Solved

active directory group policy software installation

Posted on 2011-03-17
3
298 Views
Last Modified: 2012-05-11
I would like to distribute a package using group policy to a group of computers.

Can I set the policy on an organizational unit which contains a group whose members are the computers I want the software installed upon?  If so, should it be a security group or distribution group and what other considerations might there be?

Windows 2003 Server.
0
Comment
Question by:harveystephenb
  • 2
3 Comments
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 35160190
You would need to use a security group, assuming that your purpose is to limit the software installation to that group of computers. Also, in setting up the group policy, you need to be sure that you change the security settings on the policy itself to specify that security group as being the only group able to run the group policy. This setting is on the Scope tab when looking at the group policy in the GPMC, under Security Filtering.
0
 

Author Comment

by:harveystephenb
ID: 35160306
Just to clarify, the group policy is on the OU, and the only member of the OU is the security group with members to be computers on which this software should be installed.

The computer objects themselves are contained in other OUs.

Would you still say this should work?
0
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 500 total points
ID: 35160370
Yes, it will still work.  The controlling factor is that you set the group policy so that only members of that security group can access (run) the policy. Actually, you don't even have to put the security group in a separate OU, unless you want to do this for clarity's sake in managing the policy. You can simply create the policy at the domain level and then specify in the Security Filtering section that only members of that security group can run the policy.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question