Creating a GPO software distribution

Article:HOWTO81180  |  Created: 2012-10-24  |  Updated: 2013-10-07  |  Article URL http://www.symantec.com/docs/HOWTO81180
Article Type
How To


Subject


Creating a GPO software distribution

The procedure assumes that you have installed Microsoft's Group Policy Management Console with Service Pack 1 or later. The procedure also assumes that you have computers in the Computers group or some other group to which you want to install client software. You can drag these computers into a new group that you create.

Note:

If User Account Control (UAC) is enabled, you must enable Always install with elevated privileges for Computer Configuration and User Configuration to install Symantec client software with a GPO. You set these options to allow all Windows users to install Symantec client software.

See Installing clients with Active Directory Group Policy Object.

To create a GPO package

  1. On the Windows Taskbar, click Start > Programs > Administrative Tools > Group Policy Management.

  2. In the Active Directory Users and Computers window, in the console tree, right-click the domain, and then click Active Directory Users and Computers.

  3. In the Active Directory Users and Computers window, right-click the Domain, and then click New > Organizational Unit.

  4. In the New Object dialog box, in the Name box, type a name for your organizational unit, and then click OK.

  5. In the Active Directory Users and Computers window, click File > Exit.

  6. In the Group Policy Management window, in the console tree, right-click the organizational unit that you created, and then click Create and Link a GPO Here.

    You may need to refresh the domain to see your new organizational unit.

  7. In the New GPO dialog box, in the Name box, type a name for your GPO, and then click OK.

  8. In the right pane, right-click that GPO that you created, and then click Edit.

  9. In the Group Policy Object Editor window, in the left pane, under the Computer Configuration, expand Software Settings.

  10. Right-click Software installation, and then click New > Package.

  11. In the Open dialog box, type the Universal Naming Convention (UNC) path that points to and contains the MSI package.

    Use the format as shown in the following example:

    \\server name\SharedDir\Sep.msi

  12. Click Open.

  13. In the Deploy Software dialog box, click Assigned, and then click OK.

    The package appears in the right pane of the Group Policy Object Editor window if you select Software Installation.

To configure templates for the package

  1. In the Group Policy Object Editor window, in the console tree, display and enable the following settings:

    • Computer Configuration > Administrative Templates > System > Logon > Always wait for the network at computer startup and logon

    • Computer Configuration > Administrative Templates > System > Group Policy > Software Installation policy processing

    • User Configuration > Administrative Templates > Windows Components > Windows Installer > Always Install with elevated privileges

  2. Close the Group Policy Object Editor window.

  3. In the Group Policy Management window, in the left pane, right-click the GPO that you edited, and then click Enforced.

  4. In the right pane, under Security Filtering, click Add.

  5. In the dialog box, under Enter the object name to select, type Domain Computers, and then click OK.


Legacy ID



v8527941_v81626096


Article URL http://www.symantec.com/docs/HOWTO81180


Terms of use for this information are found in Legal Notices