Installing using Group Policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

When I downloaded the new defender, I noticed it was a MSI file. Is it
possible to install defender using GP?
 
Hi Kelli,
That function to deploy using a GPO will be available in the future.

Ron Chamberlin
MS-MVP
 
I have already installed it via Group Policy (Win2k3 svrs to XP clients) on
to a select number of clients for testing.

So far, deployment was quick and straight forward. Standard users can see if
MS Defender has an issue and they can remove the issue too, but cant change
settings.

Admin users can do all.

Couldnt be more simple at this time.

Although im trying to find a GPO snap-in for managing 'Default' setting for
schedule scans, setting etc on the clients.

Tom
 
Tom,

Can you maybe help me out. I have it 'installing' on my laptop as a test
and it's been in GP since yesterday but has not installed. Can you contact
me directly to maybe help me out?

Kelli
(e-mail address removed)
 
hay i would be intrested in finding out how you got that to work .. mine did
not want to work either .

did you just tell it to do a update or new install ? // did it have to
uninstall the old version or AS . or did you have to do that before you did
the install of the new version

Thanks
RYan
 
An ADM file will be available at RTM--that's about as much as I know about
group policy related issues at the moment. As to when RTM is, I don't know
that either.

--
 
Hi,

I just brought the .msi package straight in to GP via software installation.
I left all the options as they were and not as an update.

But now that i think about it, these machines may or may not have had Bata1
installed, i will have to check when at work tomorrow.

my email if anyone needs spacific help (e-mail address removed) but try use
board so others can read about the issues.
 
I did the exact same thing .. Downloaded the .msi to a network share where
all software is located. Opened up GP Management, created a new GP called
Install Windows Defender and only did the software install within GP leaving
all install options default. For the GP, I have it linked to the domain and
the security filtering applyed to my desktop (which had it installed prior to
this GP - wanted to see if there would be any errors reported) and to my
laptop (which had AB loaded which I uninstalled manually). If I look at
GPResult on my laptop, it is calling GP Install Windows Defender and if I
look at my desktop it is also under my computer settings.

Desktop:
Applied Group Policy Objects
-----------------------------
RemoteDesktop Group Policy Object
Default Domain Policy
Install Windows Defender
Local Group Policy

It looks the same for my laptop, so I do not understand what is keeping my
laptop from installing this program. Or do software installs need to be on a
per user basis? It's been a couple days since the GP was created. It is
enabled and link enabled but not enforced .. btw, I'm trying to figure out
what 'enforced' means but I have not found much documentation on it.

thanks!

Kelli
 
I've been following this discussion with interest. I have Antispyware Beta 1
installed on a LOT of machines, and want to get them up to Beta 2,
preferrably with little manual effort (ok, Im lazy :-)).

I am a little confused at this point though. It seems like there are 2
issues being discussed here.

1) Ability to use the supplied .msi file to automatically install Defender
via software installation group policy.
2) Ability to configure/modify an existing Defender installation setting
options/etc.

Based on some of the replies, it appears that "2" will be available
"sometime in the future". I am fine with that answer.

What I am wondering about is "1". From what little I know about Group
Policy Softrware installation, "anything" that installs with an MSI is
installable via GPOs.

So, is there a definitive answer about installation of Defender via GPO?

Thanks in advance,

Joe
 
I think the only answer I can give to 1 is that I believe some folks have
succeeded in doing that, but I can't point to a specific message now.

Some network admin types tend to post in .networking as well as here, for
this kind of issue.

--
 
Back
Top