Solved

Deploying Service pack using Active Directory GPO to a specific user only.

Posted on 2009-05-05
7
479 Views
Last Modified: 2013-12-12
Hi All,

Ive got several question regarding deploying an update (Office 2007 SP2 and some other Visio 2007 SP2 + Project 2007 SP2) using AD GPO.

1.      At the moment all of my user got Office 2007 that needs to be updated to SP2, shall I just create a GPO account and then apply it to the default Users OU ?
2.      Only some of the user got Visio and Project 2007 Installed (not all of them) how can I implement this update without visiting their desk and ask them to install the update manually ?

Thanks,
0
Comment
Question by:jjoz
7 Comments
 
LVL 18

Assisted Solution

by:Mal Osborne
Mal Osborne earned 150 total points
ID: 24302221
Considered setting up a WSUS server?  This will automate all your patching.
0
 
LVL 21

Assisted Solution

by:JBlond
JBlond earned 150 total points
ID: 24302222
Is there a reason that you don't use WSUS for this?
http://technet.microsoft.com/en-us/wsus/default.aspx

It's free and does everything you asked for without dealing with scripts. After the installation you only have to point all your clients to the WSUS server using group policies and then you can approve the necessary updates on the WSUS server and the rest is done automatically.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 200 total points
ID: 24302230
How do you normally deploy your patches?   Are you using WSUS, if you are you could use that for deploying office 2007 SP2
http://blogs.technet.com/wsus/archive/2009/04/09/the-2007-office-system-service-pack-2-coming-to-wsus-in-april.aspx
The 2007 Office System Service Pack 2 coming to WSUS in April
I haven't actually tested or tried to deploy office 2007 SP2 via GPO but for a GPO you have to link it to where the users are (usually domain or OU level)
When you say "default Users OU" is that the default users container in AD or do you have an OU with your users.  You won't be able to link a group policy to that Users container.
If you only want the GPO to apply to certain users you can either link the GPO at the OU (if those users are not in that OU)
The other way (probably what I'd do in this case is to use security filtering.  More on security filtering here:
http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html
Thanks
Mike
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 1

Author Comment

by:jjoz
ID: 24302257
To All,

usually i ask the user to install the update manually and i broadcast the announcement via email (sounds like a very primitive way of doing it :-| ) since

my WSUS is behaving strange by not listing the computer under the "All Computers".
0
 
LVL 21

Assisted Solution

by:JBlond
JBlond earned 150 total points
ID: 24302417
Then I suggest we try to troubleshoot your WSUS server instead of dealing with group policy scripts or let the users install the update on their own.

0
 
LVL 1

Author Comment

by:jjoz
ID: 24302491
yes i guess that is the correct way to do it :-|

conclusion: deploy it using WSUS.

Cheers.
0
 
LVL 1

Author Closing Comment

by:jjoz
ID: 31577909
Thanks for the suggestion.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question