Thanks very much. That is EXACTLY the info I needed. I created an OU with
it's own Group policy to install the software, and a group in that OU that
contains the computers I want it to install on. Then I went to the domain
object, and added that Group policy in the GPOs that are there. Then
changed the security to remove authenticated users, and added the group that
was in the OU with the "apply group policy" only on the appropriate group.
Software installed automatically!
Thanks again!
W. Andy Roche
Systems Administrator
NextGen Performance Tuning Team
CSG Systems, Inc.
[EMAIL PROTECTED]
http://www.csgsystems.com
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ryan Malayter
Sent: Monday, August 13, 2001 2:10 PM
To: NT 2000 Discussions
Subject: RE: Auto-install software in AD
Well, it seems pretty flexible to me, and after I got some Group Policy
experience, it even started to make a lot of sense. You apply one or more
group policies to an OU (which can contain computers or users). If you wish
to specify an exception to a particular policy/OU combination, you can
permit or deny access to a group policy via an individual account permission
or security group permissions setting.
To apply a group policy to a specific computer, make a new group policy on
the computer's (or even domain's) OU, then click on properties and remove
the read permissions on that group policy for Authenticated Users (which are
there by default). Then you add read permissions to a specific computer
account (or security group, or whatever).
There's dozens of books out about group policy, check out Amazon to get a
good list.
-ryan-
-----Original Message-----
From: W. Andy Roche [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 13, 2001 1:40 PM
To: NT 2000 Discussions
Subject: RE: Auto-install software in AD
*sigh* Thanks. I was hoping that there was a way. Dang Microsoft and
their frustrating habit of not thinking things through.
W. Andy Roche
Systems Administrator
NextGen Performance Tuning Team
CSG Systems, Inc.
[EMAIL PROTECTED]
http://www.csgsystems.com
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ryan Malayter
Sent: Monday, August 13, 2001 1:31 PM
To: NT 2000 Discussions
Subject: RE: Auto-install software in AD
So what? Distribution groups have nothing to do with Group policy or
security - they're for *mail* distribution, via Exchange 2000.
>From the Active Directory Users and Computers help files:
"Distribution groups are not security-enabled. They cannot be listed in
DACLs. Distribution groups can be used only with e-mail applications (such
as Exchange), to send e-mail to collections of users. If you do not need a
group for security purposes, create a distribution group instead of a
security group."
-----Original Message-----
From: W. Andy Roche [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 13, 2001 1:25 PM
To: NT 2000 Discussions
Subject: RE: Auto-install software in AD
Ah, but, there are two types of groups in AD. Security and Distribution.
W. Andy Roche
Systems Administrator
NextGen Performance Tuning Team
CSG Systems, Inc.
[EMAIL PROTECTED]
http://www.csgsystems.com
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ryan Malayter
Sent: Monday, August 13, 2001 1:04 PM
To: NT 2000 Discussions
Subject: RE: Auto-install software in AD
Nope. Security Groups can only be used to deny access to a Group policies
applied to an OU. You cannot selecively apply a Group Policy to a security
group.
-----Original Message-----
From: W. Andy Roche [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 10, 2001 5:52 PM
To: NT 2000 Discussions
Subject: Auto-install software in AD
I am trying to auto install an app using the Group Policy Interface. I have
created an OU for the app, Created a group policy, and under Computer
Configuration|Software Settings|Software installation created a new
Configuration|package.
The thing is, the only way I can get the software to install is to move the
computer from the computer folder into the OU.
Is there a way to do it using groups so that I don't have to change the OU
for the computer?
W. Andy Roche
Systems Administrator
NextGen Performance Tuning Team
CSG Systems, Inc.
[EMAIL PROTECTED]
http://www.csgsystems.com
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
