locked
Force reinstall of applications deployed by software GPO after uninstall RRS feed

  • Question

  • In testing one of our first software deployments using a GPO, a rather glaring issue seems to have appeared.  It appears that if a user uninstalls an application that was deployed by GPO, the application is not reinstalled unless an update for that software is applied to the GPO.  For example:

    1.)  Application gets installed to client machine via software group policy (Computer policy, assigned install)

    2.)  User of client machine uninstalls application that was installed via GPO

    3.)  When restarted, the client machine does NOT reinstall the removed software. 

    Is this expected behavior?  Ideally, we'd like to have applications that are deployed by GPO either, a.) automatically reinstalled if they are removed or b.) prohibited from being uninstalled in the first place. 

    Any suggestions?

    Thanks!

    Aaron P.

    Monday, March 22, 2010 7:24 PM

Answers

  • Howdie!

    Am 22.03.2010 20:24, schrieb AP83:
    > 1.) Application gets installed to client machine via software group
    > policy (Computer policy, assigned install)
    >
    > 2.) User of client machine uninstalls application that was installed via GPO
    >
    > 3.) When restarted, the client machine does NOT reinstall the removed
    > software.

    > Is this expected behavior? Ideally, we'd like to have applications that
    > are deployed by GPO either, a.) automatically reinstalled if they are
    > removed or b.) prohibited from being uninstalled in the first place.
    >
    > Any suggestions?

    Yeah, that is expected behavior. The CSE behaves like that.

    Only administrators can remove Software from a computer. Make your users
    normal users on their boxes and remove their admin abilities -- that's
    how you solve it. Here's a blog posting I've setup:
    http://www.frickelsoft.net/blog/?p=103

    Cheers,
    Florian

    Microsoft MVP - Group Policy (http://www.frickelsoft.net/blog)
    • Proposed as answer by Alan Burchill Monday, March 22, 2010 10:13 PM
    • Marked as answer by Bruce-Liu Monday, March 29, 2010 9:56 AM
    Monday, March 22, 2010 9:30 PM

All replies

  • Howdie!

    Am 22.03.2010 20:24, schrieb AP83:
    > 1.) Application gets installed to client machine via software group
    > policy (Computer policy, assigned install)
    >
    > 2.) User of client machine uninstalls application that was installed via GPO
    >
    > 3.) When restarted, the client machine does NOT reinstall the removed
    > software.

    > Is this expected behavior? Ideally, we'd like to have applications that
    > are deployed by GPO either, a.) automatically reinstalled if they are
    > removed or b.) prohibited from being uninstalled in the first place.
    >
    > Any suggestions?

    Yeah, that is expected behavior. The CSE behaves like that.

    Only administrators can remove Software from a computer. Make your users
    normal users on their boxes and remove their admin abilities -- that's
    how you solve it. Here's a blog posting I've setup:
    http://www.frickelsoft.net/blog/?p=103

    Cheers,
    Florian

    Microsoft MVP - Group Policy (http://www.frickelsoft.net/blog)
    • Proposed as answer by Alan Burchill Monday, March 22, 2010 10:13 PM
    • Marked as answer by Bruce-Liu Monday, March 29, 2010 9:56 AM
    Monday, March 22, 2010 9:30 PM
  • So what do you do if an admin accidently uninstalls a program installed by GPO.  How do you get the GPO to reinstall the program?


    @ndyP
    Thursday, July 29, 2010 5:17 PM
  • Simply delete corresponding key from:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt

    More info here www.mysysadmintips.com/active-directory/210-force-applications-to-be-re-installed-by-group-policy

    Tuesday, February 7, 2012 9:14 AM
  • Thank you.  This is very helpful when tweaking GPO software installs.
    Tuesday, May 28, 2013 2:38 PM
  • Thanks, Florian.  That is very helpful, but I swear that years ago when I was learning about GPSI one of the advantages was that it would self-maintain.  I thought I remember reading that it would get reinstalled automatically if needed or even "repair" itself if program files got corrupted.  I know that you are correct because I have seen the evidence myself, but if my memory serves me well, this goes against the way it's supposed to behave, or at least the way it did in the past.
    Thursday, January 16, 2014 8:54 PM
  • Dunno where this was introduced, but I'd like to add that in Windows Server 2012 R2 there's an option to "redeploy" a package (all tasks / redeploy application). No registry hacking needed anymore.
    Tuesday, November 25, 2014 12:21 AM
  • > Dunno where this was introduced, but I'd like to add that in Windows
    > Server 2012 R2 there's an option to "redeploy" a package (all tasks /
     
    That's available since the very beginning... :)
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Tuesday, November 25, 2014 9:03 AM
  • Hi, I'm also the same issue. Can you please help anyone.
    Tuesday, January 24, 2017 3:04 PM
  • This may have worked 7 years ago but when I look in that registry location there is nothing there even though I have deployed a package via 'Assigned Application'.

    Does anyone know how to get an application deployed in this manner to reinstall for one user in a more recent AD environment.

     
    Tuesday, October 22, 2019 10:55 PM
  • OK I found it, for anyone else who is having problems with this there are a couple of caveats that you need to be aware of.

    1. If it was deployed as a User package then the path is actually HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy\Appmgmt\

    2. If this is the case you need to be logged in to the users PC but do not run Regedit as administrator (I had originally loaded regedit as administrator as I was expecting it to be in HKLM).

    Tuesday, October 22, 2019 11:17 PM
  • If someone still looking for this:

    Open your GPO wich installs the software, navigate to:

    Computerkonfiguration - Richtlinien - Softwareeinstellungen - Softwareinstallation

    Rightklick on your Software Package and Choose "Alle Aufgaben"   (All Tasks)

    Erneut Bereitstellen (Reinstall??)

    Sorry, have it in German.

    Have Fun!

    Friday, July 3, 2020 7:25 AM