Installing Powershell 2.0 using GPO companywide

Hi All,

I'd like to know how or what is the fastest way to deploy Powershell 2.0 from: http://support.microsoft.com/kb/968929 company wide using GPO ?

at the moment my GPO is consist of manually drag n drop of computer object into:
Windows XP, Vista and 7 (all version 32 bit and 64 bit) --> Workstations OU
Windows Server 2003 and 2008 (all version 32 bit and 64 bit non DC) --> Servers OU

that's it only those simple categorization and I wonder how to install the correct binary into the target machine ? there are so many different installation files for each version of OS.

Thanks.
LVL 1
jjozAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mcsweenSr. Network AdministratorCommented:
Are you running WSUS?  If so all you have to do is approve the update in the WSUS admin console.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Joseph DalyCommented:
Best way of doing this is to create your group policies for each individual installation (xp, vista,7,etc). You can then apply all of these group policies to the same ou. If you just left it like this all versions would try to install on all machines. However if you were to use WMI filtering you can create a WMI filter so that each version will only run on the correct operating system.

http://support.microsoft.com/kb/555253

There are a bunch of different options you can use WMI to filter against but in your case you can probaby use the system version. An example of a WMI filter would be like below.

SELECT Version FROM Win32_OperatingSystem WHERE Version LIKE "5.1%"

I use this to make sure I am only targeting windows xp machines.

A good tool for testing and validating your WMI filters can be found here. This will let you pick a computer and test your installation against it. If it validates to true then the GPO will apply, false it wont.

http://www.gpoguy.com/FreeTools/FreeToolsLibrary/tabid/67/agentType/View/PropertyID/93/Default.aspx
0
Joseph DalyCommented:
and if you do end up going the WMI filtering route a very handy tool Ive found helps me in building my WMI queries is the WMI code creator. This will easily let you open and view the WMI repositories and see what data they contain and it has an execute command that allows you to pull data on the local machine or a remote machine.

http://www.microsoft.com/downloads/details.aspx?FamilyID=2cc30a64-ea15-4661-8da4-55bbc145c30e&displaylang=en

And as fas as finding the difference between a 32 bit and 64 bit machine you could probably use Win32_Computersystem and pull the SystemType variable. On my 32 bit machine it returns "X86-based PC".

You may need to do a little more digging on this one but im sure its very possible. Any questions let me know.
0
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

jjozAuthor Commented:
@mcsween: thanks mate, from memory I only auto approve the critical and security update only, that's why i couldn't find the WMF install, OK i shall then include the additional thing for auto approve.
@xxdcmast: wow that's good thing to know mate, I'll try to implement the WMI filtering and see how it goes.
0
Joseph DalyCommented:
If you have WSUS already implemented thats probably the easiest way to go. But as far as future tasks WMI filtering is a huge tool to have in your IT arsenal. Basically since you can pretty much get any infomation you want about a computer from WMI you can very granularly target GPO application using it.

Good luck and let us know how this goes.
0
jjozAuthor Commented:
ah yes i do have WSUS, I've just added the auto approve for the KB968930 in the WSUS and it is now on queue with the asterisk symbol in front of it.

I guess it's only a matter of time before it is all installed in all machine.

Thanks mate !
WSUS.jpg
0
jjozAuthor Commented:
thanks for the response mate !
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.