Server 2003 Group Policy help

[Kristi2k]

I am trying to set in Group Policy under User Configuration | Software, to install Remote Desktop (it's a .msi file). But, after I set it to install @ logon for any user in the specifig OU, it doesn't install. What am I doing wrong?

 

[blcjr]

Have you made sure "Apply Group Policy" is checked? It is not, by default. I don't have a 2K/ADS computer in front of me, so I cannot recall the exact layout of the dialog, or the exact names of the buttons, but on the main group policy window (after you right-click on the OU and select Properties|GPO) there are buttons for "New", "Edit" and so forth. One of these -- is it "Options" -- gets you to a permissions type of dialog in which you see the groups and permissions set for the GPO. For the users or group that you want the GPO to apply to, you have to check "Apply Group Policy."

 

[Kristi2k]

Yes, it is, because other things that I locked down were applied.

 

[Fuzznuts]

did you assign it or publish it?

assign will force and install, publish will put the porgram as installable in the control panel.

 

[Kristi2k]

Assigned.

 

[stash]

When you created the assignment in the GPO it opens a file open window (explorer) and asks for a path to the msi file. Did you put a UNC path (\\servername\sharename\msifile.msi or a path like c:\temp\msifile.msi?

It needs to be a UNC path to a share. The clients you are assigning the application need to have access to that share. What errors are showing up in the event logs on the client machines? Do you see the message on the clients before they get the ctrl-alt-del box about installing an application? Did you reboot the clients after assigning the app? Software assignment requires a reboot...and on XP clients it may require two or three reboots to install.

 

[Kristi2k]

Yes, it's on a share that everyone has access to. I assinged the path correctly too. The clients do not receive an error message and nothing shows in the event logs locally either. I've rebooted a few times also.

 

[lowtech1]

HOW TO: Assign Software to a Specific Group By Using a Group Policy

 

[Kristi2k]

I've done all of those steps. I'm not a newbie when it comes to Servers. I do appreciate the help though. I don't understand why when the user logs on the software isn't installed.

 

[stash]

Is the user account in the OU that you have the GPO linked to?

 

[Kristi2k]

Yes, this is a new GPO for this OU, and the users are inside this OU.

 

[stash]

You need to enable userenv and winlogon logging...

Userenv:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
REG_DWORD: UserEnvDebugLevel
Value: 0x10002
The log file is %SystemRoot%\Debug\UserMode\Userenv.log

Winlogon:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\GPExtension\{827...}
REG_DWORD: ExtensionDebugLevel
Value: 2
The log file is %SystemRoot%\Security\logs\Winlogon.log

Do this on one of the client machines that should be getting the package. Reboot, then check the logs. Email them to me (in my profile).

 

[Kristi2k]

You have email.