CCLCLS
asked on
assigned software packages not installing or being applied
when I go to RSOP they aren't being applied and when I go to settings tab of the GPO the assigned software isn't listed, but when I edit the policy, they are there and appear normal to me....why wont they apply?
strivoli
Did you set the GPO to the computers? In other words, is the GPO linked to an OU with the computers you wish to install to? Such policies are machine related, not user.
ASKER
yes, the computer is in the GPO and the policy is set to the OU and security is set to apply to all domain computers and authenticated users...it used to work but stopped for some reason
Go to your workstation and run gpresult. It will tell you if you workstations are reading that GP or if another one is trumping it. (gpresult /H c:\temp\gpresult.html)
If that is not the case and that policy is being applied, check to see that wtihin the policy (you will have to lookup the guid for the GP) that the files are accessible. If you applied them from a share, review the permissions and that all of the files associated with the MSI are within the folder group and that the persons or machines assigned have permissions.
It may also be that the application you are assigning is giving a message that isn't visible. attempt to install it from the command line with and without switches. This should give you the why it isn't working.
If that is not the case and that policy is being applied, check to see that wtihin the policy (you will have to lookup the guid for the GP) that the files are accessible. If you applied them from a share, review the permissions and that all of the files associated with the MSI are within the folder group and that the persons or machines assigned have permissions.
It may also be that the application you are assigning is giving a message that isn't visible. attempt to install it from the command line with and without switches. This should give you the why it isn't working.
ASKER
I can access the share. the correct GP is being applied but when look at the results, the assigned packages aren't listed.....makes no sense
Rather than doing this within the all computers OU, during this trouble shooting, you should limit the scope to a smaller environment.
Ok so re-reading your responses CCLCLS - on the GPresult command, you have to change the scope for computer assignments. Open an elevated command prompt (Vista, 7, 8) or run as admin (XP and down)
GPresult /SCOPE computer /H c:\temp\gpresultcomp.html
This will give you the applied policies to the computer. Sometimes this takes several reboots to happen. Do adobe reader first, this is an easy one.
After this, if you don't see results, check below.
Still, not seeing those indicates that it isn't yet a share permissions problem, but could be that AD hasn't replicated the changes. If you made changes on one DC, it hasn't replicated and when you login, it has a different Group policy set, this would be a reason for the difference. Verify that you are a domain admin for the domain you modifying.
Check for errors in FRS and AD replication. You can force replication from sites and services, but it may just be a waiting game. typical replication happens in 3 hours.
If you are at functional level 2003, it has to replication the whole directory 2008 does partials, but I haven't dug into how real that is.
Ok so re-reading your responses CCLCLS - on the GPresult command, you have to change the scope for computer assignments. Open an elevated command prompt (Vista, 7, 8) or run as admin (XP and down)
GPresult /SCOPE computer /H c:\temp\gpresultcomp.html
This will give you the applied policies to the computer. Sometimes this takes several reboots to happen. Do adobe reader first, this is an easy one.
After this, if you don't see results, check below.
Still, not seeing those indicates that it isn't yet a share permissions problem, but could be that AD hasn't replicated the changes. If you made changes on one DC, it hasn't replicated and when you login, it has a different Group policy set, this would be a reason for the difference. Verify that you are a domain admin for the domain you modifying.
Check for errors in FRS and AD replication. You can force replication from sites and services, but it may just be a waiting game. typical replication happens in 3 hours.
If you are at functional level 2003, it has to replication the whole directory 2008 does partials, but I haven't dug into how real that is.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
opened Microsoft case and it was resolved somehow...