?
Solved

Group Policy not deploying Office 2007

Posted on 2008-10-29
13
Medium Priority
?
1,840 Views
Last Modified: 2012-06-21
We run a Windows Server 2003 Network.

We bought all new systems for our company with OEM versions of Windows XP and Office Small Business 2007.

We want to do a ghost image for each department.  we realize you can't GHOST OEM Office so we decided after deploying hte ghost image we would push Office out via group policy (still not sure if you can do this with OEM Office but I'm hoping it challenges for a product key because we have enough legal OEM copies to do it)

I test t his with a laptop, put it in the OU with the group policy assigned to it.  I put the MSI file into Computer Configuratio Software settings from a network share where I had copied the entire CD.  

I gave Everyone Read, List and execute permissions to that network share and have tested that it accesses from the laptop just fine.

When I reboot the system, nothing happens.  A GP result shows that the policy is applied to the computer, but the software doesn't even attempt to install.

When I look at the event log the error says The install of application Microsoft Office Small Business 2007 from policy 2008 Computers failed.  The error was : The installation source for this product is not available.  Verify that the source exists and that you can access it.

I know it's there... and I know that the computer in question and the user can access it just fine.

I'm at a loss...
0
Comment
Question by:nwhitehouse
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 5
13 Comments
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 22834457
the reason that this happens is it is trying to access the share using the machine profile. The software install is applied before the computer can fully authenticate.

What I would do is select your unc path for the install and give anonymous and everyone full control. This should allow it to install.
0
 
LVL 14

Expert Comment

by:dfxdeimos
ID: 22834525
Could I have you just review this document:

http://technet.microsoft.com/en-us/library/cc179214.aspx

before we go further into troubleshooting to see if there is anything listed there that might have been overlooked?
0
 

Author Comment

by:nwhitehouse
ID: 22834613
Ok...  for dfxdeimos, I have reviewed that document, in fact I used it to deploy the MSI.  I don't think I missed anything...

for xxdcmast:
I did what you suggested (thank you), and it still didn't install... I did, however, get a different 4 error messages in the log:
ERROR 1:
The COM+ Event System failed to create an instance of the subscriber partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-8707-00C04FD93327}.  CoGetObject returned HRESULT 8000401A.

ERROR 2:
The assignment of application Microsoft Office Small Business 2007 from policy 2008 Computers failed.  The error was : The group policy framework should call the extension in the synchronous foreground policy refresh.

ERROR 3:
The removal of the assignment of application Microsoft Office Small Business 2007 from policy 2008 Computers failed.  The error was : The group policy framework should call the extension in the synchronous foreground policy refresh.

ERROR 4:
Failed to apply changes to software installation settings.  Software installation policy application has been delayed until the next logon because an administrator has enabled logon optimization for group policy.  The error was : The group policy framework should call the extension in the synchronous foreground policy refresh.
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 
LVL 14

Expert Comment

by:dfxdeimos
ID: 22834647
<!--- Clipped from forum post --->
What you are seeing there is the result of the logon optimization feature for
Windows XP. If logon optimization is enabled, it takes about two logoffs and
logons for user targeted applications to appear and about two reboots for
machine targeted applications to appear.

The logon optimization allows synchronous and asynchronous processing of group
policy. The software management extension which is responsible for the software
installation deployment must always use synchronous processing of group policy.
The application event log warnings are simply providing an indication that this
is what is happening and that the policy won't be successfully applied until a
synchronous refresh occurs..

http://msdn.microsoft.com/en-us/library/aa374350.aspx
0
 

Author Comment

by:nwhitehouse
ID: 22834826
Ok, what it's doing now is alternating between the two error messages.  One reboot it will give me the  "can't find software installation" error, and the next reboot it will give me the 4 errors I just posted....
0
 
LVL 14

Expert Comment

by:dfxdeimos
ID: 22834897
Just to be clear, when you created the package assignment in group policy you used the UNC path to reference the install file. Also, again just to re-confirm, both the directory and the file have given Anonymous full control in both the NTFS and share permissions?
0
 

Author Comment

by:nwhitehouse
ID: 22835717
Yes... that is all true.
0
 

Author Comment

by:nwhitehouse
ID: 22842517
Any ideas anyone?  this is driving me nuts....
0
 

Author Comment

by:nwhitehouse
ID: 22842977
Ok, so I added the policy to User Configuration instead of Computer Configuration of GP.  I got different error messages - I'm wondering if maybe this IS an OEM problem:

ERROR #1:
Product: Microsoft Office Small Business 2007 -- Error 25004. Per-user install not supported.

ERROR #2:
The install of application Microsoft Office Small Business 2007 from policy 2008 Computers failed.  The error was : Fatal error during installation.

ERROR #3:
Failed to apply changes to software installation settings.  Software changes could not be applied.  A previous log entry with details should exist.  The error was : Fatal error during installation.

0
 
LVL 14

Expert Comment

by:dfxdeimos
ID: 22843095
Can you Publish the package to a user group instead of assigning it to a computer or user group and then go in add / remove programs and install network program?
0
 

Author Comment

by:nwhitehouse
ID: 22843201
Tried it and same error... It starts to install and then fails with

"Error 25004.  Per-user install not supported"
0
 

Accepted Solution

by:
nwhitehouse earned 0 total points
ID: 22843723
GOT IT!  I found the answer myself...

1.  You can not publish Office 2007 or assign it to users - it does not work and Microsoft doesn't support it.

2.  You have to assign it to the Comptuer Configuration

3.  You have to assign full access to "DOMAIN COMPUTERS" as opposed to anonymous users

After this it worked great!

Thanks to all who tried to help on this one... much appreciated!
0
 
LVL 14

Expert Comment

by:dfxdeimos
ID: 22843756
Awesome, thanks for the tip!
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question