new @ GPO. App Assigning question

B

Bob

Ok.

I have a question. I've never done this before.

i created a network install point for project 2003. i created a Transform
file. everything works great for unattended install.

I created an OU in my A/D called Project 2003 Pro. I created a Security
Group, added my computer. On this OU (project 2003 pro), i created a GPO to
assign this application.

It does not get installed on my pc.

However, if I use A/D Users and Computers and MOVE my computer into that OU,
the app installs.

Given that a Computer account can only be in One OU, what's the point of
GPO?

in other words, if I have an OU for Office 2003, Project, and other MSI/MST
capable applications, how can I use A/D to assign the apps given that a
computer account can only be in one OU?

I'm sure it's me. I was using a W2K A/D book from MS Press that doesn't go
into a whole lot of detail on this.

So while I figured out how to get the application assigned to my PC through
moving my computer account into the OU, i'm confused because my whole plan
was to have different OUs, create membership groups. And then Add members to
the groups as needed. Have them restart, viola! new apps to there machines.

Help! what am i missing here? I'm not a GPO expert. Previously, I've used
SMS and Altiris Express to do software distribution. I like the concept of
A/D. But either i'm doing something wrong, or it's just not the right tool.

PS. W2k Sp4, not w2k3.
 
L

lforbes

I created a Security Group, added my computer. On this OU (project
2003 pro), i created a GPO to assign this application.
It does not get installed on my pc.
However, if I use A/D Users and Computers and MOVE my computer into
that OU, the app installs. Given that a Computer account can only be
in One OU, what’s the point of GPO?

Hi,

That is the way MS designed AD. GP’s don’t apply to groups at all or
members of those groups.

You Can have more than One GP on each OU though. So if you want
multiple software packages you can assign multiple GPO’s to the one
OU. Also One GPO can be on multiple OU’s at the same time.

Here is how I do it.

1> I create a GPO for the software. I use this GPO ONLY For installing
this software. I put it on the OU containing the computers until the
software is all installed on the machines, and then I remove the GP. I
make sure that I Don’t have the "uninstall when falling out of
scope..." ticked so it stays installed. When software is installed
everywhere, I delete my GPO.

2> I use the shutdown.exe command to schedule my machines to restart
in the middle of the night installing the software.
in other words, if I have an OU for Office 2003, Project, and other
MSI/MST capable applications, how can I use A/D to assign the apps
given that a computer account can only be in one OU?

Don’t create OU’s for this software, create GPO’s for them. Then put
the multiple GPO’s on one OU.

Cheers,

Lara
 
R

robert britton

thanks, Lara! I'll give it a shot! it sounds like I can do what I want with
GPO but have to think about it differently.

You wouldn't by any chance know how to create a desktop short cut using GPO
would you?
 
A

Alex Kirillov

You may use 3rd party Group Policy extensions to create shortcuts, scheduled
tasks, remote network connections etc. on client desktops. Check out Quest
Group Policy Extensions for Desktops.

Alex Kirillov
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top