Solved

Denied GPO

Posted on 2007-11-28
1
1,539 Views
Last Modified: 2013-11-13
I'm trying to create a GPO to deploy the Office 2007 compatibility pack to computers on the domain.  To test it right now, I've created a temporary OU and put one test computer in it.  I then created the share, put the files in it and applied the everyone group with read access and domain admins full control.  I used RDP to connect to the test computer and verified I could see the files and open them.

Next I created the GPO and setup User Configuration --> Software Settings --> Software Installation, right clicked new --> package.  I selected the .msi file and all seemed well.  The share with the file is on a different server so it isn't a local path on that selection or anything.  

I then did a gpupdate on the DC and the test computer, tried a reboot and all and it just doesn't seem to install.  I then did testing in the group policy management console under "group policy results" and noticed that the policy shows up under Denied GPO's with the reason "empty".  I went and looked at the object again and it is not empty.  I still show that install set in it.  I have the policy turned on, enforced and just to make sure, have the everyone group and domain computer group have full access to it.

I guess I'm looking for suggestions on getting this to work or anything it seems I've done incorrectly thus far.  Thank you in advance for any input.
0
Comment
Question by:longrealtycompany
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 6

Accepted Solution

by:
trippleO7 earned 500 total points
ID: 20369337
One thing I notice initially is that you created a Test OU, and put the computer in there, but you created a USER GPO to apply to that computer OU.  This should be a COMPUTER policy (computer configuration) when applying to an OU containing only Computers.  Same for the inverse, User policy (user configuration) for OU containing Users.  And if you have an OU containing both users and computers, then you would apply both policies.

GP Results showed the policy as being empty because there wasn't a correct policy type (user or computer) being applied to that OU.

You can, however, add that user to the Test OU and publish the application in which that user will be able to see it in Add/Remove Programs and install it from there.  Another way would be to just create a computer policy (mentioned above) and assign the package within that policy.  This is probably the easiest, unless you want to user's to have more control of what's being installed.

I've deployed out this same package via AD/GP.  Try the above steps first and we'll go from there.

Rory
0

Featured Post

Ready to get started with anonymous questions?

It's easy! Check out this step-by-step guide for asking an anonymous question on Experts Exchange.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question