Link to home
Start Free TrialLog in
Avatar of harveystephenb
harveystephenbFlag for United States of America

asked on

active directory group policy software installation

I would like to distribute a package using group policy to a group of computers.

Can I set the policy on an organizational unit which contains a group whose members are the computers I want the software installed upon?  If so, should it be a security group or distribution group and what other considerations might there be?

Windows 2003 Server.
Avatar of Hypercat (Deb)
Hypercat (Deb)
Flag of United States of America image

You would need to use a security group, assuming that your purpose is to limit the software installation to that group of computers. Also, in setting up the group policy, you need to be sure that you change the security settings on the policy itself to specify that security group as being the only group able to run the group policy. This setting is on the Scope tab when looking at the group policy in the GPMC, under Security Filtering.
Avatar of harveystephenb

ASKER

Just to clarify, the group policy is on the OU, and the only member of the OU is the security group with members to be computers on which this software should be installed.

The computer objects themselves are contained in other OUs.

Would you still say this should work?
ASKER CERTIFIED SOLUTION
Avatar of Hypercat (Deb)
Hypercat (Deb)
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial