• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 314
  • Last Modified:

active directory group policy software installation

I would like to distribute a package using group policy to a group of computers.

Can I set the policy on an organizational unit which contains a group whose members are the computers I want the software installed upon?  If so, should it be a security group or distribution group and what other considerations might there be?

Windows 2003 Server.
  • 2
1 Solution
Hypercat (Deb)Commented:
You would need to use a security group, assuming that your purpose is to limit the software installation to that group of computers. Also, in setting up the group policy, you need to be sure that you change the security settings on the policy itself to specify that security group as being the only group able to run the group policy. This setting is on the Scope tab when looking at the group policy in the GPMC, under Security Filtering.
harveystephenbAuthor Commented:
Just to clarify, the group policy is on the OU, and the only member of the OU is the security group with members to be computers on which this software should be installed.

The computer objects themselves are contained in other OUs.

Would you still say this should work?
Hypercat (Deb)Commented:
Yes, it will still work.  The controlling factor is that you set the group policy so that only members of that security group can access (run) the policy. Actually, you don't even have to put the security group in a separate OU, unless you want to do this for clarity's sake in managing the policy. You can simply create the policy at the domain level and then specify in the Security Filtering section that only members of that security group can run the policy.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now