We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now

x

MSI install via GPO

Kasper Katzmann
on
Medium Priority
1,596 Views
Last Modified: 2012-05-05
I have created an MSI package that I want to deploy using Group Policy.

The policy have been created under User Configuration and I have linked the policy to the appropriate OU containing users.

When I logon with an account in that OU it seems like the package are installed. But there are no shortcuts or programfiles at all.

The GPO are "Assigned" and set to "Install this application at logon"

The MSI package are created with Wise Studio Package with SetupCapture. It works fine when I install the MSI manually.

How can it be?
Comment
Watch Question

CERTIFIED EXPERT
Top Expert 2006

Commented:
Hi Kasper_K,

how do you know the program is installed?

Cheers!
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
Also, ck this article...

Packages Assigned to Computers with Group Policy Are Not Installed

http://support.microsoft.com/kb/278472/
Kasper KatzmannSeniorkonsulent

Author

Commented:
Jay Jay70:
I only see the information that says it is being installed during upstart. But nothing is there when the i chack.

Computron:
The shortcuts are already "Advertised" but something is clearly missing :-(

Fatal_Exception:
The package are assigned to users, not computers.
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
My bad...

Not sure if this will help, but you can enable verbose msi logging using another GPO:

Enable Windows Installer logging with Group Policies
You can enable logging with Group Policies by editing the appropriate OU or Directory Group Policy. Under Group Policy, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then select Windows Installer.

Double-click Logging, and then click Enabled. In the Logging box, enter the options you want to log. The log file, Msi.log, appears in the Temp folder of the system volume.

For more information about MSI logging, please see Windows Help. To do so, search using the phrase "msi logging" and select "Managing options for computers through Group Policy".
CERTIFIED EXPERT
Top Expert 2006

Commented:
mm logging will be good

also, does the software error at all or is just silently installed and thats it - anything in the event logs?
Kasper KatzmannSeniorkonsulent

Author

Commented:
Hmmm....

I don't seem to get any log-file. I've tryed to log off and on (even after a gpupdate /force) and it still looks like it is being installed during startup but still no shortcuts of any kind and no log-file as well.

I enabled the logging in the GPO with the installation and I enabled everything possible.

Am I completely wrong when I say that the temp folder is "C:\windows\temp" ?
CERTIFIED EXPERT
Top Expert 2006

Commented:
i personally prefer the c:\temp but it doesnt make a diff as long as you have write permissions to the windows folder....

maybe you need to have a look at the permissions on the directory you are trying to write to
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
Kasper, the temp folder may differ, use %temp% in your adress bar to find it.
Also, please supply the eventlog entries. In the application log, there will be some entries called "application management".
Call eventvwr

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Fatal_ExceptionSystems Engineer
Top Expert 2005
Commented:
Probably would have helped if I had located the link to the msi log KB article:

http://support.microsoft.com/?kbid=223300

Windows Installer can use logging to help assist in troubleshooting issues with installing software packages. This logging is enabled by adding keys and values to the registry. After the entries have been added and enabled, you can retry the problem installation and Windows Installer will track the progress and post it to the Temp folder. The new log's file name is random, but begins with the letters "Msi" and end with a .log extension. To locate the Temp folder location, type the following line at a command prompt:
cd %temp%
Kasper KatzmannSeniorkonsulent

Author

Commented:
I think I have located the problem, but I can't figure out why it is a problem :-(

It seems like the installation job can't find the file. I am 100% sure the file is at the given place.

The .msi file is on a share witch I locate with the following adress: \\server\share$\folder\file.msi

Is there a problem with the way I adress the file?
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
Have you read and checked Fatal exceptions http://support.microsoft.com/kb/278472/ ?
Kasper KatzmannSeniorkonsulent

Author

Commented:
Yes I have. And just to be sure and for testing purpose, I have granted full control to the Authenticated Users group.
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
If you test, you would grant acces to everyone, not authenticated users. Maybe the group "domain computers" is missing, that's what the article says. MSIs placed in the computer section are installed using machine rights, i.e. the accounts aren't "authenticated users" but mypc$ for example, all members of "domain computers".
Kasper KatzmannSeniorkonsulent

Author

Commented:
But the MSI are placed in the user section, so shouldn't it be Auth. users?
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
oops, you said that in your first posting, sorry. Why don't you grant full rights to everyone for a test, so we can rule that out?
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
If you are running GPMC, you might want to check the GPO, and make sure your OU and users have the correct permissions also..  regardless, you need to make sure your users have Read and Apply permissions in that OU and GPO..

Also, I have never deployed using a hidden share, so you might want to test with one that is not hidden..  (should not make a difference, but..)

and run down this article to make sure you have followed the correct procedures..

http://support.microsoft.com/kb/816102
Kasper KatzmannSeniorkonsulent

Author

Commented:
It helped looking in the log.

I changed the "share$" to "share" and thats the only difference I can see. But now it works and I am happy happy happy :-))

Is it possible to split the points? If it is I would have given Fatal_Exception a share as well.

Thanks to you all for your time and help.


Kasper K from Denamark (the country that doesn't apologize)
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
hmm..  yes, you should have split the points...  you can post a question in the support area, and a 'mod' will come in and make the adjustment for you...

http://www.experts-exchange.com/Community_Support/

Just be sure to post a link to this thread...

and, glad we could help!

FE
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
Thanks!  and best to all!

(Thank you too, Netminder!)

FE
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.