissions that must be configured are listed under:
    • Directors: Full Management
    • Everybody or Authenticated Customers: Learn
    • Area Computer systems: Learn
  4. Copy the software program, together with all crucial information and elements, to the SDP.

How one can Create or Open a GPO and a GPO Console for Software Deployment

To create a brand new GPO:

  1. Open the Lively Listing Websites And Providers. To create and hyperlink a GPO to a website or OU, open the Lively Listing Customers and Computer systems console.
  2. Proper click on the location, area, or OU then click on Properties on the shortcut menu.
  3. When the Properties dialog field of the location, area, or OU opens, click on the Group Policy tab.
  4. Click on New and enter a reputation for the GPO.
  5. Click on Shut. The GPO is by default linked to the location, area, or OU through which it was created.

To open an present area degree GPO or OU degree GPO:

  1. Open the Lively Listing Customers and Computer systems console.
  2. Proper click on the area or OU within the left console pane and click on Properties on the shortcut menu.
  3. Click on the Group Policy tab.
  4. Within the Group Policy Object Hyperlinks listing, choose the GPO and click on Edit.
  5. The GPO is opened within the Group Policy Object Editor console.

To open an present website degree GPO:

  1. Open the Lively Listing Websites and Providers console.
  2. Increase the Websites node.
  3. Proper click on the location within the particulars pane and click on Properties on the shortcut menu.
  4. Click on the Group Policy tab.
  5. Within the Group Policy Object Hyperlinks listing, choose the GPO and click on Edit.
  6. The GPO is opened within the Group Policy Object Editor console.

To create an MMC for a GPO:

  1. Click on Begin, Run, enter mmc within the Run dialog field, and click on OK.
  2. On the File menu, click on Add/Take away Snap-In.
  3. Click on Add within the Add/Take away Snap-In dialog field to entry the Add/Take away Snap-In dialog field. Click on Add.
  4. Choose Group Policy Object Editor and click on Add.
  5. Click on Browse to seek out the GPO.
  6. Click on the All tab within the Browse For A Group Policy Object dialog field.
  7. Choose the GPO. Click on OK.
  8. Shut all open dialog packing containers then click on Save As within the MMC on the File menu.
  9. Present a reputation within the File Identify field. Click on Save.
  10. The Group Policy Object Editor for the GPO can now be accessed beneath the Administrative Instruments menu.

Learn how to Open the Software Set up Snap-in

The Software Set up snap-in is a Group Policy Object Editor element.

  1. Open both the Lively Listing Customers and Computer systems console or the Lively Listing Websites and Providers console.
  2. Proper click on the location, area, or OU then click on Properties from the shortcut menu.
  3. Click on the Group Policy tab.
  4. Both create a brand new GPO or edit an present GPO.
  5. Click on the Properties button then click on the Safety tab. Set the suitable permissions for the GPO. Click on OK.
  6. Select the GPO and click on Edit.
  7. Within the console tree, select Pc Configuration to assign purposes to computer systems or select Consumer Configuration to assign or publish purposes to customers.

The best way to Configure Software Deployment Set up Properties for the GPO

Utilizing Group Policy to deploy software program permits customers to configure quite a few settings and choices to regulate the way by which software program packages are deployed and administered inside a corporation. To carry out one of many administrative duties listed under, use the configuration steps detailed after the listed administrative process:

  • Modify the default location for the set up packages.
  • Configure the default motion that ought to be carried out when new packages are added to the GPO.
  • Outline how a lot set up info is exhibited to customers in the course of the set up course of.
  • Modify the amount of management that customers have over putting in purposes.
  • Configure the automated uninstallation of purposes when the GPO not applies to customers and computer systems.
  1. Open the suitable GPO for the software program deployment.
  2. Within the console tree, proceed to broaden both the Consumer Configuration node or the Pc Configuration node.
  3. Proper click on the Software Set up node and click on Properties on the shortcut menu.
  4. When the Software Set up Properties dialog field opens, within the Default Package deal Location field of the Common tab, enter the Uniform Naming Conference (UNC) path to the SDP for the Home windows Installer packages.
  5. Configure the default motion that ought to be carried out on new packages within the New Packages part of the Common tab. Select one of many choices listed under:
    • Show The Deploy Software Dialog Field: That is the default configuration setting. The Deploy Software dialog field will probably be displayed when new packages are added to the GPO. On this dialog field, select whether or not to assign or publish the appliance or configure the properties of the package deal.
    • Publish: Keep in mind that purposes can solely be revealed to customers, not computer systems. Subsequently, this setting is just obtainable for Consumer Configuration. When the choice is chosen, the appliance is mechanically revealed with the default package deal properties or settings.
    • Assign: When the Assign choice is chosen, any new software program set up packages added to the GPO are mechanically assigned with the default package deal properties or settings
    • Superior: When a brand new software program set up package deal is added to the GPO, the package deal’s properties dialog field is displayed. Configure the properties for the set up package deal.
  6. Within the Set up Consumer Interface Choices part of the Basic tab, select one of many following choices:
    • Primary: When chosen, customers are proven restricted info on the set up course of.
    • Most: When chosen, customers are proven all of the set up messages and screens on the set up course of.
  7. Click on the Superior tab.
  8. Choose the Uninstall The Purposes When They Fall Out Of The Scope Of Administration checkbox to mechanically take away the appliance if the GPO not applies to customers or computer systems.
  9. Choose the Embrace OLE Info When Deploying Purposes checkbox if info on Element Object Mannequin (COM) elements ought to be included with the package deal.
  10. Choose the Make 32-Bit X86 Home windows Installer Purposes Out there To Win64 Machines checkbox to allow 64-bit Home windows shopper computer systems to put in 32-bit Home windows Installer purposes.
  11. Choose the Make 32-Bit X86 Down-Degree (ZAP) Purposes Out there To Win64 Machines checkbox to allow 64-bit shopper computer systems to put in purposes revealed utilizing a .zap file (software information).

