GPO to Install Software for users

I would like to deploy GPO in order to install App-V application  for certain user groups, however in our environment we have PCs that are shared by users, I mean some work 1st shift others work 2nd shift .
I wonder when the App-V Application is deployed for User1 on PC1, then if user2 logs in to PC1 whether he can also run The App-V application,  since it is installed on the same computer.

Any help will be very much appreciated.

Thanks
jskfanAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
Hi.

Please read http://blogs.technet.com/b/appv/archive/2008/08/25/assigning-application-packages-on-a-per-machine-basis.aspx it's right about this. Please note: SoftGrid IS App-V.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jskfanAuthor Commented:
I do not think the link answers my question.
My question is if I deploy App-v client to user1 on PC1 then user2 logs in to PC1, would user2 be able to run App-v Client ?

the other grey area also, after you deploy the App-v client to end user, then you sequence other applications such as( word,excel,etc..) to the end user. Would this be like a profile? I mean whatever computer the user logs in He/She will be able to run App-v client and find the same Apps inside the client? as long as he logs in to the same domain of course.
0
McKnifeCommented:
"I do not think the link answers my question." - really? It sounded just like what the link is about. The links explains a way to deploy App-V applications machine wide= to all users of a system. I thought this is what you are trying find, because it implies, that by default, those applications are indeed deployed per-user and NOT per system, so no, user2 would not be able to run what you deployed for user1 - unless you followed those instructions.
0
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

compdigit44Commented:
The following link building off exacting what McKnife was saying and shows you how to assign specific user / computers to  App-v

http://www.virtualizationadmin.com/articles-tutorials/application-virtualization-articles/app-v-basics-installing-and-configuring-app-v-5-infrastructure-part2.html
0
jskfanAuthor Commented:
We are still disconnected...
Let's  forget about App-V for a moment.
If you deploy MS Word msi file through  GPO to users OU. let's say to Accounting OU
User1 is in Accounting OU, logs in to PC1
User2 is in Marketing OU , logs in also to PC1

Logically, User2 should not be able to run MS Word.
Correct ?

==============
Now let's go back to APP-V Client, you deploy it from msi file through GPO to Accounting OU
User1 is in Accounting OU, logs in to PC1
User2 is in Marketing OU , logs in also to PC1

Logically, User2 should not be able to run App-V client.
Correct ?
0
McKnifeCommented:
App-v is per user. Normal msi is always per machine.
0
jskfanAuthor Commented:
cannot you deploy app-v  as msi  through GPO ?
otherwise you will have to go to each machine and install it manually

you said msi per machine. I believe if you want to deploy a software such as word, excel through GPOs you need msi file, you can deploy it to users OU or computers OU
0
McKnifeCommented:
You misunderstood.

What you deploy a normal MSI is always available to all (unless you are able to set options that prevent that). So it does not matter if you install the normal msi per computer or per user, the only difference is, that if per user, the install is on demand, the user may initiate the installation.
App-V deployment however is per user. If you need it to be per machine, use the steps outlined in my link.
0
jskfanAuthor Commented:
I have packaged some software in the past as msi and deployed them through GPO per user.
0
jskfanAuthor Commented:
So APP-V client is not deployed through GPO as msi ?
if so then  in what extension is it deployed ?
0
McKnifeCommented:
You can deploy app-v - where did I write you can't? :)
0
jskfanAuthor Commented:
The link you provided is about applications within App-V client, to whom to assign them.
What I was asking is App-V client itself , when you deploy it to end users.
0
McKnifeCommented:
Look at https://technet.microsoft.com/en-us/library/jj713460.aspx?f=255&MSPPError=-2147217396 there's a section "To install the App-V 5.0 client by using the Windows Installer (.msi) file"
Is there any difference made between deployment to users or computers? No. Because there is no difference.
0
jskfanAuthor Commented:
http://blog.coretech.dk/kaj/how-to-deploy-app-v-5-sp1-client-through-group-policy/

the example above is clear, but apparently  it is deployed to computers, so every user that logs in to that computer will be able to run App-V
0
McKnifeCommented:
Not If the deployment of app-v apps (not the client but the apps) is per user by default, which is where we started.
0
jskfanAuthor Commented:
If you check the title of My question, it is about GPO.
App-v apps (applications inside App-v client) do not require GPO

However the App-v client itself requires GPO or third party to install on specific computers or to deploy it to specific users.

I was looking for the second one if it is deployed to user1 on PC1 and use2  also logs in to PC1, will they  both  be able to open App-v client ? technically the answer will be NO.
However in our environment in some cases the answer is YES, then I was wondering if our Help Desk staff which has Local administrator on all PCs has installed App-v client locally on some PCs, in this case user1 as well as user2 will both be able to run App-v client










1
0
McKnifeCommented:
If you deploy the app-v-client-MSI-package, it will be available to all users. No matter how you deploy it. That's normal behavior for MSI packages.
0
jskfanAuthor Commented:
So how do you Deploy App-V client per user ? do you repackage it to another extension other than MSI
 Some users are not supposed to have it.
0
McKnifeCommented:
I already wrote that you can't install it just for one user. To prevent access, you could however edit the ACLs of the app-v client. ACLs can be deployed using GPOs.
0
jskfanAuthor Commented:
I will come back to this topic at later time
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.