Installing Software Using GPO

38 thoughts on “Installing Software Using GPO”

  • Joey says:

    I want to distribute a program over GPO I need to create a MSt file the MSI file has a proberty of
    Certificatetype 0. 0 = selfsign. But I have a locales certificate and a
    password. I give the parameters certificatetype 1 and CERTIFICATEPATH
    C:xxxxxxcert-pfx and CERTIFICATEPASSWORD xxxxxxx in Orca. But the
    Programm is not installed

  • Maurice Torres says:

    I guess Group Policy is a poor choice here:

    – Group Policy would not work if computers are not on local network (e.g. remote laptops).

    – Group Policy does not provide any feedback – was installation successful or not

    – Group Policy requires that all computers should be in Active Directory domain

    There are many products on the market, but make sure you choose a cloud product. If you do not do this, you will most likely be able to deploy software remotely only on computers connected to a local network (what about remote laptops?). Several options that I would recommend:

    action1.com – they have a free version and provide fairly good endpoint configuration reports in addition to the software deployment functionality.

    pdq.com – they provide many features regarding software deployment, but they are not cloud-based, and the user interface seems a bit

    overloaded.

    quest.com – their offer is quite solid, and they have been doing this for many, many years – I would call them a recognized leader, but this may be too expensive.

  • Robert Brown says:

    I think Group Policy is a poor choice here:
    – Group Policy does not provide any feedback – was installation successfull or not
    – Grou Policy requires that all computers should belong to an Active Directory domain
    – There are a lot of issues with applying Grou Policy via VPN
    – Group Policy would not work if computers are not on your local netowork (e.g. remote laptops).

    There are plenty of products on the market, but make sure you are chosing a cloud-based product. If you do not, you most likely will be able to install software only on the computers connected to your local network (and what about remote laptops or remote employees in this case?).

    Few options I would recommend:
    1. action1.com – they have free edition and provide pretty good endpoint configuration reporting in addition to software deployment functionality.
    2. pdq.com – they provide a lot of features in regards to software deployment, but they are not cloud (you need to run them on your servers in your local network), the user interface seems little bit overloaded.
    3. quest.com – Desktop Autority Management Suite is pretty solid and it is on the market for many-many years – I would name them an established leader, but might be too costly.

  • Gordon Barnes says:

    Hi great video but i have added a new version of 7Zip and the FQDN is incorrect, how do i amend it (within Computer config/Policies/Software Settings)

  • witek says:

    LOL "Everyone" is the only setting you need in Share Permissions… once you have that on FULL CONTROL… Otherwise specify the others that you have put in place. the EVERYONE overrides every other setting you have placed there… you either have everyone of full or specify as you have with that other groups you cant have both as the setting for everyone over rides everything…

  • VimWolf says:

    Nice video. Will the UAC changes affect local users on the PC? Will it still prompt them correctly when they try to install software locally on their machines?

  • Gurttastic says:

    Really informative guide! Helped me a lot with my struggles, I got stuck at the network pathing, and didn't really understand why it wouldn't browse my MSI-files.

  • iOS MacOS Genius says:

    Hello is it only possible via msi, no way for exe software im using is a photo software for school education and running 2012 r2 in which should be the same process.

  • Kevin Gonzalez says:

    Awesome video! I do have one question though: is it s necessity to run the gpupdate /force command? Or will that be done on a user reboot? I'm curious since it would be easier if the workstation would run a group policy update on its own rather than instructing users to do the command. Thanks!

  • Shivian124 says:

    Thanks for the post.

    You can install 32-bit MSIs on 64-bit Windows but not vice versa so deploying the 64-bit MSI via Group Policy would fail on 32-bit machines.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes:

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>