Difference between revisions of "Active Directory/Documentation/Assigning SW"
Jump to navigation
Jump to search
| (One intermediate revision by one other user not shown) | |||
| Line 3: | Line 3: | ||
#* The group should be located in the <b><DEPT>-Software</b> OU under the <b>Software Packages</b> OU. | #* The group should be located in the <b><DEPT>-Software</b> OU under the <b>Software Packages</b> OU. | ||
#* Group name should take the format: <b>SW-<DEPT>-<VENDOR>-<TITLE>-<VERSION>-<DATE PUBLISHED></b> | #* Group name should take the format: <b>SW-<DEPT>-<VENDOR>-<TITLE>-<VERSION>-<DATE PUBLISHED></b> | ||
| + | #* Make the group a member of the <b><DEPT>-Software</b> group. | ||
# Create a group policy object. | # Create a group policy object. | ||
#* Create the group policy object at the root of your departmental OU. | #* Create the group policy object at the root of your departmental OU. | ||
| Line 8: | Line 9: | ||
#* Configure security filtering for the group created in step 1. Remove <b>Authenticated Users</b>. | #* Configure security filtering for the group created in step 1. Remove <b>Authenticated Users</b>. | ||
#* Disable user configuration settings. | #* Disable user configuration settings. | ||
| + | #** Right click on the GPO under your root OU and click Edit. | ||
| + | #** Right click on the GPO when the Group Policy windows opens and click Properties. | ||
| + | #** Check Disable User Configuration Settings. | ||
# Edit group policy object. | # Edit group policy object. | ||
#* Right click the group policy and choose <b>Edit</b>. | #* Right click the group policy and choose <b>Edit</b>. | ||
| Line 16: | Line 20: | ||
#* In the <b>Deployment</b> tab, check <b>Uninstall this application when it falls out of scope of management</b>. | #* In the <b>Deployment</b> tab, check <b>Uninstall this application when it falls out of scope of management</b>. | ||
#* If your application has an MST, in the <b>Modifications</b> tab, click <b>Add</b>, Choose your MST, and click <b>Open</b>. | #* If your application has an MST, in the <b>Modifications</b> tab, click <b>Add</b>, Choose your MST, and click <b>Open</b>. | ||
| + | # To assign the software to a computer, make the computer a member of the group in step 1. | ||
Latest revision as of 13:38, 30 April 2008
- Create a deployment group.
- It is good practice to use a Domain Local group.
- The group should be located in the <DEPT>-Software OU under the Software Packages OU.
- Group name should take the format: SW-<DEPT>-<VENDOR>-<TITLE>-<VERSION>-<DATE PUBLISHED>
- Make the group a member of the <DEPT>-Software group.
- Create a group policy object.
- Create the group policy object at the root of your departmental OU.
- The name should be identical the the group in step 1.
- Configure security filtering for the group created in step 1. Remove Authenticated Users.
- Disable user configuration settings.
- Right click on the GPO under your root OU and click Edit.
- Right click on the GPO when the Group Policy windows opens and click Properties.
- Check Disable User Configuration Settings.
- Edit group policy object.
- Right click the group policy and choose Edit.
- Navigate to Computer Settings\Software installation.
- Right click Software installation and choose New > Package.
- Browse to the location of the MSI, select it, and click Open.
- Choose Advanced and click OK.
- In the Deployment tab, check Uninstall this application when it falls out of scope of management.
- If your application has an MST, in the Modifications tab, click Add, Choose your MST, and click Open.
- To assign the software to a computer, make the computer a member of the group in step 1.