Group Policy Software Install

Posted on 2011-03-18
Last Modified: 2012-05-11
I was wondering if there was a software that would allow a user to specify the installation account when deploying through Group Policy in Server 2003.  I also need to be able to make changes to the install package to specify server IP and certain internet settings on the install package.  Does anyone know of a software like this?
Question by:MHCIT
  • 3
  • 2
  • 2
  • +1
LVL 22

Expert Comment

by:Joseph Moody
ID: 35167712
Software is installed by system when deployed in group policy. You could do a startup/login script that does a runas.

Most likely, the server IP/settings are stored in the registry or a local .ini file. You can deploy those settings with Group Policy preferences.
LVL 13

Expert Comment

by:Felix Leven
ID: 35168086
As Jmoody10 mentioned: software istalled by a GPO ist deployed before user login in the context of the system account.

There are Packaging tools like WISE Setup, that can repackage and customize installations of software.

Example: Convert EXE installer to MSI for example:
-First you need a clean windows system (thats what i prefer) only the most critical software installed( drivers, service packs)
-install wise -> start the capture
-install the exe file
-carefully read all the registry file diffs found by the software
-make changes to shortcuts, ini files, whatever
-repack the app as msi file

A must read is covering all aspects of software automation, packaging and deploying it to the end user.

Author Comment

ID: 35168123
The problem is the software is a two part software, the first part puts the installer on the system, then someone has to log on as a user with local admin rights to run the second part to set up the connection to server and add info to trusted sites in IE.  We have approximately 300 pc's that this needs to go on, and with only 2 administrators, it could take a couple of weeks to do.  I know I have seen software somewhere that this can all be set up in the msi file to use as the push, but I can't remember what it is.  I have tried advanced installer, but the options I'm looking for aren't offered in it.
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 13

Expert Comment

by:Felix Leven
ID: 35168201
wise can do it, but not cheap and you need to work with ist some time.

if the first installer ist msi?

Deploy msi over gpo, then check with a loginscritp if the FIRST MSI installer ist allready deployed -> if it's deployed, check if the second installer deployed already -> if install complete -> quit logonscrip


install the second of the installer with the RUNAS command and whatever user you like use for the installation -> quit logonscrip

Author Comment

ID: 35168218
The package is an exe file, then after the first push, it creates another exe file that has to run to finish set up.
LVL 13

Expert Comment

by:Felix Leven
ID: 35168246
then do a logonscript and run both part in it

check if second exe exists - if not runsas first exe from networkshare else runas second exe from local hdd -> if bost parts are installe do nothing and exit script

Accepted Solution

LikeWindows earned 250 total points
ID: 35168249
Is it just adding info to trusted sites in IE ? If you would have an Windows Server 2008 Domain Controller available in your network there would be a Group Policy available under User Configuration/Windows Settings/Internet Explorer Maintenance/Security where you could just add info to trusted sites in IE . But that is only available if there is at least one 2008 DC available.

Otherwise I would use the IE Administrative Kit (IEAK) which is available as download from Microsoft to add these settings.


Expert Comment

ID: 35168255
This is the Link to IEAK :

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question