Chang!
Let's start from the beginning. We will need a lot more information from
you before we can help you! Sorry, this is the nature of this beast.
Let's start out with the software that you are trying to install. What
software are you trying to deploy via Group Policy? Did you add the package
at the computer configuration side or at the user configuration side? I
know that this seems like a dumb question but we can not assume anything!
Furthermore, did you assign this package or publish this package? I would
assume that you have done this part correctly as some of the computers are
indeed receiving the package. Still, have to ask.
Now, let's look at where you are creating this GPO. Are you linking this
GPO at the Site level? Domain Level? OU level? If at the OU level, are all
of the computer account objects to which you want to deploy this software
located inside that OU ( or a sub-OU of that particular OU )? Have you
verified that the 'computer-side' of the GPO is not disabled? Are you sure
that there is not a 'Block inheritance' set somewhere above the level at
which you have linked this GPO? Most probably not part of the equation as
some of the computers are indeed getting this software. But, we still have
to ask.
What clients are receiving the deployment and which clients are not? GPOs
only apply to WIN2000 and WINXP clients. Neither WIN9x not WINNT clients
'understand' GPO. If these are the clients that are not receiving the
deployment then I might suggest that you do not have an issue!
Now let's look at DNS. Are all of your clients pointed to your Internal DNS
Servers. There should be no mention of any external DNS Servers ( such as
ISP DNS Servers ) in your tcp/ip configuration. That includes the Servers!
Let's look at the distribution share that you have created for this
application. Is it shared properly? We need to make sure that both the
Share and the NTFS permissions are correct. I would suggest that you use
'Domain Computers' and that this security group has READ permissions at both
levels. The application itself - does it have a native .msi file or did you
have to use a third-party software application to create the .msi file?
When you created the software package in the GPO you had to tell AD where
the .msi file is. Did you use the UNC method (
\\servername\share\file.msi ) or did you use a mapped network drive (
S:\share\file.msi ). I would suppose that you did use the UNC as some
computers are receiving the package. Still, have to ask.
Do you have multiple Domain Controllers? If so, has replication taken place
between them. Have you used any of the utilities ( such as GPOTool or
gpresult ) to look to see what is going on?
Furthermore, I assume that you are using WIN2000 Server.
HTH,
Cary
Chang Siong said:
Hi,
I can't seem to find a reason why my group policy which I set from the
domain using ADS only applies group policies to certain computers. In
addition, I tried using secedit to refresh the group policy but still my
computer cant seem to pick the latest group policy.
