Deploying an update using Active Directory

Posted on 2006-05-15
Last Modified: 2008-05-30
Is there a way where you can deploy an update of an application installed on the server to all users, through Active Directory or any other way in Windows? How do you do it? Thanks!
Question by:Bob Macpherson
    LVL 57

    Accepted Solution

    Deploying software to clients.

    In a domain environment you can deploy software via an MSI file and policy.

    How to assign software to a specific group by using a Group Policy (2K)
    HOW TO: Assign Software to a Specific Group By Using a Group Policy in the Windows Server 2003 Family

    This is fine if the application you want to deploy has an MSI file if it does not

    HOW TO: Create Third-Party Microsoft Installer Package (MSI)
    LVL 4

    Assisted Solution

    depending on the manufacturer, they may have documentation on the best way to deploy the update.  Some will actually package the program with different switches available, so that you can push it out through batch files.  Toughest part about deploying to multiple uers is that you want it to be as "silent" as possible, meaning requiring no interaction from the end users.  Otherwise, when it pops up, they'll just cancel it.  That is where these switches I'm talking about come in handy.  Hope this helps....JK
    LVL 3

    Assisted Solution

    If you are looking at deploying ServicePacks and critical updates, look at WSUS server from Microsoft.  It is free and very useful.  It essentially allows you to control anything available through Windows Update.  You can configure your workstations to look at your WSUS server for updates using Group Policy.

    If you are talking about a single patch, the easiest way is to write a script that installs the patch silently, then assign the script using Group Policy.  Almost all Microsoft patches have a silent switch.  It is ussually /q but not always. Don't forget to remove the script from the GPO once you are sure all of the workstations have recieved the patch, otherwise the patch will be installed every time a workstation reboots.

    If you are talking about upgrading an application, Jandakel2 is correct.  Do it the way the manufacturer suggests.  If they don't have a way to do it, you might be wasting your time if it is a one time deployment.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    Join & Write a Comment

    Suggested Solutions

    Article by: IanTh
    Hi Guys After a whole weekend getting wake on lan over the internet working, I thought I would share the experience. Your firewall has to have a port forward for port 9 udp to your local broadcast x.x.x.255 but if that doesnt work, do it to a …
    PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now