Solved

Denied GPO

Posted on 2007-11-28
1
1,537 Views
Last Modified: 2013-11-13
I'm trying to create a GPO to deploy the Office 2007 compatibility pack to computers on the domain.  To test it right now, I've created a temporary OU and put one test computer in it.  I then created the share, put the files in it and applied the everyone group with read access and domain admins full control.  I used RDP to connect to the test computer and verified I could see the files and open them.

Next I created the GPO and setup User Configuration --> Software Settings --> Software Installation, right clicked new --> package.  I selected the .msi file and all seemed well.  The share with the file is on a different server so it isn't a local path on that selection or anything.  

I then did a gpupdate on the DC and the test computer, tried a reboot and all and it just doesn't seem to install.  I then did testing in the group policy management console under "group policy results" and noticed that the policy shows up under Denied GPO's with the reason "empty".  I went and looked at the object again and it is not empty.  I still show that install set in it.  I have the policy turned on, enforced and just to make sure, have the everyone group and domain computer group have full access to it.

I guess I'm looking for suggestions on getting this to work or anything it seems I've done incorrectly thus far.  Thank you in advance for any input.
0
Comment
Question by:longrealtycompany
1 Comment
 
LVL 6

Accepted Solution

by:
trippleO7 earned 500 total points
ID: 20369337
One thing I notice initially is that you created a Test OU, and put the computer in there, but you created a USER GPO to apply to that computer OU.  This should be a COMPUTER policy (computer configuration) when applying to an OU containing only Computers.  Same for the inverse, User policy (user configuration) for OU containing Users.  And if you have an OU containing both users and computers, then you would apply both policies.

GP Results showed the policy as being empty because there wasn't a correct policy type (user or computer) being applied to that OU.

You can, however, add that user to the Test OU and publish the application in which that user will be able to see it in Add/Remove Programs and install it from there.  Another way would be to just create a computer policy (mentioned above) and assign the package within that policy.  This is probably the easiest, unless you want to user's to have more control of what's being installed.

I've deployed out this same package via AD/GP.  Try the above steps first and we'll go from there.

Rory
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Installations often have prerequisites, such as “Microsoft .Net framework is required for this product”. The usual implementation in MSI installations is system search for a particular registry setting representing the required prerequisite, followe…
Monitor input from a computer is usually nothing special.  In this instance it prevented anyone from using the computer.  This was a preconfiguration that didn't work.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question