how to control software installations using GP ? using SMS ?

  • Thread starter Thread starter Akhlaq Khan
  • Start date Start date
A

Akhlaq Khan

i have never used GPs to control/automate software installations on client
machines.

I have some questions regarding this:

1. Can i define packages for all type of software to be installed ? i saw
that only .msi files are accepted when defining packages. Since all software
setup are not found in .msi format, i was wondering how would i make them
available for installation.
2. How do i define what software can be installed on client machines and
what not ?
3. How do i define who has the rights to install which software on which
machines ?
4. How can i automate the installation of software on client machines ?
(like in background)
5. How can i remotely install software on client machines ?
6.Can i delegate the software installation rights to certain people for
particlar OUs ? is yes, how ?

and in last but not least ... i was thinking about trying out SMS (system
management server) for managing all the client machines and their
configurations. i wanted to know whether SMS is an alternate (and better)
choice to do all these instead of using the group policies.... any ideas
about that ?

Please help ...

Thanks ...
akhlaq.
 
Akhlaq Khan said:
i have never used GPs to control/automate software installations on client
machines.

I have some questions regarding this:

1. Can i define packages for all type of software to be installed ? i saw
that only .msi files are accepted when defining packages. Since all software
setup are not found in .msi format, i was wondering how would i make them
available for installation.

Only MSIs can be used in GPOs. There are a wide range of applications that
will create MSIs in any number of ways. For more on this, look around
postings to the MSI newsgroups, Knowledgbase, Google, etc. Most applications
are packageable in MSI format -- it's just a question of whether you're
smart enough (and if you have the right tools) to package it "right".
2. How do i define what software can be installed on client machines and
what not ?

You choose what software packages to include in which GPOs. The GPOs link to
whatever OUs you choose, and are applied to those objects.

Defining what software cannot be installed is trickier business, but think
of it this way: Installation of software is mostly a matter of putting files
and registry keys into the right places. Therefore, you can control/prevent
software installation by controlling access rights on your file system and
registry.
3. How do i define who has the rights to install which software on which
machines ?

Through access rights. When deploying software via GPO, it is installed by
the SYSTEM account, which by default, has full access to all non-network
resources.
4. How can i automate the installation of software on client machines ?
(like in background)

Package it into an MSI. When the client machine boots up, it will check
applicable group policy and (un-)install software automatically before
allowing users to log in. When a user logs in, group policy applicable to
the user is applied (including software [un-]installations).
5. How can i remotely install software on client machines ?

Again, in the ideal world this is done via MSIs. Sometimes you have to go
about it other ways. SMS is another approach.
6.Can i delegate the software installation rights to certain people for
particlar OUs ? is yes, how ?

You can assign certain groups administrator access on your workstations. The
users in these groups will then be able to install software (though this is
not necessary to install software via MSIs because computer software
installations are performed by the SYSTEM account).
and in last but not least ... i was thinking about trying out SMS (system
management server) for managing all the client machines and their
configurations. i wanted to know whether SMS is an alternate (and better)
choice to do all these instead of using the group policies.... any ideas
about that ?

I have no experience with SMS, but there was a recent thread in the MSI
newsgroup comparing GPOs and SMS. I hear that SMS is more flexible than GPOs
(and it lets you deploy non-MSI software as well).

\\ MadDHatteR
 
Back
Top