none
Movie Maker GPO

    Question

  • Server 2012 R2 and we are education. We need to deploy movie maker to a computer lab where no user has admin rights except the local admin and domain admin(s). I have the live essentials movie maker msi, created a distribution point and made the GPO. I login as a domain admin and movie maker does not get installed. I have run gpupdate /force on the server and the client. The GPO is assigned and checked to install at logon time. The GPO is also configured in user configuration->policies->software settings. The security group assigned to this GPO has computers not users assigned to it. Should this be computer configuration instead of user configuration?
    Wednesday, September 14, 2016 11:40 PM

Answers

  • Hi,

    Thanks for your post.

    According to my research, the Software Installation extension of Group Policy is used to centrally manage software distribution. You can assign and publish software for groups of users and computers using this extension.

    MSI: Application Deployment via MSI / GPO

    https://blogs.technet.microsoft.com/askperf/2009/04/10/msi-application-deployment-via-msi-gpo/

    How to Install an MSI File Through Group Policy

    http://smallbusiness.chron.com/install-msi-file-through-group-policy-47495.html

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Besides, we recommend specifying the following settings in the GPO (Group Policy) to ensure that the MSI distribution process is smooth and seamless:

    Computer Configuration > Policies > Administrative Templates > Windows Components> Window Installer > Always install with elevated privileges

    Computer Configuration > Policies > Administrative Templates > System > Logon > Always wait for the network at computer startup and logon

    Computer Configuration > Policies > Administrative Templates > System > Group Policy > Software Installation policy processing (check "Allow processing across a slow network connection")

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, September 15, 2016 1:21 AM
    Moderator
  • > time. The GPO is also configured in user
    > configuration->policies->software settings. The security group assigned
    > to this GPO has computers not users assigned to it. Should this be
    > computer configuration instead of user configuration?
     
    If you assign the MSI in user configuration, the GPO must apply to the
    user. So the user (or user group) must be entered in the security filtering.
     
    If you assign it in computer configuration (which I recommend), the GPO
    must apply to the computer.
     
    Thursday, September 15, 2016 8:37 AM

All replies

  • Hi,

    Thanks for your post.

    According to my research, the Software Installation extension of Group Policy is used to centrally manage software distribution. You can assign and publish software for groups of users and computers using this extension.

    MSI: Application Deployment via MSI / GPO

    https://blogs.technet.microsoft.com/askperf/2009/04/10/msi-application-deployment-via-msi-gpo/

    How to Install an MSI File Through Group Policy

    http://smallbusiness.chron.com/install-msi-file-through-group-policy-47495.html

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Besides, we recommend specifying the following settings in the GPO (Group Policy) to ensure that the MSI distribution process is smooth and seamless:

    Computer Configuration > Policies > Administrative Templates > Windows Components> Window Installer > Always install with elevated privileges

    Computer Configuration > Policies > Administrative Templates > System > Logon > Always wait for the network at computer startup and logon

    Computer Configuration > Policies > Administrative Templates > System > Group Policy > Software Installation policy processing (check "Allow processing across a slow network connection")

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, September 15, 2016 1:21 AM
    Moderator
  • > time. The GPO is also configured in user
    > configuration->policies->software settings. The security group assigned
    > to this GPO has computers not users assigned to it. Should this be
    > computer configuration instead of user configuration?
     
    If you assign the MSI in user configuration, the GPO must apply to the
    user. So the user (or user group) must be entered in the security filtering.
     
    If you assign it in computer configuration (which I recommend), the GPO
    must apply to the computer.
     
    Thursday, September 15, 2016 8:37 AM
  • Hi,

    Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, September 26, 2016 3:07 AM
    Moderator