AD GPO Software Installation User Configuration

-

hi gurus!

so, network admin student here, , have ad gpo software installation question.

i have installed ad , trying deploy software program specific ad group.  now, have deployed , shows up, however, if log in under different user name not part of ad group, still shows on desktop. 

my question is, there way have software installation show on desktops of members of group have deployed software to? or once have installed specific group, becomes visible on desktop every person in group?

i running server windows server 2012 r2 server.

*note, far, copmuter testing configuration on 2012r2 dc of sub-domain in forest, upon trying out on domain-joined computer runing 8.1, still same results, desktop same other user, , there no difference (all desktops, no matter user, have same configuration/look). 

steps have taken:

in gpo have software installation on user configuration node, not computer configuration node. have disabled computer configuration specific gpo.

in scope tab of gpo, currently, have authenticated users , ad group name 2 listed in security filtering.

under delegation tab, have authenticated users (read security filtering), ad group (read security filtering), domain admins, enterprise admins, , system (all edit settings, delete , modify security) , have domain controller (as read). 

i have done gpupdate /force command on both dc (xxxxxxx.org) , computer i'm testing user settings on. 

thanks in advance , answers, can't find far in research problem

..i have ad gpo software installation question.

i have installed ad , trying deploy software program specific ad group.  now, have deployed , shows up, however, if log in under different user name not part of ad group, still shows on desktop. 

my question is, there way have software installation show on desktops of members of group have deployed software to? or once have installed specific group, becomes visible on desktop every person in group?

so, feature ad gpsi. (heavy emphasis on i  ;)

once software installation initiated, actual software install database (msi file etc) determines happens next.
in scenario, sounds software installing users, rather per-user. common outcome, in experience.

so, software product installed users of given computer, , therefore available users of computer, , software installer placed shortcuts onto users start menu , maybe users desktop folder, users may see software installed , may access software.

group policy software installation doesn't have control on outcome - it's dependent upon msi author decide installation outcome looks like. installing allusers commercially available these days, in experience.

a lot of documentation gpsi (intellimirror) talks per-user , per-computer concepts, but, per-user stuff clunky , not used lot these days, in experience.

don [doesn't work msft, , they're glad ;]



Windows Server  >  Group Policy



Comments

Post a Comment

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

-
hello, i'm getting error when trying add print services role in windows 2012 standard. i'm getting same error whether use gui or powershell. this new server install. the powershell error follows: add-windowsfeature : request add or remove features on specified server failed. installation of 1 or more roles, role services, or features failed. the referenced assembly not found. error: 0x80073701 at line:1 char:1 + add-windowsfeature print-services + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~     + categoryinfo          : invalidoperation: (@{vhd=; credent...name=localhost}:psobject) [install-windowsfeature],     exception     + fullyqualifiederrorid : dismapi_error__failed_to_enable_updates,microsoft.windows.servermanager.commands.addwind    owsfeaturecommand success restart needed exit code      feature result ------- -------------- ---------      -------------- false   no             failed         {} issue appreciated. hi, i think should st
Read more

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

-
i've been trying disconnect server while , haven't been able to. there quick way this? i've used net session , net user , work sometime never consistent. can task? hi yrusad, thanks post. does work when check “computer management > system tools > shared folders > open files/sessions”. directly manage from gui. and based on knowledge, quick way mentioned net session /delete /y. mean never consistent? best regards, mary please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  >  Windows Server 2012 General
Read more

Event ID 64,77,1008 Certificates Events Windows Server 2008, 2008R2

-
hi guys, i need event ids. event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before? event id 77 - 1 strange me. warning , in same time don't see suspicious: "windows default" policy module logged following warning: active directory connection <domain controller name> has been reestablished <domain controller name>. have 4 dcs. should check or ignore these messages. event id 1008 - "certificate services client: credential roaming not performed because number of tokens in local store has exceeded limit." - i've checked articles credential roaming i'm not sure should do. if give tips , answers, great. in advance. hi, event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before? i assume these
Read more