I keep my deployment packages in the netlogon share, but we don't have many packages (or DCs, for that matter). What kind of topology do you have?
2009/10/16 David W. McSpadden <[email protected]> > Ok that is a start. > Now I have a WAN with 28 MPLS T1 LANs. > Do I put the MSI package on the DC and have it pulled across the T1's or > where does this mythical beast need to reside so as not choke my WAN?? > > -------------------------------------------------- > From: "Ben Scott" <[email protected]> > Sent: Friday, October 16, 2009 9:41 AM > To: "NT System Admin Issues" <[email protected]> > Subject: Re: Deploying things with Group Policy > > On Fri, Oct 16, 2009 at 9:12 AM, David W. McSpadden <[email protected]> >> wrote: >> >>> I want to make sure everyone is on the same version of say UltraVNC. How >>> do >>> I set up Group Policy to deploy UltraVnc ... to every >>> authenticated computer??? >>> >> >> Is there an MSI package available to install UltraVNC? If so, then >> create a GPO. Go to Computer Config -> Software Settings -> Software >> Install -> right-click -> New -> Package. Pick the MSI file using a >> UNC path that's available and readable by all machine accounts. The >> next time they reboot, it should get installed. >> >> If there's no MSI, you have to either script something around the >> SETUP.EXE-style installer and call the script as a Computer Startup >> script, or build a .ZAP file. The .ZAP files are basically really >> limited scripts, so I've never bothered. >> >> ... with all my settings ... >>> >> >> If you want settings via Group Policy, the program (UltraVNC) has to >> expose those settings to Group Policy. That will mean it looks under >> the various "Policies" subkeys in the registry, and honors settings >> there. In other words, the program has to be written to support Group >> Policy. The publisher will typically provide an .ADM or .ADMX file to >> manage those GP settings. >> >> You can technically hack together an .ADM file that writes to other >> areas of the registry, but then the changes won't be backed out when >> the GPO no longer applies. (Sometimes called "tattooing the >> registry".) >> >> -- Ben >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> >> > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." http://raythestray.blogspot.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
