Dear Matt, While I can't promise this will work, try creating a Security Group and place the machine/computer accounts of The systems you want to receive the MSI file from. Also place the Machine account into the OU that the GPO is applied to.
We recently pushed out a number of patches to our Windows 2000 system using GPO. Basically we created an OU, moved the machine accounts into that OU. Inside the same OU we created a Security Group. This security group's members were the machine accounts of the Windows 2000 workstations/servers that would receive the Patches. We then created a GPO on the OU which pointed to a Computer Login Script which inturn called a CMD or BAT file that executed the EXE or MSI file from the AD locally on the workstation prior to allowing the user to login. We didn't fuss with Share permissions or anything since the GPO knew the file was located on a DC and would grab it from any DC that was available. This has helped us enormously. We are investigating other means to push out patches, but this was the quickest and simplest means to complete the job. Hope this helps! -dan -----Original Message----- From: Matt Hoffman [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 17, 2003 11:08 AM To: NT 2000 Discussions Yeah, I tried that one too. I should have mentioned that. I've been told in what I've read that you should see some info about applying software updates when the computer boots up, but since this isn't working I get nothing. Matt -----Original Message----- From: Henderson Richard [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 17, 2003 11:05 AM To: NT 2000 Discussions Subject: RE: Computer GPO software installation problems Do you have a default domain policy overriding the GPO, tried ticking no override? -----Original Message----- From: Matt Hoffman [mailto:[EMAIL PROTECTED] Sent: 17 September 2003 16:02 To: NT 2000 Discussions Subject: Computer GPO software installation problems Hello, I keep looking for the solution to this particular problem, but have found no success with Microsoft's knowledgebase or any other site I've looked at. According to all the sources I've read I'm doing it correctly, but here goes; Windows 2000 server SP3, Computer GPO software distribution (doesn't matter what type of MSI file), Windows XP client workstations SP1: software assigned via Computer GPO's does not install. The computer basically behaves as if it's not receiving any information about waiting software install files. Software assigned or published to Users works as expected. The packages are set up with correct permissions to the share for both computers and users, assigned with UNC path names and not local paths, and appropriate accounts are set up to access the GPO in permissions for that GPO. In fact, this is set up with a brand-new OU called BETATEST, where the users or computers get moved into for testing purposes, so "Authenticated Users" really ought to do the trick, but even specifically assigned computer names do not work. As mentioned earlier, assigned or published User GPO software installs work just fine. Does anyone have a clue about this? I'm absolutely stumped, and cannot find anything specifically weird such as GPO's have been set to block inheritance or computer GPO settings having been turned off. Everything seems clean there. Basically, I would welcome any suggestions as to where to look for problems beyond this point. I really don't want to do all my software assignment through the Users - some stuff really needs to be set up to install at the Computer level. Thanks in advance for any assistance, Matt Hoffman ------ You are subscribed as [EMAIL PROTECTED] Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=nt2000&text_mode=&la ng=e nglish To unsubscribe send a blank email to %%email.unsub%% ************************************************************************ **** ******************************* This correspondence is confidential and is solely for the intended recipient(s). If you are not the intended recipient, you must not use, disclose, copy, distribute or retain this message or any part of it. If you are not the intended recipient please delete this correspondence from your system and notify the sender immediately. No warranty is given that this correspondence is free from any virus. In keeping with good computer practice, you should ensure that it is actually virus free. E-mail messages may be subject to delays, non-delivery and unauthorised alterations therefore, information expressed in this message is not given or endorsed by Sx3 unless otherwise notified by our duly authorised representative independent of this message. Sx3 is a trading name of Service and Systems Solutions Limited, a limited company registered in Northern Ireland under number NI 32979 whose registered office is at 120 Malone Road, Belfast, BT9 5HT. ************************************************************************ **** ******************************* ------ You are subscribed as [EMAIL PROTECTED] Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=nt2000&text_mode=&la ng=e nglish To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [EMAIL PROTECTED] Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=nt2000&text_mode=&la ng=english To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [EMAIL PROTECTED] Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=nt2000&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED]
