Difference between revisions of "Active Directory/Documentation/Assigning SW"

From WolfTech
Jump to navigation Jump to search
 
 
(One intermediate revision by one other user not shown)
Line 3: Line 3:
 
#* The group should be located in the <b><DEPT>-Software</b> OU under the <b>Software Packages</b> OU.
 
#* The group should be located in the <b><DEPT>-Software</b> OU under the <b>Software Packages</b> OU.
 
#* Group name should take the format:  <b>SW-<DEPT>-<VENDOR>-<TITLE>-<VERSION>-<DATE PUBLISHED></b>
 
#* Group name should take the format:  <b>SW-<DEPT>-<VENDOR>-<TITLE>-<VERSION>-<DATE PUBLISHED></b>
 +
#* Make the group a member of the <b><DEPT>-Software</b> group.
 
# Create a group policy object.
 
# Create a group policy object.
 
#* Create the group policy object at the root of your departmental OU.
 
#* Create the group policy object at the root of your departmental OU.
Line 8: Line 9:
 
#* Configure security filtering for the group created in step 1.  Remove <b>Authenticated Users</b>.
 
#* Configure security filtering for the group created in step 1.  Remove <b>Authenticated Users</b>.
 
#* Disable user configuration settings.
 
#* Disable user configuration settings.
 +
#** Right click on the GPO under your root OU and click Edit.
 +
#** Right click on the GPO when the Group Policy windows opens and click Properties.
 +
#** Check Disable User Configuration Settings.
 
# Edit group policy object.
 
# Edit group policy object.
 
#* Right click the group policy and choose <b>Edit</b>.
 
#* Right click the group policy and choose <b>Edit</b>.
Line 16: Line 20:
 
#* In the <b>Deployment</b> tab, check <b>Uninstall this application when it falls out of scope of management</b>.
 
#* In the <b>Deployment</b> tab, check <b>Uninstall this application when it falls out of scope of management</b>.
 
#* If your application has an MST, in the <b>Modifications</b> tab, click <b>Add</b>, Choose your MST, and click <b>Open</b>.
 
#* If your application has an MST, in the <b>Modifications</b> tab, click <b>Add</b>, Choose your MST, and click <b>Open</b>.
 +
# To assign the software to a computer, make the computer a member of the group in step 1.

Latest revision as of 14:38, 30 April 2008

  1. Create a deployment group.
    • It is good practice to use a Domain Local group.
    • The group should be located in the <DEPT>-Software OU under the Software Packages OU.
    • Group name should take the format: SW-<DEPT>-<VENDOR>-<TITLE>-<VERSION>-<DATE PUBLISHED>
    • Make the group a member of the <DEPT>-Software group.
  2. Create a group policy object.
    • Create the group policy object at the root of your departmental OU.
    • The name should be identical the the group in step 1.
    • Configure security filtering for the group created in step 1. Remove Authenticated Users.
    • Disable user configuration settings.
      • Right click on the GPO under your root OU and click Edit.
      • Right click on the GPO when the Group Policy windows opens and click Properties.
      • Check Disable User Configuration Settings.
  3. Edit group policy object.
    • Right click the group policy and choose Edit.
    • Navigate to Computer Settings\Software installation.
    • Right click Software installation and choose New > Package.
    • Browse to the location of the MSI, select it, and click Open.
    • Choose Advanced and click OK.
    • In the Deployment tab, check Uninstall this application when it falls out of scope of management.
    • If your application has an MST, in the Modifications tab, click Add, Choose your MST, and click Open.
  4. To assign the software to a computer, make the computer a member of the group in step 1.