Solved

deploying .Net 4.5 and WMF 4.0 via GPO scripts

Posted on 2014-02-10
7
1,823 Views
Last Modified: 2014-02-16
I created a new test OU, places 4 windows 7 virtual machines within, 3 are Win7 SP1 Pro and the last is Win7 SP1 Enterprise.

I blocked inheritance on that OU, created a new GPO inside it, the only function of the GPO is to apply two shutdown scripts.

The first is:
rem script to install .net 4.5
@echo off
reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319\SKUs\.NETFramework,version=v4.5"
if %errorlevel%==1 goto installnet
if %errorlevel%==0 goto exit
:installnet
start /wait "\\domain\netlogon\bitlocker\dotnetfx45_full_x86_x64.exe /ceipconsent /norestart /q"
:exit
exit

the second is:
rem Batch file pushes MWF 4.0 (powershell 4.0)
@echo off
reg query "HKLM\SOFTWARE\Microsoft\PowerShell\3\powerShellEngine" /f 4.0
if %errorlevel%==1 goto installwmf
if %errorlevel%==0 goto exit
:installwmf
start /wait wusa.exe "\\domain\netlogon\bitlocker\Windows6.1-KB2819745-x64-MultiPkg.msu" /quiet /norestart
:exit
exit

I gave the test vm's about 20 minutes before forcing a GPupdate, and shutting down.  All of the machines took longer to shut down than normal.  Once shutdown I brought them all back up and checked in Programs and Features/Installed Updates and should have seen entries for Microsoft Windows Management version 4 and .Net 4.5 but I did not see those on any of the machines.

I can run a gpresult and see the GPO in question being applied successfully, I can see mention of the two batch files as Shutdown scripts however neither actually are ran it seems.
In the System event logs on all 4 I see event 1125, which then checking the Group Policy Operational log I see event 7016.  Which says its an error but the text says Completed so IDk what's up with this.
0
Comment
Question by:Ben Hart
  • 5
  • 2
7 Comments
 
LVL 21

Expert Comment

by:Joseph Moody
ID: 39849943
Do these scripts install the updates if ran manually?
0
 
LVL 14

Author Comment

by:Ben Hart
ID: 39850125
Good question.. the push_net45.bat script runs successfully.  Installed .Net 4.5 quietly without error.  The Push_wmf4.bat does not.  I spent the past 30 minutes tweaking and trying to get it to run and I think it has to do with the call to wusa.exe because the .net batch correctly runs the exe from a UNC path.  I even changed the WMF4 batch to copy the file to %temp% then tried calling it from %temp% but wusa never actually starts.  Her'es what I have on that script so far:

@echo off
pushd %~dp0
echo %CD%
copy Windows6.1-KB2819745-x64-MultiPkg.msu %temp%
reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\3\powerShellEngine" /f 4.0
if %errorlevel%==1 goto installwmf
if %errorlevel%==0 goto exit
:installwmf
start /wait wusa.exe "%temp%\Windows6.1-KB2819745-x64-MultiPkg.msu" /quiet /norestart
:exit
pause
0
 
LVL 21

Expert Comment

by:Joseph Moody
ID: 39850138
By chance, have you seen this article:

http://4sysops.com/archives/deploying-powershell-4-with-group-policy/

It covers the WMF install and might help.
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 14

Author Comment

by:Ben Hart
ID: 39850180
That's exactly what I have been following.  The WMF script is what is not working for me, as you can tell from my first post the scripts I pasted in here are exactly from his website.
0
 
LVL 14

Accepted Solution

by:
Ben Hart earned 0 total points
ID: 39850317
Initial tests show that shit might be my solution

@echo off
pushd %~dp0
echo %CD%
reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\3\powerShellEngine" /f 4.0
if %errorlevel%==1 goto installwmf
if %errorlevel%==0 goto exit
:installwmf
expand -f:* Windows6.1-KB2819745-x64-MultiPkg.msu %temp%
pkgmgr.exe /n:%temp%\Windows6.1-2819745-x64.xml /quiet /norestart
:exit
0
 
LVL 14

Author Comment

by:Ben Hart
ID: 39851162
Another question I have to answer myself via a bandaid.  Not sure why I'm paying membership fees when the past half a dozen questions barely got any response.
0
 
LVL 14

Author Closing Comment

by:Ben Hart
ID: 39862479
I was referred to the website I had been using as a guide by the only person who tried helping me.  No one else even tried to help.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

This article was inspired by a question here at Experts Exchange (http://www.experts-exchange.com/Software/Photos_Graphics/Images_and_Photos/Q_28629170.html). The requirements stated in that question are (1) reduce the file size of a large number of…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now