We help IT Professionals succeed at work.

GPO not installing assigned software

bryanchandler
bryanchandler used Ask the Experts™
on
I'm trying to install an MSI that I've previously been able to setup a GPO for & install.  This network isn't working.  
When I run GPRESULTS on a client at this network, it shows that the GPO was applied, but the software isn't being installed.

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/6/2010 at 2:28:36 PM



RSOP results for MCCLAINTOOL\laural on LAURA-DELL2 : Logging Mode
------------------------------------------------------------------

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 MCCLAINTOOL
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:            
Local Profile:               C:\Documents and Settings\laural
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=LAURA-DELL2,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=[domain],DC=local
    Last time Group Policy was applied: 7/6/2010 at 2:21:01 PM
    Group Policy was applied from:      [server].[domain].local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        Small Business Server Windows Firewall
        Druvaa InSync Distribution
        Small Business Server Client Computer
        Small Business Server Remote Assistance Policy
        Small Business Server Lockout Policy
        Small Business Server Domain Password Policy
        Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Small Business Server Folder Redirection
            Filtering:  Not Applied (Empty)

        Small Business Server Internet Connection Firewall
            Filtering:  Denied (WMI Filter)
            WMI Filter: PreSP2

        Local Group Policy
            Filtering:  Not Applied (Empty)

        Small Business Server - Windows Vista policy
            Filtering:  Denied (WMI Filter)
            WMI Filter: Vista

    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        LAURA-DELL2$
        Domain Computers
       

USER SETTINGS
--------------
    CN=Laura Launius,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=[domain],DC=local
    Last time Group Policy was applied: 7/6/2010 at 2:22:11 PM
    Group Policy was applied from:    [server].[domain].local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        Small Business Server Folder Redirection
        Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Small Business Server Lockout Policy
            Filtering:  Disabled (GPO)

        Druvaa InSync Distribution
            Filtering:  Not Applied (Empty)

        Small Business Server Client Computer
            Filtering:  Not Applied (Empty)

        Small Business Server Domain Password Policy
            Filtering:  Not Applied (Empty)

        Small Business Server Windows Firewall
            Filtering:  Not Applied (Empty)

        Small Business Server Remote Assistance Policy
            Filtering:  Disabled (GPO)

        Small Business Server Internet Connection Firewall
            Filtering:  Denied (WMI Filter)
            WMI Filter: PreSP2

        Local Group Policy
            Filtering:  Not Applied (Empty)

        Small Business Server - Windows Vista policy
            Filtering:  Denied (WMI Filter)
            WMI Filter: Vista

    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
        [security group]
        Web Workplace Users
       

The folder that has the installer is shared w/ everyone in the network & security permissions are OK, as I was able to manually install the MSI on a client.
What's going on here?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Cris HannaSr IT Support Engineer

Commented:
have you installed the client side GP extensions on the workstation?
DonNetwork Administrator

Commented:
Have you rebooted ? These get installed during bootup only.

Author

Commented:
Don't know what that means CrisHanna.
What's Group Policies worth if you have to install something else to get them to work?

Author

Commented:
I have rebooted.

Author

Commented:
Do I have to install this on every client?
I might as well manually install the software anyway.  I'm remote & don't have physical access.
Again, what's the assigned software GPO worth if I have to install an update to get it to work in the first place?

Author

Commented:
@dsterartjr
I did follow those instructions.  Again, I've installed this before using a GPO, it's just this network that's having issues.
Why would it work on the other 5 SBS 2003 SP2 networks I manage but not this?

@CrisHanna
That doesn't explain what Group Policy Preference Client Side Extensions are.  Greek to me. Is it new GP settings?  Is it a hotfix?
Cris HannaSr IT Support Engineer

Commented:
yes it needs to be installed on every client.  if you have other software down the road that needs to installed you'll already have this in place.   This should have been offered to every client anyway either through WSUS or Microsoft Update
DonNetwork Administrator

Commented:
Not sure what Client Side Extensions has to do with Software Distribution, CSE is for the added Group Policy preferences.
Cris HannaSr IT Support Engineer

Commented:
http://support.microsoft.com/kb/943729
Information about new Group Policy preferences in Windows Server 2008
 
DonNetwork Administrator

Commented:

@bryanchandler
 
Have you tried "Redeploy Application" ??
 
 

Author

Commented:
@dstewartjr,
Thanks for the explanation.

@CrisHanna
I'm not trying to add a feature to Assign Software via GP..  I'm trying to use an existing function & it's not working.

I'll install this also while I'm installing the software manually then.
Network Administrator
Commented:

Author

Commented:
@dstewartjr
I did redeploy.  But I assigned this only a week ago, so it's not as if it's a stale policy.  
Why would it say it's applied & not install the software?  Most of the clients are offsite & I only have a chance to install this while they're in-town for a day out of the month, so I REALLY need this to deploy when they're in the office (I've instructed users to reboot while at the office so new GPs deploy.)
DonNetwork Administrator

Commented:
The link above seems to provide alot of troubleshooting(in case you missed my previous post)

Author

Commented:
@dstowartjr
I believe the section "Software Installation changes do not apply after logon" may be my issue.  Of course I need to have fast logon enabled since users are off-network 95% of the time.
From my understanding, users will have to boot 2-3 times for the policy to be applied, then actually have it install the software.  I'll have them do this & report back.
DonNetwork Administrator

Commented:
Addiag.exe seems to report installation errors
 
http://technet.microsoft.com/en-us/library/cc758291(WS.10).aspx 
DonNetwork Administrator

Commented:
Yes, I've noticed in the past that software installations in our environment dont always happen on first reboot.
ok...
i have a few questions  for you
1. did you apply policy  for users or computers
2.did you assign it or publish it  (if for users )
for computers you can not publish

if it was assinged for computers .... reboot  (you might want to do  gpupdate /force on dc before reboot )
if it was assigned for users ... they need to log off and log in

if it was published for users they need to go to aad and remove program and select  programs availale on network and install them manually

Author

Commented:
@dhruvarajp
I followed the exact instructions found on Druvaa's website.
http://support.druva.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=2

I think that the issue is with the fast login setting.  Still waiting for users to reboot their systems while in-office.
ok.. by the way that is not my site ..

Author

Commented:
Haveing the user perform another reboot did get the GPO to install the MSI running, but the MSI didn't complete, and I had to manually install it.  Not sure what the problem was this time.
Since this is a small network of only 5 users & I know that the GPO method for installation works at other networks, I'm not going to spend any more time trying to diag this issue.