SOFTWARE DEPLOYMENT

INFORMATION SHEET 3.1-5

Michael U. Mamitag
 LEARNING OBJECTIVES

After reading this INFORMATION SHEET, STUDENT(S) MUST be able

to:

Know how to install .msi installer using GPO

Know how to configure software deployment

Michael U. Mamitag
 What is Group Policy?

Contains Settings that can be configured to control what’s happening

with Users and Computers.
There are literally thousands of different settings that can be
configured inside of each GPO.
GPOs are use with containers (Domains, Sites, and OUs), but are not
applied to group

Michael U. Mamitag
 Local vs. Domain

Every Windows computer has a Local group policy to control what

can be done on it and what is restricted, but you don’t want to go
around to all the computers in your Domain and configure all the
settings manually.
You want to join the rest of the world and administer Group policy
from Active directory.

Michael U. Mamitag
 Local Senario

Advantage Disadvantage

You can configure each But configuring 30 or more

computer separately using machine using local policy it is
Local policy too redundant and too time
consuming.

Michael U. Mamitag
 Domain Scenario

Advantage Disadvantage

Configuring all machines at Down of a server may affects all

once from the comfort of your the connected machines
desk.

Less time to configure all

machines.

Michael U. Mamitag
 Creating and linking GPO’s

We can create a Group Policy Object easily, but we have to link

it to the appropriate container (usually an OU) before it takes
effect on the Users and/or Computers.
A single GPO can be linked to multiple containers so you can
re-use it again.
Group policy has two sides
User
Computers

Michael U. Mamitag
 While you can configure settings for both sides
in any one GPO, you generally don’t (this is
why we separate users and computers into
separates OU’s).
Each side of group policy has policies and
*NEW preferences.
Generally, we create separate GPO’s for Users
and Computers

Michael U. Mamitag
 Before deploying software check the following

.msi installer is an allowed installer file

.Exe file is prohibited in software deployment.

Michael U. Mamitag
 Group policy setting’s order

Create a
folder for
software
container
.

Michael U. Mamitag
 Right click >
Choose
properties

Michael U. Mamitag
 Click Sharing tab > click share
>click drop down arrow >choose everyone>click add
then click everyone set permission setting to
Read/write

Michael U. Mamitag
 Click share to continue then click Done.

Michael U. Mamitag
 Click Close
to save.

Michael U. Mamitag
 Open server
manager > open
server manager

Michael U. Mamitag
 Click Features (+) sign
> click
click
>right click
domain(css.com) name
then choose Create a
GPO in this domain,
and Link it here…

Michael U. Mamitag
 Create a
new GPO
name

Michael U. Mamitag
 Right click in new
created GPO >click Edit

Michael U. Mamitag
 Under user
configuration > click
policies (+ sign > click
(+ sign ) > click
Software setting

Michael U. Mamitag
 Right click software
installation > choose
New > click Package

Michael U. Mamitag
 Then type the
type the
ipaddress of
the server

Michael U. Mamitag
 Choose
development
software folder that
created earlier >
click open

Note: Software
development is a
shared file where
the .msi file
installer is stored.
Michael U. Mamitag
 Choose your installer then
click Open.

Michael U. Mamitag
 Click Assigned
> Click OK.

Michael U. Mamitag
 After a few moments, you will see the image down
below indicating the configuration is successful.

Michael U. Mamitag
 Open command
prompt > then type
gpupdate /force to
update the policy.

Michael U. Mamitag
 Press Y then server is forced to log off >
then login back your administrators
account then you’ll see the confirmation
of installing managed software.

Michael U. Mamitag Login administrator

Michael U. Mamitag
 Click start button
then see the result.

Michael U. Mamitag
 Now, login your domain users into your
windows client account then open
command prompt > type ipconfig
/force > type Y to confirm > computer
will restart > login back your domain
user account > then see the result.

Logging in domain users account

Michael U. Mamitag
 Domain user accounts are the acc
ounts reside in your active directory
Example:
User accounts inside CSS Students’ OU

Michael U. Mamitag
 Deployed
software will
automatically be
installed in the
windows client.

Michael U. Mamitag