Solved

Deploying 32bit &64bit TightVNC to Domain computers

Posted on 2014-01-29
13
2,919 Views
1 Endorsement
Last Modified: 2014-07-14
I'm trying to deploy TightVNC throughout my domain and am using Server 2008.

Some of my users have Windows XP and some have Windows 7.  

Will this batch file work correctly?

if exist "C:\Program Files (x86)\TightVNC" goto :eof ELSE
if exist "C:\Program Files\TightVNC" goto :eof ELSE
"c:\vnc\tightvnc-2.7.2-setup-64bit.msi" /S
if exist "C:\Program Files\TightVNC" goto :eof ELSE
"c:\vnc\tightvnc-2.7.2-setup-32bit.msi" /S
regedit /S "c:\vnc\tightvnc.reg"
net stop "TightVNC Server"
net start "TightVNC Server"
rmdir /s /q "C:\Documents and Settings\All Users\Start Menu\Programs\TightVNC\"

I've created a shared folder on the server containing both msi's the TightVNC registry key, and the above batch file.

When I right-click on the "Computers" OU in Active Directory, there's no Group Policy tab.  So how am I pushing this out to all of my computers.

Please help!
1
Comment
Question by:andreaEdwards
  • 7
  • 6
13 Comments
 
LVL 24

Expert Comment

by:lionelmm
ID: 39824479
The first question is where do you do this. There are better ways than the way I used but it works. Do you use a logon script right now? If you do then just have that logon scripts call this one. If you don't use a logon script you can go to domain group policy and add a logon script (I am assuming they all logon to a domain, a server, right?--if not I can give different instructions). Otherwise on the domain server go to Administrative Tools, then Group policy management, then edit the "default domain policy". Then go to Computer Configuration, Policies, Windows Settings, Scripts and Startup--click add and put in the path the the script (logon file) that contains you batch file above. Make sure this is a path that everyone has access and the proper permissions to to something like \\servername\logon-batch-sharename\file-name.bat. This will ensure that when the computer is s started (Startup Script) this file will run (if you want it to run each time a user logons on we will have to put it in a different location so let me know).
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 39824547
The other question you asked is whether your batch file will run. The best way to test this is to run it locally on a Windows XP and then a Windows 7 PC and see. To me it looks like it should except I do not think your lines for XP and Win7 installs will work. You want the 64bit to run if it is Win7 and the 32 if it is XP. Your current batch is only checking to see if the program is currently installed, and that should work but if not the batch needs to know what version of the setup to use. Check out this link as to how he does it http://www.grimadmin.com/article.php/batchfile-easy-way-to-detect-os-version
0
 

Author Comment

by:andreaEdwards
ID: 39827223
Thank you so much for your responses!  And thank you for the Group Policy tips!

I will try the following batchfile on Monday in a test environment:

@echo off
ver | find "6.1" > nul
if %ERRORLEVEL% == 0 goto Win7
 
ver | find "5.1" > nul
if %ERRORLEVEL% == 0 goto WinXP
 
:Win7
echo Running Windows 7 Script
if exist "C:\Program Files\TightVNC" goto :eof ELSE
"c:\vnc\tightvnc-2.7.10-setup-64bit.exe" /S
regedit /S "c:\vnc\tightvnc.reg"
net stop "TightVNC Server"
net start "TightVNC Server"
rmdir /s /q "C:\Users\All Users\Start Menu\Programs\TightVNC\"
goto exit
 
:WinXP
echo Running Windows XP Script
if exist "C:\Program Files (x86)\TightVNC" goto :eof ELSE
"c:\vnc\tightvnc-2.7.10-setup-32bit.exe" /S
regedit /S "c:\vnc\tightvnc.reg"
net stop "TightVNC Server"
net start "TightVNC Server"
rmdir /s /q "C:\Documents and Settings\All Users\Start Menu\Programs\TightVNC\"
goto exit
 
:exit
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 39827609
if %ERRORLEVEL% == 0 goto Win7
OK this need to be zero it looks like you may have an o but that just may be the screen and what I am seeing
0
 

Author Comment

by:andreaEdwards
ID: 39842290
I'm having all sorts of problems with this.  First of all, "Computers" is a container rather than an OU.  GPO is asking for an msi rather than a batch file.  I've decided to push the 32bit to all of the workstations because they all have the "Program File(86)" folder and I've tried it on a 64bit workstation and it works just fine.

So, if I Assign the tightvnc-32bit.msi installation under Computer Configuration/Software Installation, how can I ensure a silent install?  I don't want users to have to answer the few questions that come up during installation!

