Assigned Service Pack not working

[Werner Doubell]

Hi,

I` am trying to install XPSP1 using Group policy. I've done the following:

- Created a new OU, and moved the relevant computers to it.
- Extracted the Service Pack to a share with "Everyone - Full Control"
Permissions.
- Created a new GPO which assigns the service pack to the computers, with
"Read, and Apply Group Policy" Permissions.
- Restarted the relevant computers.

The service pack does not install with startup. When I look at the RSoP on a
XP machine, I see the following on the Error Information Tab of the Computer
Configuration:

Software Installation failed due to the error listed below.
There is no software installation data object in the Active Directory.

Additional Information:
Failed to apply changes to software installation settings. Software changes
could not be applied. A previous log entry with details should exist. The
error was : There is no software installation data object in the Active
Directory.

Event ID's 1085 and 108 are logged in the Application Log.

The Diagnostic Log file for the Group Policy show the following information:

Enumerating applications in the Active Directory for computer "Computername"
with flags 5.
Cannot bind to the Active Directory to enumerate applications, error code
80040169.
Failed to apply changes to software installation settings. Software changes
could not be applied. A previous log entry with details should exist. The
error was : %2147746153

Any Ideas on this?

Thank you

Werner Doubell

 

[Philip Nunn]

If the share/software package is located on an NT 4 server it will not work
with similar errors. If its on a W2K/2K3 server make sure the share and
NTFS permissions are setup with "Authenticated Users" this group includes
"Domain Computers" and "Domain Users"

Philip Nunn

 

[Philip Nunn]

Mike,

To answer your question. Group Policies are only applied to Windows
2000/XP/2003 computers. NT4 is not supported by Group Policy to the best of
my knowledge.

Philip Nunn

 

[Cary Shultz]

-----Original Message-----
If the share/software package is located on an NT 4 server it will not work
with similar errors. If its on a W2K/2K3 server make sure the share and
NTFS permissions are setup with "Authenticated Users" this group includes
"Domain Computers" and "Domain Users"

Philip Nunn

look at the RSoP on
a Information Tab of the
Computer settings. Software
changes details should exist.
The following computer settings. Software
changes details should exist.
The


.

Philip,

Since this can only be applied to the computer
configuration I would not involve the user side of things
at all. I A - L - W - A - Y - S use "Domain Computers"
when applying Service Packs via GPO. And all they need
is READ and APPLY GROUP POLICY on the GPO itself. On the
share point all the DOMAIN CONPUTERS group needs is READ.

I bet he did not use the UNC when giving the path to
the .msi file. It M - U - S - T be in the UNC format (
\\servername\share\I386\update\update.msi ) and not a
mapped network drive ( F:\Software\Computers\WINXP\SP1
\I386\update\update.msi )......

HTH,

Cary

 

[Werner Doubell]

Hi there,

I dont think I have a permission problem, I have the exact same setup in a
test enviroment, and that works 100%.

I have another problem, don't know if it can be related... when I change the
permissions on any user in AD, the change only applies for a few minutes. If
I go to the properties in 5 minutes time, al my changes are gone!

Thank you

Werner

 

[Werner Doubell]

Hi,

I DID use the UNC path, and my permissions are set up correctly. I set this
up EXACTLY the same in my test enviroment, and my SP`s get applied 100%
there.

Werner

 

[Karen]

Hi all,
I have the same problem with Werner and have checked your
recommendations but it still does not work for me here. I
am almost crazy on this issue.

Here is my view in AD users & computers:
+ FSS.INT (my domain)
- Builtin
- Computers
- Domain controllers
- ForeignSecurityPrinciples
- Users
- SP4 target (new OU I created!)

What i did was first created the "SP4 target" OU, then
Right click for Properties, then create the GPO. Pressed
Edit to create the package where i specify the path
\\servername\w2ksp4\i386\update\update.msi.
I then closed these windows and go back to AD. Then the
last step is to MOVE computers into the OU right? I did.

Then...do i need to do anything on the client computer? I
just rebooted and login to the domain as a normal user.
Nothing happens.
What have I missed? Please help, this is the first time i
do this type of thing.

Thanks in advance.
Karen

 

[Cary Shultz]

-----Original Message-----
Hi,

I DID use the UNC path, and my permissions are set up correctly. I set this
up EXACTLY the same in my test enviroment, and my SP`s get applied 100%
there.

Werner




.

Do you have any DNS issues? Have you isntalled the
Support Tools ( from the WIN2000 Service Pack CD ) and
run both DCDIAG /V and NETDIAG /FIX?

Try these.

HTH,

Cary

 

[Philip Nunn]

Anyone having trouble with this.....Would you please check the Application
Event log and let us know if you see any errors having to do with
"Application Management" at boot up, or any errors at all that have to do
with GPO processing. Let us know!

Philip Nunn

 

[Werner Doubell]

Hi,

I have the following errors in the Application Log:

On the client side:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1085
Date: 2003/09/29
Time: 10:14:44
User: NT AUTHORITY\SYSTEM
Computer: computername
Description:
The Group Policy client-side extension Software Installation failed to
execute. Please look for any errors reported earlier by that extension.

and...

Event Type: Error
Event Source: Application Management
Event Category: None
Event ID: 108
Date: 2003/09/29
Time: 10:14:44
User: NT AUTHORITY\SYSTEM
Computer: computername
Description:
Failed to apply changes to software installation settings. Software changes
could not be applied. A previous log entry with details should exist. The
error was : %%2147746153

When I look at the RSoP on a XP machine, I see the following on the Error
Information Tab of the Computer Configuration:

Software Installation failed due to the error listed below.
There is no software installation data object in the Active Directory.

Additional Information:
Failed to apply changes to software installation settings. Software changes
could not be applied. A previous log entry with details should exist. The
error was : There is no software installation data object in the Active
Directory.

The Diagnostic Log file for the Group Policy show the following information:

Enumerating applications in the Active Directory for computer "Computername"
with flags 5.
Cannot bind to the Active Directory to enumerate applications, error code
80040169.
Failed to apply changes to software installation settings. Software changes
could not be applied. A previous log entry with details should exist.
The error was : %2147746153


Thanks,

Werner Doubell