Have you tried executing "secedit /refreshpolicy machine_policy /enforce" from one of the domain controllers? I've found that generally machine policies are most often enforced at reboot time, unless specifically forced.
Roger -------------------------------------------------------------- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. > -----Original Message----- > From: Frustrated Admin [mailto:[EMAIL PROTECTED] > Sent: Monday, September 29, 2003 4:29 PM > To: [EMAIL PROTECTED] > Subject: [ActiveDir] Software Install to DC's via GPO > > > I'm having trouble getting my domain controllers to > accept an assigned .msi based application deployment. > The policy is "assigned" under the Software > installation under computer configuration in the > policy. I tried linking the policy to the Domain > Controllers OU. But, the application wouldn't deploy. > Next, I linked the policy to the Domain. Still > couldn't deploy to the DCs, but was able to deploy to > member servers in that domain. > > > I have a separate policy for the deployment (it's not > part of Default Domain Controllers OU policy). The > policy is first in the execution list and it's set to > no override (which I don't believe makes a difference > when dealing with application deployment). The > software share is located on a member server in the > same tree/domain and on the same subnet as the DCs. > The share permissions are full control for the > Everyone group. I can access the share for the target > DCs. > > > So my question is, can I deploy applications via GPOs > to domain controllers? > > > > > __________________________________ > Do you Yahoo!? > The New Yahoo! Shopping - with improved product search > http://shopping.yahoo.com > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
