active directory group policy software installation

I would like to distribute a package using group policy to a group of computers.

Can I set the policy on an organizational unit which contains a group whose members are the computers I want the software installed upon?  If so, should it be a security group or distribution group and what other considerations might there be?

Windows 2003 Server.
harveystephenbAsked:
Who is Participating?
 
Hypercat (Deb)Connect With a Mentor Commented:
Yes, it will still work.  The controlling factor is that you set the group policy so that only members of that security group can access (run) the policy. Actually, you don't even have to put the security group in a separate OU, unless you want to do this for clarity's sake in managing the policy. You can simply create the policy at the domain level and then specify in the Security Filtering section that only members of that security group can run the policy.
0
 
Hypercat (Deb)Commented:
You would need to use a security group, assuming that your purpose is to limit the software installation to that group of computers. Also, in setting up the group policy, you need to be sure that you change the security settings on the policy itself to specify that security group as being the only group able to run the group policy. This setting is on the Scope tab when looking at the group policy in the GPMC, under Security Filtering.
0
 
harveystephenbAuthor Commented:
Just to clarify, the group policy is on the OU, and the only member of the OU is the security group with members to be computers on which this software should be installed.

The computer objects themselves are contained in other OUs.

Would you still say this should work?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.