Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Denied GPO

Posted on 2007-11-28
1
Medium Priority
?
1,541 Views
Last Modified: 2013-11-13
I'm trying to create a GPO to deploy the Office 2007 compatibility pack to computers on the domain.  To test it right now, I've created a temporary OU and put one test computer in it.  I then created the share, put the files in it and applied the everyone group with read access and domain admins full control.  I used RDP to connect to the test computer and verified I could see the files and open them.

Next I created the GPO and setup User Configuration --> Software Settings --> Software Installation, right clicked new --> package.  I selected the .msi file and all seemed well.  The share with the file is on a different server so it isn't a local path on that selection or anything.  

I then did a gpupdate on the DC and the test computer, tried a reboot and all and it just doesn't seem to install.  I then did testing in the group policy management console under "group policy results" and noticed that the policy shows up under Denied GPO's with the reason "empty".  I went and looked at the object again and it is not empty.  I still show that install set in it.  I have the policy turned on, enforced and just to make sure, have the everyone group and domain computer group have full access to it.

I guess I'm looking for suggestions on getting this to work or anything it seems I've done incorrectly thus far.  Thank you in advance for any input.
0
Comment
Question by:longrealtycompany
1 Comment
 
LVL 6

Accepted Solution

by:
trippleO7 earned 2000 total points
ID: 20369337
One thing I notice initially is that you created a Test OU, and put the computer in there, but you created a USER GPO to apply to that computer OU.  This should be a COMPUTER policy (computer configuration) when applying to an OU containing only Computers.  Same for the inverse, User policy (user configuration) for OU containing Users.  And if you have an OU containing both users and computers, then you would apply both policies.

GP Results showed the policy as being empty because there wasn't a correct policy type (user or computer) being applied to that OU.

You can, however, add that user to the Test OU and publish the application in which that user will be able to see it in Add/Remove Programs and install it from there.  Another way would be to just create a computer policy (mentioned above) and assign the package within that policy.  This is probably the easiest, unless you want to user's to have more control of what's being installed.

I've deployed out this same package via AD/GP.  Try the above steps first and we'll go from there.

Rory
0

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Create a Windows 10 custom Image with custom task bar and custom start menu using XML for deployment.
This course is ideal for IT System Administrators working with VMware vSphere and its associated products in their company infrastructure. This course teaches you how to install and maintain this virtualization technology to store data, prevent vuln…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …

926 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question