Group policy software distribution

In large networks, the msi and the mst file are distributed via system management and deployment software. The following describes the software distribution by script and by GPMC:

 

Software distribution by script

The following command (e.g. in the command prompt or by login script) starts the installation:

msiexec /i "\\servername\share\NetTaskAgent.msi" TRANSFORMS="\\servername\share\custom.mst" /qn

 

Software distribution on Windows 2000 Server

If you are still running a Windows Server 2000, then you can very easily distribute NetTaskAgent.msi by using the following steps. We recommend, however, the instructions via GPMC described below.

1.In the Start menu, click on Control Panel > "Active Directory Users and Computers".
2.With a right click on the desired computer group (OU), open the Properties dialog.
3.Select the group policy tab.
4.With New, create a new policy called "NetSTM service installation". Open it with Edit.
5.Click on Computer Configuration/software settings. Then right-click on New > package.
6.Open the file \\server name\share\NetTaskAgent.msi.
7.Click on the Advanced option.
8.Click on the changes tab . Then click on Add to add the file custom.mst.
9.Click on the tab software deployment. Select the option "uninstall application if outside the administrative domain".
10.Confirm your changes by clicking on OK.
The next time you restart the client computers in this computer group (OU), the remote agent will be installed before the users log on.

Recommended procedure for distribution by Group Policy

 

For Windows Server 2003/2008 and all current operating systems, Group Policy Management (in short: GPMC) is recommended. (Download:

http://www.microsoft.com/downloads/details.aspx?familyid=F39E9D60-7E41-4947-82F5-3330F37ADFEB&displaylang=de)

 

To be able to use group policy management on a client of an administrator, you need to have previously installed the Administration Tools Pack:

http://www.google.de/search?hl=de&&q=windows+server+Administration+Tools+Pack

 

We are sorry that the screenshots aren't in English language.

 

A) Security group set up

 

The security group includes every computer on which the remote agent is installed.

1. Click on the Start menu and then Control Panel > "Active Directory Users and Computers". Now create a new organizational unit (OU).

 

2. Give the OU a name, e.g. "softwaredistribution".

 

3. Create a new group NetSTM-service in the OU "softwaredistribution".
 

with the following parameters:
 

Click on OK.

 

4. Double-click on the newly created group (or right click -> Properties)
 

 

5. Click on Add to select the computer on which the NetSTM-service NetTaskAgent.msi will later be installed.
 

 

Hint: Click on "Object types ...", to verify that Computer is displayed as well. Click on "Advanced ..." and then click on  "Find Now" to see the available clients to see.
 

 

Then finally click OK to take over the selected computers.

 

B) Create the group policy

 

1. Start the Group Policy Management. To do this, execute GPMC.msc or click on the Control Panel or in the Start menu, on Administration > Group Policy Management.

 

2. Click with the right mouse button on "Create and link group policy object ...".
 

 
and select a meaningful name

 
Confirm your request

 

3. Now the group policy just created appears under the domain name and the "Default Domain Policy".

Remove the "Authenticated Users" group and by using Add, add the previously created security group "NetSTM-service". By doing this, the scope of this group policy is limited to the security group "NetSTM-service".

 

4. Click with the right mouse button on the group policy just created, "NetSTM-service installation". Click on "Edit ...".

 

5. In the Group Policy Object Editor, click on Computer Configuration > Software Settings > Software Installation. Now click with the right mouse button on the white field.
 

 

6. Select the MSI package with UNC path, as \\server\softwareverteilung\NetTaskAgent.msi
 

 

Select the Advanced option.

 

7. Now click the tab for Software deployment. Select the option "uninstall application if outside the administrative domain". In this way, the Net-STM-service software is automatically uninstalled from a client, as soon as the client is removed from the "NetSTM-service" security group.
 

 

8. Now click on the tab Changes. Add the custom.mst file that was modified with ORCA.
 

 
Click on OK and close the GPO Editor.

 

C) Installation of the agent on the workstations.

 

The selected clients of the security group "NetSTM-service" will now install the agent after one to three restarts.

As administrator, run command "gpupdate /Sync" on the client or change the following Group Policy on clients to immediately complete the installation policy:

 

 

 

Hint: To check from the Admin PC whether NetSTM-service is running on a client either click on Test now within Computer properties, or run the command sc \\clientname query nettaskagent. In this instance, clientname is the computer    name of the workstation on the network.

 

See also

 

Diese Seiten dürfen nur mit ausdrücklicher Genehmigung der Neuber Software GmbH kopiert werden.