Solved

Deploying 32bit &64bit TightVNC to Domain computers

Posted on 2014-01-29
13
3,011 Views
1 Endorsement
Last Modified: 2014-07-14
I'm trying to deploy TightVNC throughout my domain and am using Server 2008.

Some of my users have Windows XP and some have Windows 7.  

Will this batch file work correctly?

if exist "C:\Program Files (x86)\TightVNC" goto :eof ELSE
if exist "C:\Program Files\TightVNC" goto :eof ELSE
"c:\vnc\tightvnc-2.7.2-setup-64bit.msi" /S
if exist "C:\Program Files\TightVNC" goto :eof ELSE
"c:\vnc\tightvnc-2.7.2-setup-32bit.msi" /S
regedit /S "c:\vnc\tightvnc.reg"
net stop "TightVNC Server"
net start "TightVNC Server"
rmdir /s /q "C:\Documents and Settings\All Users\Start Menu\Programs\TightVNC\"

I've created a shared folder on the server containing both msi's the TightVNC registry key, and the above batch file.

When I right-click on the "Computers" OU in Active Directory, there's no Group Policy tab.  So how am I pushing this out to all of my computers.

Please help!
1
Comment
Question by:andreaEdwards
  • 7
  • 6
13 Comments
 
LVL 24

Expert Comment

by:lionelmm
ID: 39824479
The first question is where do you do this. There are better ways than the way I used but it works. Do you use a logon script right now? If you do then just have that logon scripts call this one. If you don't use a logon script you can go to domain group policy and add a logon script (I am assuming they all logon to a domain, a server, right?--if not I can give different instructions). Otherwise on the domain server go to Administrative Tools, then Group policy management, then edit the "default domain policy". Then go to Computer Configuration, Policies, Windows Settings, Scripts and Startup--click add and put in the path the the script (logon file) that contains you batch file above. Make sure this is a path that everyone has access and the proper permissions to to something like \\servername\logon-batch-sharename\file-name.bat. This will ensure that when the computer is s started (Startup Script) this file will run (if you want it to run each time a user logons on we will have to put it in a different location so let me know).
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 39824547
The other question you asked is whether your batch file will run. The best way to test this is to run it locally on a Windows XP and then a Windows 7 PC and see. To me it looks like it should except I do not think your lines for XP and Win7 installs will work. You want the 64bit to run if it is Win7 and the 32 if it is XP. Your current batch is only checking to see if the program is currently installed, and that should work but if not the batch needs to know what version of the setup to use. Check out this link as to how he does it http://www.grimadmin.com/article.php/batchfile-easy-way-to-detect-os-version
0
 

Author Comment

by:andreaEdwards
ID: 39827223
Thank you so much for your responses!  And thank you for the Group Policy tips!

I will try the following batchfile on Monday in a test environment:

@echo off
ver | find "6.1" > nul
if %ERRORLEVEL% == 0 goto Win7
 
ver | find "5.1" > nul
if %ERRORLEVEL% == 0 goto WinXP
 
:Win7
echo Running Windows 7 Script
if exist "C:\Program Files\TightVNC" goto :eof ELSE
"c:\vnc\tightvnc-2.7.10-setup-64bit.exe" /S
regedit /S "c:\vnc\tightvnc.reg"
net stop "TightVNC Server"
net start "TightVNC Server"
rmdir /s /q "C:\Users\All Users\Start Menu\Programs\TightVNC\"
goto exit
 
:WinXP
echo Running Windows XP Script
if exist "C:\Program Files (x86)\TightVNC" goto :eof ELSE
"c:\vnc\tightvnc-2.7.10-setup-32bit.exe" /S
regedit /S "c:\vnc\tightvnc.reg"
net stop "TightVNC Server"
net start "TightVNC Server"
rmdir /s /q "C:\Documents and Settings\All Users\Start Menu\Programs\TightVNC\"
goto exit
 
:exit
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 39827609
if %ERRORLEVEL% == 0 goto Win7
OK this need to be zero it looks like you may have an o but that just may be the screen and what I am seeing
0
 

Author Comment

by:andreaEdwards
ID: 39842290
I'm having all sorts of problems with this.  First of all, "Computers" is a container rather than an OU.  GPO is asking for an msi rather than a batch file.  I've decided to push the 32bit to all of the workstations because they all have the "Program File(86)" folder and I've tried it on a 64bit workstation and it works just fine.

So, if I Assign the tightvnc-32bit.msi installation under Computer Configuration/Software Installation, how can I ensure a silent install?  I don't want users to have to answer the few questions that come up during installation!

