?
Solved

Cannot Install Software from GPO

Posted on 2008-11-11
5
Medium Priority
?
1,198 Views
Last Modified: 2012-05-05
I have changed employers, and find myself in an environment that has recently migrated servers, with all servers having new names. Software deployment has not been too good here, with no deployment tool being used - not even AD. Most apps are installed on a server with the clients provided with shortcuts to those apps. I'm not a huge fan of this method, so I tyhought I'd start using AD for software distribution.

So I created a new OU and linked a new GPO to it with a single application to assign. I moved a PC into that OU and restarted. No installation occurred.

Looking at the logs it seems there is a problem in that the error message 'The Group Policy client-side extension Software Installation failed to execute' is reported by Userenv in the application log. I wondered if the PC in question is at fault, but a new virtual machine (not part of the new OU) is also reporting the same problem.

Userenv.log looks like this:

USERENV(410.414) 14:47:37:687 ReconcileFile: Unable to open temporary file
USERENV(410.414) 14:48:42:625 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(410.414) 14:48:42:625 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(410.414) 14:48:42:625 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(410.768) 14:49:08:359 ProcessGPOs: Extension Software Installation ProcessGroupPolicy failed, status 0x80040169.
USERENV(410.414) 14:50:28:258 GetExclusionList: Failed to get file size of <C:\Documents and Settings\wheatleyk\ntuser.ini>
USERENV(410.414) 14:50:28:870 ReconcileFile: Unable to open temporary file
USERENV(410.820) 14:50:42:764 ProcessGPOs: Extension Software Installation ProcessGroupPolicy failed, status 0x80040169.
USERENV(410.90c) 14:50:43:454 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(410.414) 15:08:51:357 ReconcileFile: Unable to open temporary file
USERENV(410.414) 15:09:12:338 GetExclusionList: Failed to get file size of <C:\Documents and Settings\wheatleyk\ntuser.ini>
USERENV(410.414) 15:09:12:963 ReconcileFile: Unable to open temporary file
USERENV(410.e88) 15:09:19:847 ProcessGPOs: Extension Software Installation ProcessGroupPolicy failed, status 0x80040169.
USERENV(410.c6c) 15:09:19:925 PolicyChangedThread: UpdateUser failed with 1008.
-----------------------------------------------------
Appmgmt.log has the following:

Software installation extension returning with final error code 2147746153.
11-11 15:09:19:816
Software installation extension has been called for foreground synchronous policy refresh.
The following policies are to be applied, flags are 0.
    InterJigsaw Global Policy (unique identifier {ED51F1B4-3F98-477B-812B-E24A72DD5C61})
        System volume path = \\haec-staff\Sysvol\haec.local\Policies\{ED51F1B4-3F98-477B-812B-E24A72DD5C61}\User
        Active Directory path = LDAP://CN=User,CN={ED51F1B4-3F98-477B-812B-E24A72DD5C61},CN=Policies,CN=System,DC=haec,DC=local
Set the Active Directory path to LDAP://CN=Class Store,CN=User,CN={ED51F1B4-3F98-477B-812B-E24A72DD5C61},CN=Policies,CN=System,DC=haec,DC=local;.
Enumerating applications in the Active Directory for user wheatleyk with flags 5.
Cannot bind to the Active Directory to enumerate applications, error code 80040169.
Failed to apply changes to software installation settings.  Software changes could not be applied.  A previous log entry with details should exist.  The error was : %2147746153

Software installation extension returning with final error code 2147746153.

---------------------------------------

I suspect that whatever the problem is its root cause is the migrartion last August. But how do I start to debug this?
0
Comment
Question by:birchanger
  • 3
  • 2
5 Comments
 
LVL 51

Expert Comment

by:Netman66
ID: 22947326
Your Default Domain Policy is likely corrupt.

Back it up via GPMC.

Recreate the policy like so:

DCGPOFIX /target:domain

Beware that default security settings are not returned by this method.  Follow the KB below to make the necessary changes if you find some functionality is broken.

http://support.microsoft.com/kb/833783
0
 

Author Comment

by:birchanger
ID: 22953253
Thanks for the suggestion - that sounds like something I need to plan for, rather carefully.
0
 

Author Comment

by:birchanger
ID: 23012087
I have just run RSOP on a machine in the domain and get an exclamation mark. The error information says:

Software Installation did not complete policy processing because a system restart is required for the settings to be applied. Group Policy will attempt to apply the settings the next time the computer is restarted.

Does this support the corrupt default GP theory?
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 1500 total points
ID: 23012240
It could, yes.

Did a reboot cure it?
0
 

Author Closing Comment

by:birchanger
ID: 31515559
I still haven't fixed this, as I haven't had time. But for fairness I'll close this and award points.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question