What is the application that you're trying to deploy? In general, what you're doing should not be a problem. This works as advertised. Here's a few things to try. Run gpresult on the DC and make sure that the policy is being received and processed. Next, you'll probably want to enable some verbose GPO logging on the DC to see what's really going on. Check out this article: http://support.microsoft.com/default.aspx?scid=kb;EN-US;221833 for verbose userenv logging of policies. Also, you can enable verbose software installation logging by adding the following key/value: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics\AppMgmtDebugLevel REG_DWORD = 0x9b When this logging is enabled, log information is sent to a file called appmgmt.log within the %windir%\debug\usermode folder.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frustrated Admin Sent: Monday, September 29, 2003 1:50 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Software Install to DC's via GPO Yeah, I did that as well as rebooted several times, I even let it sit for a day and came back to it.. Still no dice. --- Roger Seielstad <[EMAIL PROTECTED]> wrote: > Have you tried executing "secedit /refreshpolicy machine_policy > /enforce" from one of the domain controllers? I've found that > generally machine > policies are most often enforced at reboot time, > unless specifically forced. > > Roger > -------------------------------------------------------------- > Roger D. Seielstad - MTS MCSE MS-MVP > Sr. Systems Administrator > Inovis Inc. > > > > -----Original Message----- > > From: Frustrated Admin > [mailto:[EMAIL PROTECTED] > > Sent: Monday, September 29, 2003 4:29 PM > > To: [EMAIL PROTECTED] > > Subject: [ActiveDir] Software Install to DC's via > GPO > > > > > > I'm having trouble getting my domain controllers > to > > accept an assigned .msi based application > deployment. > > The policy is "assigned" under the Software > > installation under computer configuration in the > > policy. I tried linking the policy to the Domain Controllers OU. > > But, the application wouldn't > deploy. > > Next, I linked the policy to the Domain. Still > > couldn't deploy to the DCs, but was able to deploy > to > > member servers in that domain. > > > > > > I have a separate policy for the deployment (it's > not > > part of Default Domain Controllers OU policy). > The > > policy is first in the execution list and it's set > to > > no override (which I don't believe makes a > difference > > when dealing with application deployment). The > > software share is located on a member server in > the > > same tree/domain and on the same subnet as the > DCs. > > The share permissions are full control for the > > Everyone group. I can access the share for the > target > > DCs. > > > > > > So my question is, can I deploy applications via > GPOs > > to domain controllers? > > > > > > > > > > __________________________________ > > Do you Yahoo!? > > The New Yahoo! Shopping - with improved product > search > > http://shopping.yahoo.com > > List info : > http://www.activedir.org/mail_list.htm > > List FAQ : > http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> > 40mail.activedir.org/ > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