Find out how to Configure the Default Software for the Specified File Extension

A consumer would usually have to affiliate a file extension with an software when he/she has a number of purposes that may use a specified file format.

  1. Open the suitable GPO console.
  2. Within the console tree, broaden both the Consumer Configuration node or the Pc Configuration node.
  3. Proper click on the Software Set up node and click on Properties on the shortcut menu.
  4. When the Software Set up Properties dialog field opens, click on the File Extensions tab.
  5. Use the Choose File Extension record to verify which purposes are related to the file extension.
  6. Use the Up or Down buttons of the Software Priority listing field to maneuver an software that must be the default software for the actual extension to the highest of the listing.
  7. Click on OK.

How one can Create Software Classes for Purposes which might be Revealed

  1. Open the suitable GPO console.
  2. Within the console tree, broaden both the Consumer Configuration node or the Pc Configuration node.
  3. Proper click on the Software Set up node and click on Properties on the shortcut menu.
  4. When the Software Set up Properties dialog field opens, click on the Classes tab.
  5. Click on Add so as to add a brand new software class.
  6. Within the Enter New Class dialog field, specify a reputation for the brand new class within the Class field. Click on OK.
  7. To take away an present software class, choose the class within the Classes tab then click on Take away.
  8. To vary the identify of an present software class, choose the class within the Classes tab then click on Modify.
  9. Click on OK.

Tips on how to Change the Default Software Set up Conduct Over Sluggish Community Hyperlinks

Group Policy considers all community connections which might be slower than 500 Kbps as sluggish hyperlinks (default). At this level, the insurance policies listed under are disabled:

  • Disk Quotas
  • Folder Redirection
  • Scripts
  • Software Set up And Upkeep

Nevertheless, customers can change the velocity that Group Policy considers sluggish to vary the default software program set up conduct over sluggish community hyperlinks. Along with this, allow or disable the processing of insurance policies listed under over a sluggish hyperlink:

  • Disk Quota, EFS Restoration, Folder Redirection, Web Explorer Upkeep, IP Safety, Scripts, Software Set up, and Safety.

To vary the default velocity that Group Policy considers sluggish:

  1. Open the GPO console.
  2. Within the console tree, broaden both the Consumer Configuration node or the Pc Configuration node then broaden Administrative Templates, System, and Group Policy.
  3. Double-click Group Policy Sluggish Hyperlink Detection within the particulars pane.
  4. When the Group Policy Sluggish Hyperlink Detection Properties dialog field opens, choose Enabled and enter the velocity that ought to be used to outline whether or not a connection is sluggish. Getting into a worth of zero disables sluggish hyperlink detection.
  5. Click on OK.

Learn how to Add the Home windows Installer Packages to the GPO

  1. Open the GPO console.
  2. Within the console tree, broaden both the Consumer or Pc Configuration node then broaden the Software Set up node.
  3. Proper click on the Software Set up node and click on New then Package deal on the shortcut menu.
  4. Within the Information Of Sort record, select Home windows Installer Package deal or select ZAW Down-Degree Software Packages (.ZAP).
  5. Select the package deal that must be deployed. Click on Open.
  6. Within the Deploy Software dialog field, specify how the package deal ought to be deployed. Select one of many following choices:
    • Revealed: The Home windows Installer package deal is revealed to customers in Lively Listing with the default settings.
    • Assigned: The Home windows Installer package deal is assigned to customers or computer systems with the default settings.
    • Superior: The choice permits customers to configure properties for the Home windows Installer package deal.
  7. Click on OK.

