What You Need Before Installing Software Using GPOs

There are 3 things you will need in order to have a successful Software Installation GPO: 1. The most important thing you will need is a Microsoft installer file, called .msi you cannot use the .exe file that is on the DVD. You will need to get a packaging utility to turn that .exe file into .msi file. Many of them are available for instant download from internet. There are a few that will cost money but there are also free downloads. Here is an example from each:
MSI Studio (30 day free trial): http://www.scriptlogic.com/products/msi-studio/ EXE-to-MSI: http://juice.altiris.com/download/1355/exe-to-msi

2. The second thing you will need to create is a Shared Folder on your network for the software to live in. You need to make sure that every computer has at least "read" access to that folder and its contents. 3. And the last thing you will need is the new Group Policy Objectlinked to the appropriate Organization Unit.

How to Install Software Using GPOs

Assuming that you already have the .msi file ready, lets start with creating a shared folder on our network. 1. Browse to the location on your network, right-click and select New, then Folder.

2. Name the folder in this example we are going to call it "Software". 3. Select that folder and then click on the Share button on the menu toolbar.

4. Like I mentioned above, every machine needs to have at least read access to this folder. To do this type in Everyone and hit enter, or click on the Add button.

5. Make sure the Permission Level says Reader and then click the Share button.

6. Remember or write down the location of this shared folder. In our example the location is \\NYMEM1-2K8\Software

7. Double click on the Shared Folder you just created and once again perform the steps to create a new folder. This time name the folder with a name specific to the software you are about to install. We are going to call it "Foxit".

8. Double click on the new folder ("Foxit") and copy and paste the .msi file for the software you want to install. Our .msi is called FoxitReader23.

9. Now it is time to switch to your domain controller. We are going to switch to our DC1 server. Once there, go ahead and open up Server Manager.

10. Now you need to point to the Organizational Unit where the new Group Policy Object will reside. To start off, go ahead and expand Features, then Group Policy Management, and then yourForest. In our example it is the Globomantics.com forest. 11. Then expand Domains and then the domain in which you want to create the GPO. 12. Once you are in the correct domain, expand the Organizational Unit. In our example, we are expanding NewYorkOU. 13. Since we want the software to be installed on every single computer, we are going to create the Group Policy Object in our NYComputers Organization Unit. Go ahead and click on that OU.

14. To create a new GPO, right-click on the appropriate Organization Unit and select Create a GPO in this domain, and Link it here

15. Name your new GPO and hit OK.

16. To make sure the new GPO was created, go ahead and expand the Group Policy Objects. You should see your GPO listed there. That GPO is now being linked to our NYComputers OU.

17. Select and then right click on the GPO under the Organization Unit. Then select Edit.

18. That should open a Group Policy Management Editor. 19. Go ahead and expand Computer Configuration, then Policies, and then Software Settings. 20. Next click on and select Software Installation.

21. Right click on the right side of the Software Installation, select New and then click onPackage.

22. Browse to the location where your software .msi file exists. In our example it is NY-MEM1-2K8 Software Foxit. Once you have located it, double click on the file or select it and then click on the Open button.

23. Select Assigned and click OK.

Testing
Before you actually go and test this on one of your client machines, do not forget to run a GPO Update. To do so, open up you command prompt on your Domain Controller and type ingpupdate /force.

Once the update ran through you can go to one of your clients and restart the machine. Keep in mind that in order for the software to be installed on a computer, you will need to do a hard reboot.