Solved

WINDOWS 2008 - GPO Priority Order

Posted on 2011-09-07
7
636 Views
Last Modified: 2012-05-12
Once Ive resolved hopefully my 'Activation' issue I will hopefully reinstall successfully this time properly and get back to my setting up a GPO for Software Deploy!!

My issue was I could never get a normal domain user to receive the Test software added to be installed on a host pc.

I did accidentally somehow install it on my DC and on my Host pc, but cant remember how, but realised something....

After creating and Linking the GPO's in GPO Management Server and providing I click the right tab on the right, there is an order of priority which I think might not be set right, hence never being able to get the software to install on the host pc..

I think last time I successfully without realising how I did it got the software to install actually on the host pc was I think by adding my normal domain user account 'Domain Admin privileges', even though I may have without realising it adjust the 'Priority order' or something!!

I have also had issues with my 'Eval' copy and due to not inputting a 'Product Key' that I dont have might be the reason for receiving 'stopped services' intermitantly and maybe to the 'Redirect folder' etc various other issues around this specific GPO issue.

It does state that if I dont add the 'Product key' I may loose some of my features etc!!

I have been given a 'Product Key' so Im hoping on install it will allow me to add this and maybe not stop services and maybe allow me to get proper 60 day use instead of a couple of days!!!
0
Comment
Question by:mikey250
  • 4
  • 3
7 Comments
 
LVL 11

Accepted Solution

by:
Ove earned 500 total points
ID: 36506706
so...don't mix up things :-)

Do you have a msi-package for your planned installation?
You may simply deploy your software on a computer-basis via GPO.
Normally you should create a new group inside ActiveDirectory Users and Computers. Then add the machines which should get the software installed as members to that group.
Inside the gpo add this group to the security-settings and remove every other group being added by default.
The "order" of the gpo's does NOT need to be changed normally.

A note to the "ProductKey" issue. If i get it right you want to deploy software which needs to be activated via a productKey. Ask the coder/seller of your software if there is a way to activate the software during/via gpo-installation. May be you may add the key into your msi-package via orca, or it may be possible to create a *.mst Transform file to add additional settings to your programm during the installation.

Ove
0
 

Author Comment

by:mikey250
ID: 36508610
Yes I was also successful in installing my test GPO Deploy Software, but at the time prior to being successful, the GPO Order Priority was just a thought, but yes you are right it appears to make no difference, but wanted to know what it was for unless it is just for tidying things up from a 'view' perspective ?

By default the ones in the list are as follows:

domain name: xxxxxx
- Default Domain Controller - Ive just deleted this one

Domain Controller:
Default Domain Controller - As not configured Ive just left this one in..!!  What is set in this?

As for 'Product key' - no..!!  What I meant before GPO was successful I had intermitant services stopping which I thought maybe the reason for not being successful before in installing software that was all.  Its ok now just wanted to know what the GPO up and down arrows were for in the 'Linked Group Policy Objects' tab!!!?
0
 
LVL 11

Assisted Solution

by:Ove
Ove earned 500 total points
ID: 36509283
ic :-)
via the rank-order you're able to give the order in which your gpo's are worked through. It might be possible that you're planning to install software which has several pre-requisites which are installed via other gpo's...

and btw:
under domain name: xxxxxx
there normally is "Default Domain Policy" and not "Default Domain Controller ".

Ove
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:mikey250
ID: 36509333
Hi Ove,  can you give me an example where it would be best for gpo's to be put in rank order and why if not done?
0
 
LVL 11

Assisted Solution

by:Ove
Ove earned 500 total points
ID: 36509412
we have > 100 gpo's inside our company, but i have NEVER used any manual ordering...so this is only rarely needed i think...

Ove
0
 

Author Comment

by:mikey250
ID: 36510060
Ok tar!! good to know!!
0
 

Author Closing Comment

by:mikey250
ID: 36941606
Yes I have got it to work with the advice albeit Ive had some intermitant issues which have lead me round in circles!
0

Featured Post

Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Dell server Power Edge 520 with a H710/H710P controler 3 30
extended monitor print screen 8 28
NTFS Permissions 6 42
SBS2008 and windows updates 2 7
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now