none
Deploying office through group policy

    Question

  • Hi people,

    English is not my mother language so i'll hope you'll understand me.

    I have a school project. Deploying office through group policy worked. But now my teacher has given me a command to give all OU's a different OFFICE packet when they logged in. So.. it will change the current installation when a different user from a different OU logged in. I'm out of options. Please can anybody help me:(:(

    Tuesday, March 24, 2015 7:57 PM

Answers

  • Hello

    tip:
    1, create msp package and gpo https://technet.microsoft.com/en-us/library/cc179196%28v=office.14%29.aspx
    2, install full office to all computer and create  group for teacher and add access denied to all office .exe except excel.exe

    sorry if I misunderstand again :(

    sorry my english

    Wednesday, March 25, 2015 5:34 AM
  • No you don't misunderstand :p  My teacher first did it wit Office 2003 and know i must do it in office2010.. and i also thought it was a stupid idea.. But who am i... i have not much knowledge in IT.. i'm still learning.

    But i have 2 options

    To confince him that this is not a good idea... (and i dont know with wich argument)

    or find a way to do this... 


    Hmm, so, I think that kind of crazy was possible with very old versions of Office, which could be "advertised" via GPO to achieve per-user scenarios, but Office2007 and later versions, don't provide such different per-user options as part of setup.

    Office2007 and later, uses the MSPfile etc for customization, and that is per-machine (common to all users of that machine).

    You might be able to achieve something similar, by using AppLocker (e.g. AppLocker rules which deny excel.exe to be executed by GRP_Students).

    But this doesn't address the matter nicely, because the Students can see the Excel shortcut/icon/program, but are forbidden to execute it.


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

    Wednesday, March 25, 2015 9:10 AM

All replies

  • So.. it will change the current installation when a different user from a different OU logged in. I'm out of options. Please can anybody help me:(:(

    Hi,

    if I understand correctly, whenever a user logs in, the current status of Office would need to be detected, then, consider which user is currently logging on, examine which Office configuration is needed for that user, then uninstall any existing Office, and install the necessary Office/configuration ?

    This sounds a crazy/bad idea, I never heard such a requirement in 25 years of IT !

    Do I misunderstand ?


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

    Tuesday, March 24, 2015 8:40 PM
  • No you don't misunderstand :p  My teacher first did it wit Office 2003 and know i must do it in office2010.. and i also thought it was a stupid idea.. But who am i... i have not much knowledge in IT.. i'm still learning.

    But i have 2 options

    To confince him that this is not a good idea... (and i dont know with wich argument)

    or find a way to do this... 


    Tuesday, March 24, 2015 8:50 PM
  • Hello

    sorry if I misunderstand.
    so let's try: install all office to pc https://support.microsoft.com/en-us/kb/2121447 install office 2003 and office.... and create gpo to ou and when user login to desktop add desktop that office icon what need...
    or use app-v... or terminal server.. or you are student and teacher add homework? :)
    but user start login and waiting to install office... 


    sorry my english

    Tuesday, March 24, 2015 9:49 PM
  • Ehm... I dont understand........ 

    I only need office 2010. This i deployed through a group policy... and it worked. But that GP is for 1 OU. I need another office packet with only word or excel through a group policay linked to another OU. Soo..


    Situation:

    OU=student only office

    OU=teacher= only office excel 

    when i loggin with user from OU teacher it will only install office and excel(worked) but when i loggin with user from OU student then excel needs to be removed en there must only be Office...

    Sorry for my bad english...

    Tuesday, March 24, 2015 10:19 PM
  • Hello

    tip:
    1, create msp package and gpo https://technet.microsoft.com/en-us/library/cc179196%28v=office.14%29.aspx
    2, install full office to all computer and create  group for teacher and add access denied to all office .exe except excel.exe

    sorry if I misunderstand again :(

    sorry my english

    Wednesday, March 25, 2015 5:34 AM
  • Yes but ive been searching on the intenret.. and i cant find how to deny acces on software for OU... 
    Wednesday, March 25, 2015 5:57 AM
  • No you don't misunderstand :p  My teacher first did it wit Office 2003 and know i must do it in office2010.. and i also thought it was a stupid idea.. But who am i... i have not much knowledge in IT.. i'm still learning.

    But i have 2 options

    To confince him that this is not a good idea... (and i dont know with wich argument)

    or find a way to do this... 


    Hmm, so, I think that kind of crazy was possible with very old versions of Office, which could be "advertised" via GPO to achieve per-user scenarios, but Office2007 and later versions, don't provide such different per-user options as part of setup.

    Office2007 and later, uses the MSPfile etc for customization, and that is per-machine (common to all users of that machine).

    You might be able to achieve something similar, by using AppLocker (e.g. AppLocker rules which deny excel.exe to be executed by GRP_Students).

    But this doesn't address the matter nicely, because the Students can see the Excel shortcut/icon/program, but are forbidden to execute it.


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

    Wednesday, March 25, 2015 9:10 AM
  • Hi,

    How's it going now? Are you able to deploy the office to different groups now?

    If you have any concern, feel free to post back.

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, March 27, 2015 7:20 AM
    Moderator