none
Software GPO is not applying and installing software.

    Question

  • I'm trying to test policy to install Google Chrome and Firefox on a workstation but the policy is not applying. This is on server 2012.

    After rebooting my test machine neither of the browsers install. I ran gpresult /r and it doesn't show my policy as one that was applied.

    My shared folder that has my software has all the correct permissions. My software package looks to be created properly and everything looks correct. I'm not sure why the policy is not being applied.

    Tuesday, July 7, 2015 9:00 PM

Answers

  • So I was able to get the software to apply but I am not sure which 2 things solved it.

    I did the following 2 things:

    1. "In a Group Policy applied to these workstations, navigate to:

    Computer Configuration > Policies > Administrative Templates > System > Group Policy

    Enable the Specify startup policy processing wait time. Set Amount of time to wait (in seconds): = 120"

    2. I logged in as a user that was not an administrator. It seems when I log in using an administrator account the GPO does apply.

    I can visually see the GPO being applied when I log in as I enabled Verbose Logging to see what is happened when I log in and out.

    • Proposed as answer by Alex LvModerator Monday, July 13, 2015 8:04 AM
    • Marked as answer by 3s1k Monday, July 13, 2015 5:14 PM
    Wednesday, July 8, 2015 10:49 PM

All replies

  • To identify the policies that are applied on a user and a computer, run the below command.

    

    Then open the result.htm file

    In the htm file all the details listed in "Computer Configuration Summary" is applied to the computer.

    In the htm file all the details listed in "User Configuration Summary" is applied to the computer.

    Also update how are you installing Firefox & chrome. Any articles which you have referred.

    Check if below article helps

    http://community.spiceworks.com/how_to/57202-deploying-firefox-with-group-policy

    Mark the forum answered if it resolves your issue.


    Tuesday, July 7, 2015 9:09 PM
  • If its not applied it wont work period, you need to link the GPO to a site\domain or OU containing the objects you wish to target. 


    Wednesday, July 8, 2015 7:31 AM
  • If its not applied it wont work period, you need to link the GPO to a site\domain or OU containing the objects you wish to target. 


    The GPO is linked, when I right-click my GPO it says "Link Enabled" and it's linked to my OU in Active Directory.
    Wednesday, July 8, 2015 5:09 PM
  • what objects are in that OU and what policy did you modify user or computer, did you mess with the security filtering at all? also do you have .msi for both of these ?

    • Edited by AlexAdkin Wednesday, July 8, 2015 5:45 PM
    Wednesday, July 8, 2015 5:31 PM
  • what objects are in that OU and what policy did you modify user or computer, did you mess with the security filtering at all? also do you have .msi for both of these ?

    I have one object in my OU which is my test computer. I did not mess with the security filtering and I am using .msi's for both.

    I created a software package in Computer Configuration > software settings > software installation

    Wednesday, July 8, 2015 6:54 PM
  • if its linked to that OU you should see the GPO in GPResult, even if its not working or there is an issue with permissions for example if its linked and you do a result for that computer it should show in that result .  why not post a result here?


    Wednesday, July 8, 2015 7:20 PM
  • if its linked to that OU you should see it in GPResult.  why not post a result here.

    Did you use a UNC path for the software share? or a drive letter?

    I used the UNC path \\server\gpopush\firefox.msi

    Microsoft Windows [Version 6.1.7601]

    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\user>gpresult /r

    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0

    Copyright (C) Microsoft Corp. 1981-2001

    Created On 7/8/2015 at 9:42:17 AM

    RSOP data for domain\user on NW12 : Logging Mode

    ---------------------------------------------------------

    OS Configuration:            Member Workstation

    OS Version:                  6.1.7601

    Site Name:                   Default-First-Site-Name

    Roaming Profile:             N/A

    Local Profile:               C:\Users\user

    Connected over a slow link?: No

    COMPUTER SETTINGS

    ------------------

        CN=NW12,OU=Firefox test,DC=domain,DC=local

        Last time Group Policy was applied: 7/8/2015 at 9:26:32 AM

        Group Policy was applied from:      Server.domain.local

        Group Policy slow link threshold:   500 kbps

        Domain Name:                        DOMAIN

        Domain Type:                        Windows 2000

        Applied Group Policy Objects

        -----------------------------

            Software Deployment GPO

            Small Business Server Client Computer

            Small Business Server Remote Assistance Policy

            Small Business Server Lockout Policy

            Small Business Server Domain Password Policy

            Default Domain Policy

            Local Group Policy

        The following GPOs were not applied because they were filtered out

        -------------------------------------------------------------------

            Small Business Server Windows Firewall

                Filtering:  Denied (WMI Filter)

