Any number of things can go wrong here which makes it easy to overlook the obvious. One of the first policies I implemented on our domain at the domain level was the user policy disabling all new GPO links by default. A reasonable safety precaution. This "caught" me this morning as a new application deployment was failing to deploy.
Is the policy disabled? Is the application distribution path refering to an UNC or a drive letter? Was the application distribution added to the computers node or the users node of the GPO? Are you filtering the GPO with a security group? Are you filtering the package within the GPO with a security group? Sometimes a package, especially those contructed with Install Shield, is configured in such a way that it will not deploy silently via GPO. Typically this is done to bypass the PIDKEY name/value pair in the Properties table through some custom action which requires you to interact with the installer to supply the license key. Hope these questions help... __________________ Todd Povilaitis LAN Administrator Huntington Hospital [EMAIL PROTECTED] Phone: (626) 397-3392 Fax: (626) 397-2901 -----Original Message----- From: Frustrated Admin [mailto:[EMAIL PROTECTED] Sent: Monday, September 29, 2003 13:50 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Software Install to DC's via GPO Yeah, I did that as well as rebooted several times, I even let it sit for a day and came back to it.. Still no dice. --- Roger Seielstad <[EMAIL PROTECTED]> wrote: > Have you tried executing "secedit /refreshpolicy > machine_policy /enforce" > from one of the domain controllers? I've found that > generally machine > policies are most often enforced at reboot time, > unless specifically forced. > > Roger > -------------------------------------------------------------- > Roger D. Seielstad - MTS MCSE MS-MVP > Sr. Systems Administrator > Inovis Inc. > > > > -----Original Message----- > > From: Frustrated Admin > [mailto:[EMAIL PROTECTED] > > Sent: Monday, September 29, 2003 4:29 PM > > To: [EMAIL PROTECTED] > > Subject: [ActiveDir] Software Install to DC's via > GPO > > > > > > I'm having trouble getting my domain controllers > to > > accept an assigned .msi based application > deployment. > > The policy is "assigned" under the Software > > installation under computer configuration in the > > policy. I tried linking the policy to the Domain > > Controllers OU. But, the application wouldn't > deploy. > > Next, I linked the policy to the Domain. Still > > couldn't deploy to the DCs, but was able to deploy > to > > member servers in that domain. > > > > > > I have a separate policy for the deployment (it's > not > > part of Default Domain Controllers OU policy). > The > > policy is first in the execution list and it's set > to > > no override (which I don't believe makes a > difference > > when dealing with application deployment). The > > software share is located on a member server in > the > > same tree/domain and on the same subnet as the > DCs. > > The share permissions are full control for the > > Everyone group. I can access the share for the > target > > DCs. > > > > > > So my question is, can I deploy applications via > GPOs > > to domain controllers? > > > > > > > > > > __________________________________ > > Do you Yahoo!? > > The New Yahoo! Shopping - with improved product > search > > http://shopping.yahoo.com > > List info : > http://www.activedir.org/mail_list.htm > > List FAQ : > http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> > 40mail.activedir.org/ > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
