Solved

Group Policy, push out a Batch file

Posted on 2007-04-09
11
2,089 Views
Last Modified: 2008-09-18
I am running Windows Server 2003 (SP1) and it is the DC.  I am also new to Active Directory and setting up Group Policys.  I have a program that I would like to install on all the PCs on the network and have a batch fie setup to run the install, it has been tested and runs fine.  (I tried doing a MSI and found the batch file is the easiest way due to how the program's install is setup.)  This batch file only needs to run one time   I haven't found instructions that I am 100% confident in on how to use Group Policy to deploy this batch file.  Can someone give me step by step instructions on how to do this?  Or is there another way I should be doing this?
0
Comment
Question by:lunchbyte
  • 6
  • 5
11 Comments
 
LVL 67

Expert Comment

by:sirbounty
ID: 18875583
Setup your batch file like this:

@echo off
If exist c:\Program.flg goto :eof
::your code to call the install
echo Installed > c:\Program.flg

The first time it's called, it'll skip over the first line (excluding the @echo off) - and will call your install routine.
Then, it'll write a flag file to the root of c: - the next time it runs, it'll check for that flag file before proceeding - if it exists, it'll just exit the script.
0
 
LVL 5

Author Comment

by:lunchbyte
ID: 18875858
Thanks for the code to add the flag file. Very helpful.  Just need the instructions on adding it to Group Policy and I'm set.  Thanks again.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18875877
Right-click your domain, choose properties.
You'll want to click Edit there
The scripts are located under User Configuration, Windows Settings, Scripts, Logon Scripts...drop a reference to your batch file there.
0
 
LVL 5

Author Comment

by:lunchbyte
ID: 18876071
I guess this is where I'm getting tripped up.  When I right click on my domain in Group Policy Management then properties I have two tabs, General & Manage by.  I do not have an option to click on Edit under either tab.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18876088
Open up Active Directory Users & Computers (Start->Run->Dsa.msc if you have the admin tools installed or are on a DC).
Now, right-click your domain, and choose properties
Under the Group Policy tab, do you have any GPOs listed?
You can choose to edit one there, or edit the default domain policy...
0
 
LVL 5

Author Comment

by:lunchbyte
ID: 18876332
Under Active Directory User & computers when I get to the Group Policy tab it says the Group Policy snap-in has been installed, so the tab is no longer used.  From there I have the open button which opens Group Policy Management.

By the way, I'll max out the points on this.  Thanks for the help.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18876394
Hmm - I'm not really sure on that...I'm not the group policy-guru 'round here...perhaps another expert will be able to guide you on that.  I've always used Aduc when modifying my polices...
0
 
LVL 5

Author Comment

by:lunchbyte
ID: 18877175
I think I found it, is the window I need to be in called Group Policy Object Editor?  If it is, all I did was right click on 'my default policy' and clicked on edit.  From there I found what you posted in your second comment.

This seem obvious but, if I want the script to run on each computer I would put it under computer configuration, correct?  What I'm installing is a software inventory program and want to know what is on each system and really doesn't matter who the user is.
0
 
LVL 67

Accepted Solution

by:
sirbounty earned 500 total points
ID: 18877186
Depends...computer config runs outside of the user's contect - useful for when your users won't have rights to install software...(known as 'startup' scripts) - otherwise, logon scripts are under user config...
0
 
LVL 5

Author Comment

by:lunchbyte
ID: 18877915
Thanks a ton for the help.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18877928
Glad I could assist you.  Thanx for the grade! :^)
0

Join & Write a Comment

Let’s list some of the technologies that enable smooth teleworking. 
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now