                WMI Filter: PostSP2

            Small Business Server Internet Connection Firewall

                Filtering:  Denied (WMI Filter)

                WMI Filter: PreSP2

        The computer is a part of the following security groups

        -------------------------------------------------------

            BUILTIN\Administrators

            Everyone

            BUILTIN\Users

            NT AUTHORITY\NETWORK

            NT AUTHORITY\Authenticated Users

            This Organization

            NW12$

            Domain Computers

            System Mandatory Level

    USER SETTINGS

    --------------

        CN=SCS Tech,OU=SBSUsers,OU=Users,OU=1234,DC=DOMAIN,DC=local

        Last time Group Policy was applied: 7/8/2015 at 9:25:45 AM

        Group Policy was applied from:      Server.DOMAIN.local

        Group Policy slow link threshold:   500 kbps

        Domain Name:                        DOMAIN

        Domain Type:                        Windows 2000

        Applied Group Policy Objects

        -----------------------------

            Default Domain Policy

        The following GPOs were not applied because they were filtered out

        -------------------------------------------------------------------

            Small Business Server Windows Firewall

                Filtering:  Denied (WMI Filter)

                WMI Filter: PostSP2

            Small Business Server Domain Password Policy

                Filtering:  Not Applied (Empty)

            Small Business Server Lockout Policy

                Filtering:  Disabled (GPO)

            Small Business Server Remote Assistance Policy

                Filtering:  Disabled (GPO)

            Local Group Policy

                Filtering:  Not Applied (Empty)

            Mount sjones home Folder

                Filtering:  Denied (Security)

            Small Business Server Internet Connection Firewall

                Filtering:  Denied (WMI Filter)

                WMI Filter: PreSP2

            Mount mmetcalf home Folder

                Filtering:  Denied (Security)

            Small Business Server Client Computer

                Filtering:  Not Applied (Empty)

        The user is a part of the following security groups

        ---------------------------------------------------

            Domain Users

            Everyone

            Offer Remote Assistance Helpers

            BUILTIN\Administrators

            BUILTIN\Users

            REMOTE INTERACTIVE LOGON

            NT AUTHORITY\INTERACTIVE

            NT AUTHORITY\Authenticated Users

            This Organization

            LOCAL

            Group Policy Creator Owners

            SMSMSE Admins

            Domain Admins

            Schema Admins

            SBS SP Admins

            Enterprise Admins

            Records Management

            SBS Report Users

            SBS Mobile Users

            Organization Management

            Denied RODC Password Replication Group

            IIS_WPG

            STS_WPG

            Offer Remote Assistance Helpers

            High Mandatory Level


    Wednesday, July 8, 2015 7:29 PM
  • if its linked to that OU you should see it in GPResult.  why not post a result here.

    Did you use a UNC path for the software share? or a drive letter?

    So I deleted the packages and recreated them. Now you can see the the "Software Deployment GPO" was applied but when I log into the workstation Firefox and Chrome were not installed. Here is the gpresult for that and it is bold.

    Microsoft Windows [Version 6.1.7601]

    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\user>gpresult /r

    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0

    Copyright (C) Microsoft Corp. 1981-2001

    Created On 7/8/2015 at 11:36:30 AM

    RSOP data for MYDOMAIN\user on NW12 : Logging Mode

    ---------------------------------------------------------

    OS Configuration:            Member Workstation

    OS Version:                  6.1.7601

    Site Name:                   Default-First-Site-Name

    Roaming Profile:             N/A

    Local Profile:               C:\Users\user

    Connected over a slow link?: No

    COMPUTER SETTINGS

    ------------------

        CN=NW12,OU=Firefox test,DC=MYDOMAIN,DC=local

        Last time Group Policy was applied: 7/8/2015 at 11:32:56 AM

        Group Policy was applied from:      Server.MYDOMAIN.local

        Group Policy slow link threshold:   500 kbps

        Domain Name:                        MYDOMAIN

        Domain Type:                        Windows 2000

        Applied Group Policy Objects

        -----------------------------

            Software Deployment GPO

            Small Business Server Client Computer

            Small Business Server Remote Assistance Policy

            Small Business Server Lockout Policy

            Small Business Server Domain Password Policy

            Default Domain Policy

            Local Group Policy

        The following GPOs were not applied because they were filtered out

        -------------------------------------------------------------------

            Small Business Server Windows Firewall

                Filtering:  Denied (WMI Filter)

                WMI Filter: PostSP2

            Small Business Server Internet Connection Firewall

                Filtering:  Denied (WMI Filter)

