Solved

Creating MSI of Microsoft Secruity Essentials for deploying via group policy.

Posted on 2011-02-24
7
7,092 Views
Last Modified: 2012-05-11
We have a SBS 2008 and we want to deploy MSE to the client PCs, about 10 in total.

The Group policy should be no problem, create the group, set policy to install MSE and add computers.

The creating MSI has been a problem, I cannot find a msi file for download and creating one has not been successful either. I have tried a couple, first "exe to msi" it creates a msi file but that file never successfully installs. Second was "Advanced Installer 8.0.2" converting exe didnt make a msi that didnt work, then I tried the "advanced repackager" method on a Virtual PC xp mode, it ended up killing the virtual machine.

I thought surely deploying software from a server is pretty routine procedure and maybe someone could give me some protips of the best procedure for going about it.

0
Comment
Question by:Planitweb
7 Comments
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 34976334
The problem is that Microsoft Security Essentials is a home-based product and, even according to their EULA, is not for business use at all.

This means that from a technical standpoint MS never intended it to be centrally deployed thus never made it MSI friendly, and from a legal standpoint, it would be illegal to try and do so...thus also against EE's terms of use to circumvent MSE's EULA.

-Cliff
0
 

Author Comment

by:Planitweb
ID: 34976434
Yes I understand what your saying, but Microsoft have recently made the license for MSE a bit more lenient for small businesses.

"Small Business. If you operate a small business, then you may install and use the software on up to ten (10) devices in your business."

Even not for this specific case, from my own experience I dont tend to see msi files available its more often just exe for installation. So i would really like to know the best practice for deploying software by group policy? I am interested in how experienced people go about this.
0
 
LVL 6

Expert Comment

by:sabby447
ID: 34977160
Why not use .exe from a file share in a group policy or logon script ?

you can use psexec to run it manually in your environment for all computers in minutes however downside is to have all machines running at that time
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 56

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 34983727
Many .exe installs are just .msi's with an .exe wrapper that automatically sends some flags to the MSI. There are very few exceptions (but MSE is one of them) where you can't extract the msi and use GP to deploy it.

Notes on many apps can be found at www.appdeploy.com on how to find and use the .msi for any particular package you are looking for.

With that said, GPSI really does fall over when deploying non-MSI files and if you *can't* get an MSI, I don't recommend ever using GPSI. GPSI also doesn't scale well (no BITS, can hit network bandwidth hard), so if touching machines directly is too difficult (too many machines) then it also means you are large enough to invest in a better software deployment package than GPSI does natively.

There is a reason MS has System Center Configuration Manager. GPSI doesn't compete with it simply because GPSI doesn't have the robust feature set. Similary, for mid-sized networks, you have System Center Essentials. Both will deploy .exe's painlessly where GPSI falls over.

Finally for the very small window where you need more than GPSI, but even SCE is too big, I like a product called SpecOps Deploy from www.specopssoft.com ....scales well, good reporting for licensing and compliance management, and better/easier network resources usage than GPSI offers.

GPSI really is a starter technoogy and great for the smallest of small networks, but it has its limitations that, once you hit them, (and non .msi files is definitely one of them) then it is time to look at an add-on product to do the job.

HTH,

-Cliff
0
 

Author Comment

by:Planitweb
ID: 34994488
Thanks Cliff, you have pointed me in the right direction.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 35390702
This question has been classified as abandoned and is being closed as part of the Cleanup Program. See my comment at the end of the question for more details.
0

Featured Post

Integrate social media with email signatures

Is your company active on social media? Do you also use email signatures? Including social media icons in your email signature is a great way to get fans for free. Let all your email users know you’re on social media quickly and easily, in a single click.

Join & Write a Comment

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now