locked
GPO Software Installation issue RRS feed

  • Question

  • I was unable to deploy a Software using GPO Software installation method.  I found in the event Viewer that the system didn't have access to the Software package. But i had given 'Domain User' read permission to the software folder. 

    The software installed successfully when i gave 'Everyone' Read permission to the folder. I am sure the 'ISO' would not recommend giving 'Everyone' read permissions to the folder. 

    Please let me know if there is a alternate solution for this. Thanks in Advance.

    - Sandeep Kota


    Regards, Sandeep Kota

    Wednesday, June 13, 2012 8:19 PM

Answers

  • I had this problem and it is rather frustrating.  To me it sounds like you are giving the wrong thing access to the MSI file.

    I am assuming you are doing a software Deployment using Computer Configuration of group policy.  IF I remember correct this uses the client computers "System" account, or it could be "Local Computer".  Anyways this account is a member of "Domain Computers"  So you need to give "Domain Computers" group permission to the software share.

    • Marked as answer by Kevin Remde Saturday, December 1, 2012 1:35 PM
    Friday, October 12, 2012 9:41 PM

All replies

  • u need domain administrator rights to deploy that.

    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    Microsoft Geeks

    • Proposed as answer by Soh.M Friday, June 15, 2012 3:31 AM
    Friday, June 15, 2012 3:31 AM
  • Sorry, I don't understand.<o:p></o:p>

    I have the MSI files stored in the Files server and GPO is configured in the Domain Controller using Enterprise Admin Credentials.
    The MSi is deployed even before i login to the operating system on CLT+ALT+<st1:place w:st="on"><st1:state w:st="on">DEL</st1:state></st1:place> screen, so i am not sure when you mean to enter the Domain Administrator credentials.<o:p></o:p>

    Kindly advise?<o:p></o:p>

    - Sandeep Kota<o:p></o:p>


    Regards, Sandeep Kota

    Friday, June 15, 2012 3:38 PM
  • I had this problem and it is rather frustrating.  To me it sounds like you are giving the wrong thing access to the MSI file.

    I am assuming you are doing a software Deployment using Computer Configuration of group policy.  IF I remember correct this uses the client computers "System" account, or it could be "Local Computer".  Anyways this account is a member of "Domain Computers"  So you need to give "Domain Computers" group permission to the software share.

    • Marked as answer by Kevin Remde Saturday, December 1, 2012 1:35 PM
    Friday, October 12, 2012 9:41 PM