If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.
Solved
Creating MSI of Microsoft Secruity Essentials for deploying via group policy.
Posted on 2011-02-24
We have a SBS 2008 and we want to deploy MSE to the client PCs, about 10 in total.
The Group policy should be no problem, create the group, set policy to install MSE and add computers.
The creating MSI has been a problem, I cannot find a msi file for download and creating one has not been successful either. I have tried a couple, first "exe to msi" it creates a msi file but that file never successfully installs. Second was "Advanced Installer 8.0.2" converting exe didnt make a msi that didnt work, then I tried the "advanced repackager" method on a Virtual PC xp mode, it ended up killing the virtual machine.
I thought surely deploying software from a server is pretty routine procedure and maybe someone could give me some protips of the best procedure for going about it.
The Group policy should be no problem, create the group, set policy to install MSE and add computers.
The creating MSI has been a problem, I cannot find a msi file for download and creating one has not been successful either. I have tried a couple, first "exe to msi" it creates a msi file but that file never successfully installs. Second was "Advanced Installer 8.0.2" converting exe didnt make a msi that didnt work, then I tried the "advanced repackager" method on a Virtual PC xp mode, it ended up killing the virtual machine.
I thought surely deploying software from a server is pretty routine procedure and maybe someone could give me some protips of the best procedure for going about it.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
2-
2
- +1
7 Comments
Active today
The problem is that Microsoft Security Essentials is a home-based product and, even according to their EULA, is not for business use at all.
This means that from a technical standpoint MS never intended it to be centrally deployed thus never made it MSI friendly, and from a legal standpoint, it would be illegal to try and do so...thus also against EE's terms of use to circumvent MSE's EULA.
-Cliff
This means that from a technical standpoint MS never intended it to be centrally deployed thus never made it MSI friendly, and from a legal standpoint, it would be illegal to try and do so...thus also against EE's terms of use to circumvent MSE's EULA.
-Cliff
Yes I understand what your saying, but Microsoft have recently made the license for MSE a bit more lenient for small businesses.
"Small Business. If you operate a small business, then you may install and use the software on up to ten (10) devices in your business."
Even not for this specific case, from my own experience I dont tend to see msi files available its more often just exe for installation. So i would really like to know the best practice for deploying software by group policy? I am interested in how experienced people go about this.
"Small Business. If you operate a small business, then you may install and use the software on up to ten (10) devices in your business."
Even not for this specific case, from my own experience I dont tend to see msi files available its more often just exe for installation. So i would really like to know the best practice for deploying software by group policy? I am interested in how experienced people go about this.
Why not use .exe from a file share in a group policy or logon script ?
you can use psexec to run it manually in your environment for all computers in minutes however downside is to have all machines running at that time
you can use psexec to run it manually in your environment for all computers in minutes however downside is to have all machines running at that time
Active today
Many .exe installs are just .msi's with an .exe wrapper that automatically sends some flags to the MSI. There are very few exceptions (but MSE is one of them) where you can't extract the msi and use GP to deploy it.
Notes on many apps can be found at www.appdeploy.com on how to find and use the .msi for any particular package you are looking for.
With that said, GPSI really does fall over when deploying non-MSI files and if you *can't* get an MSI, I don't recommend ever using GPSI. GPSI also doesn't scale well (no BITS, can hit network bandwidth hard), so if touching machines directly is too difficult (too many machines) then it also means you are large enough to invest in a better software deployment package than GPSI does natively.
There is a reason MS has System Center Configuration Manager. GPSI doesn't compete with it simply because GPSI doesn't have the robust feature set. Similary, for mid-sized networks, you have System Center Essentials. Both will deploy .exe's painlessly where GPSI falls over.
Finally for the very small window where you need more than GPSI, but even SCE is too big, I like a product called SpecOps Deploy from www.specopssoft.com ....scales well, good reporting for licensing and compliance management, and better/easier network resources usage than GPSI offers.
GPSI really is a starter technoogy and great for the smallest of small networks, but it has its limitations that, once you hit them, (and non .msi files is definitely one of them) then it is time to look at an add-on product to do the job.
HTH,
-Cliff
Notes on many apps can be found at www.appdeploy.com on how to find and use the .msi for any particular package you are looking for.
With that said, GPSI really does fall over when deploying non-MSI files and if you *can't* get an MSI, I don't recommend ever using GPSI. GPSI also doesn't scale well (no BITS, can hit network bandwidth hard), so if touching machines directly is too difficult (too many machines) then it also means you are large enough to invest in a better software deployment package than GPSI does natively.
There is a reason MS has System Center Configuration Manager. GPSI doesn't compete with it simply because GPSI doesn't have the robust feature set. Similary, for mid-sized networks, you have System Center Essentials. Both will deploy .exe's painlessly where GPSI falls over.
Finally for the very small window where you need more than GPSI, but even SCE is too big, I like a product called SpecOps Deploy from www.specopssoft.com ....scales well, good reporting for licensing and compliance management, and better/easier network resources usage than GPSI offers.
GPSI really is a starter technoogy and great for the smallest of small networks, but it has its limitations that, once you hit them, (and non .msi files is definitely one of them) then it is time to look at an add-on product to do the job.
HTH,
-Cliff
Featured Post
WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network. Check out our latest Quarterly Internet Security Report!
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Popular third-party chat platforms like Slack, Discord, and Telegram are just a few of the many new productivity applications that are being hijacked by cybercriminals to create command-and-control (C&C) communications infrastructures for their malw…
We take a look at some of the most common obstacles that IT teams run into as they work relentlessly to keep all the alarms and sirens from going off at once.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software.
Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders.
Click on Start and then select Computer to view the available drives on the se…
Suggested Courses
Course of the Month14 days, 20 hours left to enroll
649 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.