Sign in with
Sign up | Sign in
Your question

new @ GPO. App Assigning question

Last response: in Windows 2000/NT
Share
February 3, 2005 8:31:08 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Ok.

I have a question. I've never done this before.

i created a network install point for project 2003. i created a Transform
file. everything works great for unattended install.

I created an OU in my A/D called Project 2003 Pro. I created a Security
Group, added my computer. On this OU (project 2003 pro), i created a GPO to
assign this application.

It does not get installed on my pc.

However, if I use A/D Users and Computers and MOVE my computer into that OU,
the app installs.

Given that a Computer account can only be in One OU, what's the point of
GPO?

in other words, if I have an OU for Office 2003, Project, and other MSI/MST
capable applications, how can I use A/D to assign the apps given that a
computer account can only be in one OU?

I'm sure it's me. I was using a W2K A/D book from MS Press that doesn't go
into a whole lot of detail on this.

So while I figured out how to get the application assigned to my PC through
moving my computer account into the OU, i'm confused because my whole plan
was to have different OUs, create membership groups. And then Add members to
the groups as needed. Have them restart, viola! new apps to there machines.

Help! what am i missing here? I'm not a GPO expert. Previously, I've used
SMS and Altiris Express to do software distribution. I like the concept of
A/D. But either i'm doing something wrong, or it's just not the right tool.

PS. W2k Sp4, not w2k3.
Anonymous
February 4, 2005 3:37:59 AM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

>I created a Security Group, added my computer. On this OU (project
>2003 pro), i created a GPO to assign this application.
>It does not get installed on my pc.
>However, if I use A/D Users and Computers and MOVE my computer into
>that OU, the app installs. Given that a Computer account can only be
>in One OU, what’s the point of GPO?

Hi,

That is the way MS designed AD. GP’s don’t apply to groups at all or
members of those groups.

You Can have more than One GP on each OU though. So if you want
multiple software packages you can assign multiple GPO’s to the one
OU. Also One GPO can be on multiple OU’s at the same time.

Here is how I do it.

1> I create a GPO for the software. I use this GPO ONLY For installing
this software. I put it on the OU containing the computers until the
software is all installed on the machines, and then I remove the GP. I
make sure that I Don’t have the "uninstall when falling out of
scope..." ticked so it stays installed. When software is installed
everywhere, I delete my GPO.

2> I use the shutdown.exe command to schedule my machines to restart
in the middle of the night installing the software.

>in other words, if I have an OU for Office 2003, Project, and other
>MSI/MST capable applications, how can I use A/D to assign the apps
>given that a computer account can only be in one OU?

Don’t create OU’s for this software, create GPO’s for them. Then put
the multiple GPO’s on one OU.

Cheers,

Lara

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Group-Policy-GPO-App-Assig...
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=807313
Anonymous
February 4, 2005 3:38:00 AM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

thanks, Lara! I'll give it a shot! it sounds like I can do what I want with
GPO but have to think about it differently.

You wouldn't by any chance know how to create a desktop short cut using GPO
would you?


"lforbes" <UseLinkToEmail@WindowsForumz.com> wrote in message
news:1105gv77bi1vm24@news.supernews.com...
> >I created a Security Group, added my computer. On this OU (project
>>2003 pro), i created a GPO to assign this application.
>>It does not get installed on my pc.
>>However, if I use A/D Users and Computers and MOVE my computer into
>>that OU, the app installs. Given that a Computer account can only be
>>in One OU, what's the point of GPO?
>
> Hi,
>
> That is the way MS designed AD. GP's don't apply to groups at all or
> members of those groups.
>
> You Can have more than One GP on each OU though. So if you want
> multiple software packages you can assign multiple GPO's to the one
> OU. Also One GPO can be on multiple OU's at the same time.
>
> Here is how I do it.
>
> 1> I create a GPO for the software. I use this GPO ONLY For installing
> this software. I put it on the OU containing the computers until the
> software is all installed on the machines, and then I remove the GP. I
> make sure that I Don't have the "uninstall when falling out of
> scope..." ticked so it stays installed. When software is installed
> everywhere, I delete my GPO.
>
> 2> I use the shutdown.exe command to schedule my machines to restart
> in the middle of the night installing the software.
>
>>in other words, if I have an OU for Office 2003, Project, and other
>>MSI/MST capable applications, how can I use A/D to assign the apps
>>given that a computer account can only be in one OU?
>
> Don't create OU's for this software, create GPO's for them. Then put
> the multiple GPO's on one OU.
>
> Cheers,
>
> Lara
>
> --
> Posted using the http://www.windowsforumz.com interface, at author's
> request
> Articles individually checked for conformance to usenet standards
> Topic URL:
> http://www.windowsforumz.com/Group-Policy-GPO-App-Assig...
> Visit Topic URL to contact author (reg. req'd). Report abuse:
> http://www.windowsforumz.com/eform.php?p=807313
Anonymous
February 18, 2005 5:22:24 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

You may use 3rd party Group Policy extensions to create shortcuts, scheduled
tasks, remote network connections etc. on client desktops. Check out Quest
Group Policy Extensions for Desktops.

Alex Kirillov
!