Group Policy Software Deployment

[Lee]

I'm trying to configure Group Policies to deploy software to my
clients, specifically, Win2K SP3 and McAfee AntiVirus 7 Enterprise Ed.
The problem I'm having is that clients are not installing said
software. Well, I should clarify. The one client I've tried so far
isn't (can't try the others yet because of DNS issues (long story)).
The following is the appmgmt.log file created after I followed the MS
KB Article for creating said file:
(I'm most curious to know what exactly "Found 2 applications locally
that are not included in the set of applications from the Active
Directory." means).

***********************************

07-21 20:41:57:953
The following policies are to be applied, flags are 81.
Global Software (unique identifier
{593269DD-90E4-48DF-8D77-BF66BD77278D})
System volume path =
\\mycompany.com\SysVol\mycompany.com\Policies\{593269DD-90E4-48DF-8E77-BF66BD77278D}\Machine
Active Directory path =
LDAP://CN=Machine,CN={593269DD-90E4-48DF-8E77-BF66BD77278D},CN=Policies,CN=System,DC=mycompany,DC=com
Set the Active Directory path to LDAP://CN=Class
Store,CN=Machine,CN={593269DD-90E4-48DF-8E77-BF66BD77278D},CN=Policies,CN=System,DC=mycompany,DC=com;.
Policy has not changed. Only assigned applications will be
advertised.
Enumerating the managed applications which are currently applied to
this user.
The following 2 managed applications are currently applied to this
user.
McAfee VirusScan Enterprise from policy Global Software with state
515 and assign count 1.
Windows 2000 Service Pack 3 from policy Global Software with state
509 and assign count 1.
Found assigned application McAfee VirusScan Enterprise from policy
Global Software in the registry.
Found assigned application Windows 2000 Service Pack 3 from policy
Global Software in the registry.
Found 2 applications locally that are not included in the set of
applications from the Active Directory.
Software installation extension returning with final error code 0.

*************************************
The following is the results of gpresult.exe:
*************************************
Microsoft (R) Windows (R) 2000 Operating System Group Policy Result
tool
Copyright (C) Microsoft Corp. 1981-1999


Created on Monday, July 21, 2003 at 8:42:08 PM


Operating System Information:

Operating System Type: Professional
Operating System Version: 5.0.2195.Service Pack 4
Terminal Server Mode: Not supported

###############################################################

User Group Policy results for:

CN=administrator,CN=Users,DC=mycompany-ny,DC=com

Domain Name: mycompany
Domain Type: Windows 2000
Site Name: NewYork

Roaming profile: (None)
Local profile: C:\Documents and Settings\anadmin

The user is a member of the following security groups:

mycompany\Domain Users
\Everyone
BUILTIN\Users
BUILTIN\Administrators
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
\LOCAL
mycompany\Domain Admins
mycompany\Group Policy Creator Owners
mycompany\Schema Admins
mycompany\Enterprise Admins
mycompany\DnsAdmins
mycompany\Cert Requesters
mycompany\Cert Server Admins


###############################################################

Last time Group Policy was applied: Monday, July 21, 2003 at 8:42:00
PM



###############################################################

Computer Group Policy results for:

CN=mycompany-HG4PC88,OU=Windows 2000
Workstations,DC=mycompany-ny,DC=com

Domain Name: mycompany
Domain Type: Windows 2000
Site Name: NewYork


The computer is a member of the following security groups:

BUILTIN\Administrators
\Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
mycompany\mycompany-HG4PC88$
mycompany\Domain Computers

###############################################################

Last time Group Policy was applied: Monday, July 21, 2003 at 8:41:57
PM
Group Policy was applied from: exchangeny.mycompany-ny.com


===============================================================


The computer received "Registry" settings from these GPOs:

Local Group Policy
Default Domain Policy


===============================================================
The computer received "Security" settings from these GPOs:

Local Group Policy
Default Domain Policy


===============================================================
The computer received "EFS recovery" settings from these GPOs:

Local Group Policy
Default Domain Policy


===============================================================
The computer received "Application Management" settings from these
GPOs:

Global Software

 

[Benny Fu]

Dear Lee,

Thank you for your posting.

Based on your description, to work around the issue, please create a new OU
and a new GPO to assign service pack 3 again to the client to force a
reinstall of Service Pack 3.

Because service packs are applied across organizations to computers rather
than to specific users, you should deliver the Update.msi package by using
a computer-level Group Policy deployment.

For the detailed information on how to deploy service pack in Windows 2000
domain, please refer to the following article:

278503 Best Practices for Using Update.msi to deploy Service Packs
http://support.microsoft.com/?id=278503

More Information:
===============
302430 HOW TO: Assign Software to a Specific Group By Using a Group Policy
http://support.microsoft.com/?id=302430

321713 HOW TO: Use Group Policy to Set Automatic Installation Options Based
on
http://support.microsoft.com/?id=321713

Hope it helps.

Thanks and have a good day!