I hope someone can help me so that I don't have to manually install almost 200 workstations!

Thank you.
0
 
LVL 24

Assisted Solution

by:lionelmm
lionelmm earned 500 total points
ID: 39843194
The silent install depends entirely on the program, in this case tightvnc-32bit.msi, what options it offers. If you look at this link it gives some examples of how to do it with no user interaction http://www.tightvnc.com/doc/win/TightVNC-installer-2.5.2.pdf
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:andreaEdwards
ID: 39844359
I have a saved copy in my reference folder.  The "Installing Silently" section sites Command Line prompts.

Do I have command line options in Group Policy application installation?

Perhaps I should change direction and use the gpo/computer_ configuration/script, or include my batch file inside of the default Domain Policy.  

In otherwords, how do I introduce this batch file into GPO for silent installation to my users/computers?

Thank you for any assistance.
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 39844370
Group policy is not a command line product -- it is part of active directory management features -- think of it as a set of policies to control your IT infrastructure. Now you can use GPO software deployment but I am not that familiar with it. I use group policy and either computer start up scripts or user logon scripts (batch files, VB scripts, powershell scripts) to run program installs and use the programs command line features to install them as I want them installed. Once you have a batch file that works put it in a central location that all your systems have access to like \\servername\servershare or \\servername\netlogon and then point to that script by adding it to group policy Computer Configuration, Policies, Windows Settings, Scripts and Startup with \\servername\netlogon\batch-file-name.bat
0
 

Author Comment

by:andreaEdwards
ID: 39867966
O.K.

Sorry I couldn't get back to you sooner!

Here's what I've tested and it works as a silent install:

==================================================
msiexec /i tightvnc-2.7.10-setup-32bit.msi /quiet /norestart

ADDLOCAL=Server
SERVER_REGISTER_AS_SERVICE=1
SERVER_ADD_FIREWALL_EXCEPTION=1
SERVER_ALLOW_SAS=1

SET_ALWAYSSHARED=1
VALUE_OF_ALWAYSSHARED=1

SET_USEVNCAUTHENTICATION=1
VALUE_OF_USEVNCAUTHENTICATION=1
SET_PASSWORD=1
VALUE_OF_PASSWORD=XXXX
======================================================

Since time is of the essence, I'm forgoing identifying the Windows Version and installing the 32bit on all of the workstations.  I know, it's the coward's way, but the 32bit does work on 64bit workstations.  Or will adding my earlier batchfile into this one work?

Thank you for extending your patience and knowledge!
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 39868027
If you tested the latest post and it works you can add it to your earlier batch but you must change the path for where your install files are located, to a place where all systems will have access to--you have
msiexec /i tightvnc-2.7.10-setup-32bit.msi /quiet /norestart

for users on remote systems this needs to point to a central location, example
msiexec /i \\servername\sharename\tightvnc-2.7.10-setup-32bit.msi /quiet /norestart
0
 

Author Comment

by:andreaEdwards
ID: 40172221
My apologies for seemingly being MIA, but I (like everyone) have had a lot of other projects going on.

I finally used Orca to create a transform for a silent installation and used Group Policy/Computer Configuration/Policies/Software Settings/Software installation/New Package.  It's worked well for all of my domains (which are separate and not configured under a Forest) except one because of a minor log-on problem.  I edited that transform in Orca with a brand new download of TightVNC and replaced both the msi and the mst in the share.  

So now I'm getting the following error:  "The List of modifications cannot be applied to this package.  An error occurred accessing the software installation data in the active directory."  In Event Viewer I'm told "Error applying transforms.  Verify that the specified transform paths are valid."

I'm thinking that creating a brand new transform.mst, rather than editing the old one, with a brand new msi may do the trick.  I'm also doing this on an XP client, so upgrading to windows 7 might be the answer.  I'll let you know, but if you have any suggestions, I'm wide open!

I plan on accepting multiple solutions because all of you led me a little closer to this journey's end.

Thank you.
0
 
LVL 24

Accepted Solution

by:
lionelmm earned 500 total points
ID: 40172336
I'm with you--better to do a new rather than editing, although it is more more work but in the long run is probably more likely to work as intended.
0
 

Author Closing Comment

by:andreaEdwards
ID: 40194895
Thank you so much for your invaluable insight and infinite patience!
0

Featured Post

Are end users causing IT problems again?

You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
David Varnum recently wrote up his impressions of PRTG, based on a presentation by my colleague Christian at Tech Field Day at VMworld in Barcelona. Thanks David, for your detailed and honest evaluation!
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now