• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 492
  • Last Modified:

Deploying Service pack using Active Directory GPO to a specific user only.

Hi All,

Ive got several question regarding deploying an update (Office 2007 SP2 and some other Visio 2007 SP2 + Project 2007 SP2) using AD GPO.

1.      At the moment all of my user got Office 2007 that needs to be updated to SP2, shall I just create a GPO account and then apply it to the default Users OU ?
2.      Only some of the user got Visio and Project 2007 Installed (not all of them) how can I implement this update without visiting their desk and ask them to install the update manually ?

Thanks,
0
jjoz
Asked:
jjoz
4 Solutions
 
Mal OsborneAlpha GeekCommented:
Considered setting up a WSUS server?  This will automate all your patching.
0
 
JBlondCommented:
Is there a reason that you don't use WSUS for this?
http://technet.microsoft.com/en-us/wsus/default.aspx

It's free and does everything you asked for without dealing with scripts. After the installation you only have to point all your clients to the WSUS server using group policies and then you can approve the necessary updates on the WSUS server and the rest is done automatically.
0
 
Mike KlineCommented:
How do you normally deploy your patches?   Are you using WSUS, if you are you could use that for deploying office 2007 SP2
http://blogs.technet.com/wsus/archive/2009/04/09/the-2007-office-system-service-pack-2-coming-to-wsus-in-april.aspx
The 2007 Office System Service Pack 2 coming to WSUS in April
I haven't actually tested or tried to deploy office 2007 SP2 via GPO but for a GPO you have to link it to where the users are (usually domain or OU level)
When you say "default Users OU" is that the default users container in AD or do you have an OU with your users.  You won't be able to link a group policy to that Users container.
If you only want the GPO to apply to certain users you can either link the GPO at the OU (if those users are not in that OU)
The other way (probably what I'd do in this case is to use security filtering.  More on security filtering here:
http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html
Thanks
Mike
0
Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

 
jjozAuthor Commented:
To All,

usually i ask the user to install the update manually and i broadcast the announcement via email (sounds like a very primitive way of doing it :-| ) since

my WSUS is behaving strange by not listing the computer under the "All Computers".
0
 
JBlondCommented:
Then I suggest we try to troubleshoot your WSUS server instead of dealing with group policy scripts or let the users install the update on their own.

0
 
jjozAuthor Commented:
yes i guess that is the correct way to do it :-|

conclusion: deploy it using WSUS.

Cheers.
0
 
jjozAuthor Commented:
Thanks for the suggestion.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now