none
Software Deployment Assigned application installation behavior question

    Question

  • Hello!

    We have a GPO to deploy the IBM Tivoli agent that is working well however I've been asked to clarify how the policy works in the event some uninstalls the software.  We are using the "Assigned" deployment type to several OU's that contain computer objects only.  The security filtering is the default "Authenticated Users".  We have the advanced option set to "make this 32-bt X86 application available to Win64 computers). Here's what I'm assuming happens with our deployment method:

    - after a reboot the software package will be installed

    - If the package is already installed nothing should happen (i.e. no unnecessary re-install)

    - If someone uninstalls the package after a reboot the software package will be re-installed

    - If someone modifies the install after a reboot the software package will be re-installed back to defaults

    Are these correct assumptions?  Thanks!

    Monday, April 20, 2015 3:02 PM

Answers

  • 1. Depends on how your environment is setup. If you have always wait for the network at startup and logon enabled - one reboot is all that is required for the software to install. If you don't, it may take two restarts. This is due to when the machine last did a gpupdate.

    2. Correct.

    3. If a gpupdate /force is ran or the GPO is changed, the software should reinstall. 

    4. Only if a repair is triggered by the MSI. 


    If my answer helped you, check out my blog: Deploy Happiness

    Monday, April 20, 2015 3:13 PM
  • > - after a reboot the software package will be installed
     
    Yes.
     
    > - If the package is already installed nothing should happen (i.e. no
    > unnecessary re-install)
     
    Yes. To be precise: If the application advertisement that contains your
    package has been processed successfully before. This small difference is
    important to know for your next question. And to add a comment on this:
     
    If the software is already installed, but NOT through GPO, it will be
    reinstalled.
     
    > - If someone uninstalls the package after a reboot the software package
    > will be re-installed
     
    No. Absolutely not, because the application advertisement package still
    has a state of "applied successfully".
     
    > - If someone modifies the install after a reboot the software package
    > will be re-installed back to defaults
     
    Again no.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Monday, April 20, 2015 3:45 PM

All replies

  • 1. Depends on how your environment is setup. If you have always wait for the network at startup and logon enabled - one reboot is all that is required for the software to install. If you don't, it may take two restarts. This is due to when the machine last did a gpupdate.

    2. Correct.

    3. If a gpupdate /force is ran or the GPO is changed, the software should reinstall. 

    4. Only if a repair is triggered by the MSI. 


    If my answer helped you, check out my blog: Deploy Happiness

    Monday, April 20, 2015 3:13 PM
  • > - after a reboot the software package will be installed
     
    Yes.
     
    > - If the package is already installed nothing should happen (i.e. no
    > unnecessary re-install)
     
    Yes. To be precise: If the application advertisement that contains your
    package has been processed successfully before. This small difference is
    important to know for your next question. And to add a comment on this:
     
    If the software is already installed, but NOT through GPO, it will be
    reinstalled.
     
    > - If someone uninstalls the package after a reboot the software package
    > will be re-installed
     
    No. Absolutely not, because the application advertisement package still
    has a state of "applied successfully".
     
    > - If someone modifies the install after a reboot the software package
    > will be re-installed back to defaults
     
    Again no.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Monday, April 20, 2015 3:45 PM
  • So this seems to line up with what I’m seeing. GPO with software install set to "assigned" linked to a computer object OU. Software was installed successfully to the computer once i moved the object to the OU. Once I removed software from control panel after several restarts still no software re-install.<o:p></o:p>

    To re-phrase, what you're saying is that during the initial install it was advertised successful to AD so it won't attempt to push it out again even if it's been manually removed. Outside of uninstalling via the GPO, is there a way to change that advertisement so that it gets re-installed?  I may be asking more that AD is capable of.<o:p></o:p>

    The end goal of all this is to "guarantee" that all of our windows end points are being managed by Tivoli so this is just one of the ways we'll be doing this.


    Tuesday, April 21, 2015 7:48 PM
  • > To re-phrase, what you're saying is that during the initial install it
    > was advertised successful to AD so it won't attempt to push it out again
    > even if it's been manually removed. Outside of uninstalling via the GPO,
    > is there a way to change that advertisement so that it gets
    > re-installed?
     
    That's correct. To redeploy, right click the MSI - all tasks - redeploy
    application. This will update the Advertisement package so it gets
    reinstalled.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Wednesday, April 22, 2015 3:31 PM