                WMI Filter: PreSP2

        The computer is a part of the following security groups

        -------------------------------------------------------

            BUILTIN\Administrators

            Everyone

            BUILTIN\Users

            NT AUTHORITY\NETWORK

            NT AUTHORITY\Authenticated Users

            This Organization

            NW12$

            Domain Computers

            System Mandatory Level

    USER SETTINGS

    --------------

        CN=SCS Tech,OU=SBSUsers,OU=Users,OU=DHS,DC=MYDOMAIN,DC=local

        Last time Group Policy was applied: 7/8/2015 at 11:35:23 AM

        Group Policy was applied from:      Server.MYDOMAIN.local

        Group Policy slow link threshold:   500 kbps

        Domain Name:                        MYDOMAIN

        Domain Type:                        Windows 2000

        Applied Group Policy Objects

        -----------------------------

            Default Domain Policy

        The following GPOs were not applied because they were filtered out

        -------------------------------------------------------------------

            Small Business Server Windows Firewall

                Filtering:  Denied (WMI Filter)

                WMI Filter: PostSP2

            Small Business Server Domain Password Policy

                Filtering:  Not Applied (Empty)

            Small Business Server Lockout Policy

                Filtering:  Disabled (GPO)

            Small Business Server Remote Assistance Policy

                Filtering:  Disabled (GPO)

            Local Group Policy

                Filtering:  Not Applied (Empty)

            Mount sjones home Folder

                Filtering:  Denied (Security)

            Small Business Server Internet Connection Firewall

                Filtering:  Denied (WMI Filter)

                WMI Filter: PreSP2

            Mount mmetcalf home Folder

                Filtering:  Denied (Security)

            Small Business Server Client Computer

                Filtering:  Not Applied (Empty)

        The user is a part of the following security groups

        ---------------------------------------------------

            Domain Users

            Everyone

            Offer Remote Assistance Helpers

            BUILTIN\Administrators

            BUILTIN\Users

            REMOTE INTERACTIVE LOGON

            NT AUTHORITY\INTERACTIVE

            NT AUTHORITY\Authenticated Users

            This Organization

            LOCAL

            Group Policy Creator Owners

            SMSMSE Admins

            Domain Admins

            Schema Admins

            SBS SP Admins

            Enterprise Admins

            Records Management

            SBS Report Users

            SBS Mobile Users

            Organization Management

            Denied RODC Password Replication Group

            IIS_WPG

            STS_WPG

            Offer Remote Assistance Helpers

            High Mandatory Level

    C:\Users\user>^A

    Wednesday, July 8, 2015 7:41 PM
  • restart the machine , if you haven't already
    Wednesday, July 8, 2015 7:49 PM
  • Every time I run gpudate /force on the workstation it gets rebooted. I've rebooted more than a dozen time=)
    Wednesday, July 8, 2015 7:52 PM
  • next place to look is in event viewer,  can you glean anything useful from that?

    also posta gpresult /h 

    • Edited by AlexAdkin Wednesday, July 8, 2015 7:58 PM
    Wednesday, July 8, 2015 7:57 PM
  • I'm getting this error.

    Group Policy error 1058

    The processing of Group Policy failed. Windows attempted to read the file \\mydomain.local\sysvol\mydomain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 
    a) Name Resolution/Network Connectivity to the current domain controller. 
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller). 
    c) The Distributed File System (DFS) client has been disabled.



    • Edited by 3s1k Wednesday, July 8, 2015 11:08 PM removing sensitive info
    Wednesday, July 8, 2015 9:04 PM
  • http://social.technet.microsoft.com/wiki/contents/articles/1456.event-id-1058-group-policy-preprocessing-networking.aspx start here and report back could be a number of issues
    Wednesday, July 8, 2015 9:33 PM
  • So I was able to get the software to apply but I am not sure which 2 things solved it.

    I did the following 2 things:

    1. "In a Group Policy applied to these workstations, navigate to:

    Computer Configuration > Policies > Administrative Templates > System > Group Policy

    Enable the Specify startup policy processing wait time. Set Amount of time to wait (in seconds): = 120"

    2. I logged in as a user that was not an administrator. It seems when I log in using an administrator account the GPO does apply.

    I can visually see the GPO being applied when I log in as I enabled Verbose Logging to see what is happened when I log in and out.

    • Proposed as answer by Alex LvModerator Monday, July 13, 2015 8:04 AM
    • Marked as answer by 3s1k Monday, July 13, 2015 5:14 PM
    Wednesday, July 8, 2015 10:49 PM
  • My guess number one. and would of been the next suggestion. Glad it's resolved. Can you mark as answer or helpful
    Thursday, July 9, 2015 5:50 AM