Methods to Configure Home windows Installer Package deal Properties

Change the Home windows Installer package deal properties after the package deal is added to the GPO. To vary the class of the appliance, the deployment sort, and safety settings:

  1. Open the GPO console.
  2. Within the console tree, increase both the Consumer or Pc Configuration node then broaden the Software Set up node.
  3. Within the particulars pane, proper click on the software program package deal to be modified and choose Properties on the shortcut menu.
  4. On the Common tab, enter a brand new identify for the package deal within the Identify field and enter a help URL for customers within the URL field.
  5. Click on the Deployment tab with a view to change the prevailing method through which the package deal is deployed.
  6. Within the Deployment Sort part of the Deployment tab, choose the Revealed or Assigned choice.
  7. Within the Deployment Choices part of the Deployment tab, choose the next checkboxes:
    • Auto-Set up This Software By File Extension Activation: The appliance is routinely put in when a consumer opens a file that’s related to the appliance.
    • Uninstall This Software When It Falls Out Of The Scope Of Administration: The appliance is uninstalled when the related GPO is not relevant for the consumer or pc.
    • Do Not Show This Package deal In The Add/Take away Packages Management Panel: The appliance shouldn’t be displayed within the Add/Take away Packages applet in Management Panel.
    • Set up This Software At Logon: The appliance is put in when the consumer subsequent logs on to the pc.
  8. Within the Set up Consumer Interface Choices part of the Deployment tab, select both the Primary choice or the Most choice.
  9. Click on the Superior button on the Deployment tab to open the Superior Deployment Choices dialog field.
  10. Set the choices listed under underneath Superior Deployment Choices:
    • Ignore Language When Deploying This Package deal: Deploys the package deal even when the language within the package deal is in a special language. The choice principally ignores the language settings when the package deal is deployed.
    • Make This 32-Bit X86 Software Out there To Win64 Machines: Allows 64-bit Home windows shopper computer systems to put in 32-bit Home windows Installer purposes.
    • Embrace OLE Class And Product Info: Info on Element Object Mannequin (COM) elements is included with the package deal.
  11. Click on OK.
  12. Click on the Classes tab to assign the appliance to an software class.
  13. Click on the Safety tab to configure the customers or teams that ought to have the ability to entry the appliance.
  14. Click on OK.

The way to Deploy Package deal Upgrades

  1. Open the GPO console.
  2. Within the console tree, broaden both the Consumer or the Pc Configuration node then increase the Software Set up node.
  3. Within the particulars pane, proper click on the improve package deal then choose Properties on the shortcut menu.
  4. Click on the Upgrades tab.
  5. Click on Add.
  6. Within the Add Improve Package deal dialog field, choose whether or not a package deal from the present GPO or from a selected GPO will probably be chosen.
  7. Select the package deal that ought to be upgraded from the Package deal To Improve listing.
  8. If the prevailing software must be eliminated earlier than the brand new software is put in, click on the Uninstall The Present Package deal then Set up The Improve Package deal choice.
  9. If the brand new package deal ought to improve the prevailing package deal, click on the Package deal Can Improve Over The Present Package deal choice. This feature doesn’t overwrite the consumer’s present settings.
  10. Click on OK on the Add Improve Package deal dialog field.
  11. Use the Add button and Take away button on the Improve tab to specify the packages that the brand new package deal ought to improve.
  12. Allow the Required Improve For Present Packages checkbox to drive customers to improve to the brand new package deal.
  13. Click on OK.

Methods to Apply Package deal Modifications

  1. Open the GPO console.
  2. Within the console tree, increase both the Consumer or Pc Configuration node then increase the Software Set up node.
  3. Proper click on the Software Set up node and choose New then Package deal from the shortcut menu.
  4. Select the bottom package deal for the appliance that ought to be deployed. Click on Open.
  5. Use the My Community Locations icon to find this package deal.
  6. Select both Revealed or Assigned within the Deploy Software dialog field. Click on OK.
  7. Click on the Modifications tab.
  8. Click on Add and select the Home windows Installer rework package deal that must be added within the Open dialog field. Click on Open. Customers can add a number of modifications.
  9. Use the Transfer Up and Down buttons on the Modifications tab to put the packages within the applicable order. Use the Add and Take away buttons so as to add or take away transforms.
  10. Click on OK.

The best way to Take away Purposes Deployed with Group Policy

  1. Open the GPO console.
  2. Within the console tree, broaden both the Consumer or Pc Configuration node then increase the Software Set up node.
  3. Proper click on the package deal to be eliminated within the particulars pane, choose All Duties, then Take away from the shortcut menu.
  4. When the Take away Software dialog field opens, choose one of many choices listed under:
    • Instantly Uninstall The Software From Customers And Computer systems to right away take away the software program when the pc is restarted or the subsequent time when the consumer logs on to the pc.
    • Permit Customers To Proceed To Use The Software, However Forestall New Installations: This feature prevents new situations of the appliance from being put in, whereas nonetheless allowing customers who’ve already put in the appliance to proceed utilizing it.
  5. Click on OK.

Greatest Practices for Deploying Software Through Group Policy

A couple of greatest practices particular to deploying software program through Group Policy are listed under:

  • Check all software program set up packages earlier than deploying them.
  • Use and implement normal configurations for purposes if attainable.
  • It is strongly recommended that customers deploy software program as excessive within the Lively Listing hierarchy or tree as they will. Software must be deployed near the basis within the Lively Listing tree as a result of it permits customers to make use of one GPO to deploy software program to a number of customers.
  • A Home windows Installer package deal ought to be assigned/revealed solely as soon as within the equivalent GPO.
  • Create software classes when there’s a giant amount of revealed purposes inside a corporation. This makes it simpler for customers to seek out purposes in Add Or Take away Packages in Management Panel.