Link to home
Start Free TrialLog in
Avatar of Kasper Katzmann
Kasper KatzmannFlag for Denmark

asked on

MSI install via GPO

I have created an MSI package that I want to deploy using Group Policy.

The policy have been created under User Configuration and I have linked the policy to the appropriate OU containing users.

When I logon with an account in that OU it seems like the package are installed. But there are no shortcuts or programfiles at all.

The GPO are "Assigned" and set to "Install this application at logon"

The MSI package are created with Wise Studio Package with SetupCapture. It works fine when I install the MSI manually.

How can it be?
Avatar of Computron
Computron

Hi Kasper_K,

how do you know the program is installed?

Cheers!
Also, ck this article...

Packages Assigned to Computers with Group Policy Are Not Installed

http://support.microsoft.com/kb/278472/
Avatar of Kasper Katzmann

ASKER

Jay Jay70:
I only see the information that says it is being installed during upstart. But nothing is there when the i chack.

Computron:
The shortcuts are already "Advertised" but something is clearly missing :-(

Fatal_Exception:
The package are assigned to users, not computers.
My bad...

Not sure if this will help, but you can enable verbose msi logging using another GPO:

Enable Windows Installer logging with Group Policies
You can enable logging with Group Policies by editing the appropriate OU or Directory Group Policy. Under Group Policy, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then select Windows Installer.

Double-click Logging, and then click Enabled. In the Logging box, enter the options you want to log. The log file, Msi.log, appears in the Temp folder of the system volume.

For more information about MSI logging, please see Windows Help. To do so, search using the phrase "msi logging" and select "Managing options for computers through Group Policy".
mm logging will be good

also, does the software error at all or is just silently installed and thats it - anything in the event logs?
Hmmm....

I don't seem to get any log-file. I've tryed to log off and on (even after a gpupdate /force) and it still looks like it is being installed during startup but still no shortcuts of any kind and no log-file as well.

I enabled the logging in the GPO with the installation and I enabled everything possible.

Am I completely wrong when I say that the temp folder is "C:\windows\temp" ?
i personally prefer the c:\temp but it doesnt make a diff as long as you have write permissions to the windows folder....

maybe you need to have a look at the permissions on the directory you are trying to write to
ASKER CERTIFIED SOLUTION
Avatar of McKnife
McKnife
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I think I have located the problem, but I can't figure out why it is a problem :-(

It seems like the installation job can't find the file. I am 100% sure the file is at the given place.

The .msi file is on a share witch I locate with the following adress: \\server\share$\folder\file.msi

Is there a problem with the way I adress the file?
Have you read and checked Fatal exceptions http://support.microsoft.com/kb/278472/ ?
Yes I have. And just to be sure and for testing purpose, I have granted full control to the Authenticated Users group.
If you test, you would grant acces to everyone, not authenticated users. Maybe the group "domain computers" is missing, that's what the article says. MSIs placed in the computer section are installed using machine rights, i.e. the accounts aren't "authenticated users" but mypc$ for example, all members of "domain computers".
But the MSI are placed in the user section, so shouldn't it be Auth. users?
oops, you said that in your first posting, sorry. Why don't you grant full rights to everyone for a test, so we can rule that out?
If you are running GPMC, you might want to check the GPO, and make sure your OU and users have the correct permissions also..  regardless, you need to make sure your users have Read and Apply permissions in that OU and GPO..

Also, I have never deployed using a hidden share, so you might want to test with one that is not hidden..  (should not make a difference, but..)

and run down this article to make sure you have followed the correct procedures..

http://support.microsoft.com/kb/816102
It helped looking in the log.

I changed the "share$" to "share" and thats the only difference I can see. But now it works and I am happy happy happy :-))

Is it possible to split the points? If it is I would have given Fatal_Exception a share as well.

Thanks to you all for your time and help.


Kasper K from Denamark (the country that doesn't apologize)
hmm..  yes, you should have split the points...  you can post a question in the support area, and a 'mod' will come in and make the adjustment for you...

https://www.experts-exchange.com/Community_Support/

Just be sure to post a link to this thread...

and, glad we could help!

FE
Thanks!  and best to all!

(Thank you too, Netminder!)

FE