GPO installation of Office Standard 2010

Posted on 2011-03-23
Last Modified: 2013-11-14
I am going to try and not rant... but I have been trying for so long to get this to work, that I am beginning to think its not supposed to work.

I tried to get Office 2007 to install via GPO, with very little success. So, I decided to try my hand at 2010. This, so far, is not going much better.

I have followed the given articles for the install, and the best I can get is:

Wed 03/23/2011  9:47:34.18 Setup ended with error code 5.
Wed 03/23/2011 10:13:57.73 Setup ended with error code 30030.

Same log file for the same machine, two different attempts.

The error 5 led me to add the machine group to the "User" who has permission to run the install rather then focusing on the users.

The error 30030, as far as I can tell, does not exist.

Attached are my "config.xml" and the batch file I am running in the GPO startup scripts section. Office2010TP.cmd config.xml
Question by:RKoons
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 16

Assisted Solution

speshalyst earned 166 total points
ID: 35200439
Setup ended with error code 30030 - That means you have an Invalid CDKey

Author Comment

ID: 35202381

My first problem was that I could not find that article.

Here is where I am now:

I tried the Group Policy again, and it did not run.

So, to test the batch file, I simply started the batch file from a command line... and it worked!

The two remaining problems I have now are:

Getting it to run from the GPO

Getting it to install without re-installing Office 2003 (Which it is replacing). Office 2003 was installed via GPO, and the batch file, combined with the .MSP and the .xml did remove it. But after a reboot, 03 was back again.

I know I still have the old 2003 install GPO assocaited with the Test Group in A.D. I am working with. Should I remove this GP?


Expert Comment

ID: 35341550
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 35354925
Thanks... I will be working on this again tomorrow and will see what comes out of it!

Author Comment

ID: 35358943
Thanks Mathi28, but I am trying to do this without investing in more software. This product might work, but the standard method should work as well.
LVL 58

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 166 total points
ID: 35431405
Short answer is that office 2010 cannot be installed via GPSI. Because of a combination between the way office is laid out on media compared to an administrative share and how the gp client accesses shares during a GPSI install, it simply fails.

If you are on a network large enough that centralized deployments provide a tangible benefit, there are several products that target the SMB space in both price and features. Microsoft System Center Essentials, SpecOps Deploy both come to mind, and there are yet others. The price per station is quite low, easily a fraction of the office license alone. And they pay for themselves in the time saved (salary cost) per workstation.

So, while i understand that you don't want to go 3rd party, in this case, because it is Office 2010, you should consider it if centrally managing deployments matters to you. You probably could've bought a product already if you had spent the money on a purchase that you've spent in time testing and tweaking batch files, etc.

Trust me, having gone down this road, it is worth it.

LVL 40

Expert Comment

by:Vadim Rapp
ID: 35432171
The options to deploy Office 2010 are listed at, and as you can see, group policy is not one of them - other than by using computer startup script.

Author Comment

ID: 35440470
That is what I am doing...

I am following the instructions provided -I even copied their script to use. I can get it to uninstall the old version, but not install the new one.

Here is the text from he article you mentioned that I have been following:

"Administrators can use Group Policy to assign computer startup
scripts to deploy Office 2010. A script can be written in any
language that is supported by the client computer. Windows
Script Host-supported languages, such as VBScript and JScript,
and command files are the most common."

...Sorry. I'm not annoyed at you, just the process.

LVL 40

Expert Comment

by:Vadim Rapp
ID: 35440520
ok, so I assume you are using a script. You don't assign or publish some MSI under "software installation". It then does not matter whether this script runs from group policy, or launched by some other means.

What specifically does not work? error message? if I understand correctly, the script you created did run when you launched it by yourself, but it did not run when you specified it as machine startup script in group policy. What exactly happened? and where did you put it? since the script is being run by the machine account, you have to give appropriate permissions to the share (or whatever the place is) with the script, and with Office installation, so local machine account can access it.

Author Comment

ID: 35440754
I am running a sctript...

Nothing under "Software Installation"

Basically, unless you check the error logs, you never would know that something was supposed to run.

The .bat file is being placed in the Sysvol directory as instructed:


You have a point though that I never thought of: is it the local admin that is supposed to be running the script?

I was thinking it was the Domain admin because the Domain Admin has local assess and control. Do I need to make sure the local admin specifically has access to this directory, and if so, how do I do that?


My initial frustration was that historically, I was not getting any feedback at all -not only from here, but from other areas as well. This dialog has already been very helpfull.
LVL 40

Accepted Solution

Vadim Rapp earned 168 total points
ID: 35443085
No, not local admin (which can be many, i.e. many users can be local admins on the same computer). Local system.

When you specify a script in group policy, you can put it in two places. One,  "logon script",  is under User Configuration - this will run when any user logs on, for that user. Another, "startup script", is under Machine Configuration  - this will run when the machine starts up, before showing logon screen, and with local machine's credential. This means that if your .bat file launches an application from some share, probably where you have the setup of Office, that share must have permissions for the local systems of all workstations in your domain. This can be achieved by adding Domain Computers to the list of credentials of that share, on the tab "Security" in its Properties.


Author Comment

ID: 35723438
Sorry for the delay...

I will be looking at this again Tomorrow
LVL 40

Expert Comment

by:Vadim Rapp
ID: 35901516
LVL 59

Expert Comment

ID: 35972515
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question