Regards,

Benny Fu
Microsoft Online Partner Support
Microsoft Corporation
Get Secure! – www.microsoft.com/security

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: (e-mail address removed) (Lee)
| Newsgroups: microsoft.public.win2000.group_policy
| Subject: Group Policy Software Deployment
| Date: 21 Jul 2003 17:57:07 -0700
| Organization: http://groups.google.com/
| Lines: 153
| Message-ID: <[email protected]>
| NNTP-Posting-Host: 66.101.0.33
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 8bit
| X-Trace: posting.google.com 1058835428 24036 127.0.0.1 (22 Jul 2003
00:57:08 GMT)
| X-Complaints-To: (e-mail address removed)
| NNTP-Posting-Date: 22 Jul 2003 00:57:08 GMT
| Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!newsfee
d01.sul.t-online.de!t-online.de!newsfeed.online.be!216.170.153.135.MISMATCH!
tdsnet-transit!newspeer.tds.net!sn-xit-02!sn-xit-06!sn-xit-09!supernews.com!
postnews1.google.com!not-for-mail
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:10630
| X-Tomcat-NG: microsoft.public.win2000.group_policy
|
| I'm trying to configure Group Policies to deploy software to my
| clients, specifically, Win2K SP3 and McAfee AntiVirus 7 Enterprise Ed.
| The problem I'm having is that clients are not installing said
| software. Well, I should clarify. The one client I've tried so far
| isn't (can't try the others yet because of DNS issues (long story)).
| The following is the appmgmt.log file created after I followed the MS
| KB Article for creating said file:
| (I'm most curious to know what exactly "Found 2 applications locally
| that are not included in the set of applications from the Active
| Directory." means).
|
| ***********************************
|
| 07-21 20:41:57:953
| The following policies are to be applied, flags are 81.
| Global Software (unique identifier
| {593269DD-90E4-48DF-8D77-BF66BD77278D})
| System volume path =
|
\\mycompany.com\SysVol\mycompany.com\Policies\{593269DD-90E4-48DF-8E77-BF66B
D77278D}\Machine
| Active Directory path =
|
LDAP://CN=Machine,CN={593269DD-90E4-48DF-8E77-BF66BD77278D},CN=Policies,CN=S
ystem,DC=mycompany,DC=com
| Set the Active Directory path to LDAP://CN=Class
|
Store,CN=Machine,CN={593269DD-90E4-48DF-8E77-BF66BD77278D},CN=Policies,CN=Sy
stem,DC=mycompany,DC=com;.
| Policy has not changed. Only assigned applications will be
| advertised.
| Enumerating the managed applications which are currently applied to
| this user.
| The following 2 managed applications are currently applied to this
| user.
| McAfee VirusScan Enterprise from policy Global Software with state
| 515 and assign count 1.
| Windows 2000 Service Pack 3 from policy Global Software with state
| 509 and assign count 1.
| Found assigned application McAfee VirusScan Enterprise from policy
| Global Software in the registry.
| Found assigned application Windows 2000 Service Pack 3 from policy
| Global Software in the registry.
| Found 2 applications locally that are not included in the set of
| applications from the Active Directory.
| Software installation extension returning with final error code 0.
|
| *************************************
| The following is the results of gpresult.exe:
| *************************************
| Microsoft (R) Windows (R) 2000 Operating System Group Policy Result
| tool
| Copyright (C) Microsoft Corp. 1981-1999
|
|
| Created on Monday, July 21, 2003 at 8:42:08 PM
|
|
| Operating System Information:
|
| Operating System Type: Professional
| Operating System Version: 5.0.2195.Service Pack 4
| Terminal Server Mode: Not supported
|
| ###############################################################
|
| User Group Policy results for:
|
| CN=administrator,CN=Users,DC=mycompany-ny,DC=com
|
| Domain Name: mycompany
| Domain Type: Windows 2000
| Site Name: NewYork
|
| Roaming profile: (None)
| Local profile: C:\Documents and Settings\anadmin
|
| The user is a member of the following security groups:
|
| mycompany\Domain Users
| \Everyone
| BUILTIN\Users
| BUILTIN\Administrators
| NT AUTHORITY\INTERACTIVE
| NT AUTHORITY\Authenticated Users
| \LOCAL
| mycompany\Domain Admins
| mycompany\Group Policy Creator Owners
| mycompany\Schema Admins
| mycompany\Enterprise Admins
| mycompany\DnsAdmins
| mycompany\Cert Requesters
| mycompany\Cert Server Admins
|
|
| ###############################################################
|
| Last time Group Policy was applied: Monday, July 21, 2003 at 8:42:00
| PM
|
|
|
| ###############################################################
|
| Computer Group Policy results for:
|
| CN=mycompany-HG4PC88,OU=Windows 2000
| Workstations,DC=mycompany-ny,DC=com
|
| Domain Name: mycompany
| Domain Type: Windows 2000
| Site Name: NewYork
|
|
| The computer is a member of the following security groups:
|
| BUILTIN\Administrators
| \Everyone
| BUILTIN\Users
| NT AUTHORITY\NETWORK
| NT AUTHORITY\Authenticated Users
| mycompany\mycompany-HG4PC88$
| mycompany\Domain Computers
|
| ###############################################################
|
| Last time Group Policy was applied: Monday, July 21, 2003 at 8:41:57
| PM
| Group Policy was applied from: exchangeny.mycompany-ny.com
|
|
| ===============================================================
|
|
| The computer received "Registry" settings from these GPOs:
|
| Local Group Policy
| Default Domain Policy
|
|
| ===============================================================
| The computer received "Security" settings from these GPOs:
|
| Local Group Policy
| Default Domain Policy
|
|
| ===============================================================
| The computer received "EFS recovery" settings from these GPOs:
|
| Local Group Policy
| Default Domain Policy
|
|
| ===============================================================
| The computer received "Application Management" settings from these
| GPOs:
|
| Global Software
|

 

[Lee]

Thanks for your reply...

The software is set to deploy to the computers and the not
the users.

-----Original Message-----
Are you assiging these applications to users or to computers? To have
it automatically installed at restart you want to assign them to
computers instead of users.

Kevin Mattson
www.deploy-tech.net

BF66BD77278D},CN=Policies,CN=System,DC=mycompany,DC=com;.
Policy has