Deploy Software Based on Criteria

Posted on 2009-04-08
Last Modified: 2012-05-06
I have a domain with roughly 120 PCs and 30 or so servers.  I want to be able to use Software Installation through AD using .msi files, or other means, and target based on machines that need it.

For example, I need to deploy the Office 2007 Compatibility pack.  I know how to deploy it to the whole domain, but I don't want to deploy to machines that have Office 2007, or servers.

I could create an OU for machines with this, but doing an OU for each install would get messy quick.

Any suggestions on how I can do this effectively, and going forward for other installations once I define the scope?
Question by:rosederekj
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
LVL 38

Assisted Solution

Shift-3 earned 300 total points
ID: 24097918
If all of your machines are XP or newer then you can use a WMI filter to restrict which machines the GPO applies to.

Assisted Solution

mikainz earned 200 total points
ID: 24097939
You can use a computer group which you allow the processing of your GPO.
+ easy to set up
- you need to add the computer objects to the group to get the software
You can build a WMI-filter.
- need knowledge of WMI-filtering
+ not further maintance if new computers are member of your domain.

Author Comment

ID: 24098430
Seems good, but what would an example be?  I went to create a WMI filter but couldn't find any syntax examples.  In the attached screen capture, I have a filter I named "Test for Office Compatability Pack", then went to "Add" for the Query, and I assumed the namespace is root\cimv2\applications.

What would I have to put for instance to find machines with Office 2003 Basic Edition, and/or Office 2003 Professional?
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.


Author Comment

ID: 24098953
Update -

I found the syntax I believe:

SELECT * FROM Win32_Product WHERE (Caption <> "Microsoft Office%2007%")

or I can use

SELECT * FROM Win32_Product WHERE (Caption LIKE "Microsoft Office%2003%")

In both cases when I try to save, I get the error of "a syntax error occured trying to evaluate a query string"

Author Comment

ID: 24099775
I have what I need with regards to the query -

SELECT * FROM Win32_Product
WHERE Name Like 'Microsoft Office %2003%'

Question is how can I test this query?  I would like to see what machines it returns so I can validate a few.
LVL 38

Accepted Solution

Shift-3 earned 300 total points
ID: 24099928
There doesn't appear to be a good way to test it other than creating a new sub-OU, moving some computers into it, applying a GPO to it with a filter, then using the Group Policy Results node in GPMC to see which ones it applied to.

Assisted Solution

mikainz earned 200 total points
ID: 24100017
You can only try to execute the WMI-query via vbscript on different remote machines,
think there are a lot of examples how to do this.
maybe you can check out
and you can adopt the script for your

Author Closing Comment

ID: 31568060
WMI Filtering and the Sub OU to test the output works for me -thanks everyone!

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Powershell Script - Set Windows Updates 2 62
Change Exchange 2010 Namespace 6 67
Looping through each DC for most recent LastLogon 24 103
ntp server 15 76
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question