Assign software to remote users

  • Thread starter Thread starter Catalin Bucataru
  • Start date Start date
C

Catalin Bucataru

Hello! The post isn't small, so I thank you in advance for reading it.



Our network has 3 Windows 2000 Server, and over 100 desktop computers,
running Windows 2000 Workstation or Windows XP Professional. I created a MSI
package and I want to install that software to some of the computers. I
created an OU; I put the target computers inside that OU. I created a new
GPO for that OU, went to Computer Configuration -> Software Settings ->
Software Installation and created a new Package. Everything worked fine with
the computers in the LAN.



Unfortunately, I also have workstations outside of the LAN. They connect to
the LAN using a local ISP an then a VPN connection. I tested the GPO for
those computers. I logged-in with a domain user that belonged to that OU, I
checked the "Log in using dial-up connection", the computer established the
connection to the ISP and then to our server, BUT the Computer Configuration
of the GPO didn't applied. In fact, none of the settings from the GPO's
Computer Configuration applied.



I ran gpresult on both the computer from the LAN and the remote computer. In
the section called "The computer has been assigned the following
applications:", the remote computer has "(None)" but the computer from the
LAN has the details about the application.



I also noticed that the package is deployed before the login window appears.
The remote computer however, doesn't have a connection with the Domain
Controller until the user login, and after that, it seems that it doesn't
care about the Computer Configuration anymore.



Does anybody know how to resolve this problem?

Thanks a lot!
 
Hi Cataline. There is no other way than establish the connection before the
computer are started. This can be done with a router or another such device.
How ever you may should assign applications to remote users in the User
Configuration part to go around this.
 
Catalin Software Installation can't be updated or refreshed by any command
they can only be updated during startup or logon.

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup

Catalin Bucataru said:
Thanks for the answer! I forgot to mention that I also tried the Assign to
Click to expand...
User method. Is true that this method works, but the problem is that the
application is not actually installed on the target computer. I need to
install a COM+ Application Proxy, so if I use the Assign to User, or Publish
to User method, the application appear in the Add/Remove Programs, but not
in the Component Services -> Com+ Applications. That's why I wanted to use
Assign to Computer...
What I don't understand: even if form the target computer I execute
Click to expand...
"secedit /refreshpolicy machine_policy" from command prompt, after the VPN
connection, the Computer Configuration Settings does not apply... Is that
Windows 2000 behavior "by design"?
 
Catalin Bucataru said:
I ran gpresult on both the computer from the LAN and the remote computer. In
the section called "The computer has been assigned the following
applications:", the remote computer has "(None)" but the computer from the
LAN has the details about the application.
Click to expand...

Group Policy detects slow links and will not deploy software installs. You
can alter slow link detection setting so that softwware installed.

This is available in both Computer Configuration and User
Configuration, under the Administrative Templates\System node.
 
Back
Top