I hope someone can help me so that I don't have to manually install almost 200 workstations!

Thank you.
0
 
LVL 24

Assisted Solution

by:lionelmm
lionelmm earned 500 total points
ID: 39843194
The silent install depends entirely on the program, in this case tightvnc-32bit.msi, what options it offers. If you look at this link it gives some examples of how to do it with no user interaction http://www.tightvnc.com/doc/win/TightVNC-installer-2.5.2.pdf
0
Integrate social media with email signatures

Is your company active on social media? Do you also use email signatures? Including social media icons in your email signature is a great way to get fans for free. Let all your email users know you’re on social media quickly and easily, in a single click.

 

Author Comment

by:andreaEdwards
ID: 39844359
I have a saved copy in my reference folder.  The "Installing Silently" section sites Command Line prompts.

Do I have command line options in Group Policy application installation?

Perhaps I should change direction and use the gpo/computer_ configuration/script, or include my batch file inside of the default Domain Policy.  

In otherwords, how do I introduce this batch file into GPO for silent installation to my users/computers?

Thank you for any assistance.
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 39844370
Group policy is not a command line product -- it is part of active directory management features -- think of it as a set of policies to control your IT infrastructure. Now you can use GPO software deployment but I am not that familiar with it. I use group policy and either computer start up scripts or user logon scripts (batch files, VB scripts, powershell scripts) to run program installs and use the programs command line features to install them as I want them installed. Once you have a batch file that works put it in a central location that all your systems have access to like \\servername\servershare or \\servername\netlogon and then point to that script by adding it to group policy Computer Configuration, Policies, Windows Settings, Scripts and Startup with \\servername\netlogon\batch-file-name.bat
0
 

Author Comment

by:andreaEdwards
ID: 39867966
O.K.

Sorry I couldn't get back to you sooner!

Here's what I've tested and it works as a silent install:

==================================================
msiexec /i tightvnc-2.7.10-setup-32bit.msi /quiet /norestart

ADDLOCAL=Server
SERVER_REGISTER_AS_SERVICE=1
SERVER_ADD_FIREWALL_EXCEPTION=1
SERVER_ALLOW_SAS=1

SET_ALWAYSSHARED=1
VALUE_OF_ALWAYSSHARED=1

SET_USEVNCAUTHENTICATION=1
VALUE_OF_USEVNCAUTHENTICATION=1
SET_PASSWORD=1
VALUE_OF_PASSWORD=XXXX
======================================================

Since time is of the essence, I'm forgoing identifying the Windows Version and installing the 32bit on all of the workstations.  I know, it's the coward's way, but the 32bit does work on 64bit workstations.  Or will adding my earlier batchfile into this one work?

Thank you for extending your patience and knowledge!
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 39868027
If you tested the latest post and it works you can add it to your earlier batch but you must change the path for where your install files are located, to a place where all systems will have access to--you have
msiexec /i tightvnc-2.7.10-setup-32bit.msi /quiet /norestart

for users on remote systems this needs to point to a central location, example
msiexec /i \\servername\sharename\tightvnc-2.7.10-setup-32bit.msi /quiet /norestart
0
 

Author Comment

by:andreaEdwards
ID: 40172221
My apologies for seemingly being MIA, but I (like everyone) have had a lot of other projects going on.

I finally used Orca to create a transform for a silent installation and used Group Policy/Computer Configuration/Policies/Software Settings/Software installation/New Package.  It's worked well for all of my domains (which are separate and not configured under a Forest) except one because of a minor log-on problem.  I edited that transform in Orca with a brand new download of TightVNC and replaced both the msi and the mst in the share.  

So now I'm getting the following error:  "The List of modifications cannot be applied to this package.  An error occurred accessing the software installation data in the active directory."  In Event Viewer I'm told "Error applying transforms.  Verify that the specified transform paths are valid."

I'm thinking that creating a brand new transform.mst, rather than editing the old one, with a brand new msi may do the trick.  I'm also doing this on an XP client, so upgrading to windows 7 might be the answer.  I'll let you know, but if you have any suggestions, I'm wide open!

I plan on accepting multiple solutions because all of you led me a little closer to this journey's end.

Thank you.
0
 
LVL 24

Accepted Solution

by:
lionelmm earned 500 total points
ID: 40172336
I'm with you--better to do a new rather than editing, although it is more more work but in the long run is probably more likely to work as intended.
0
 

Author Closing Comment

by:andreaEdwards
ID: 40194895
Thank you so much for your invaluable insight and infinite patience!
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

Suggested Solutions

The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now