Windows Defender and Publish Software GPO

  • Thread starter Thread starter Jeff
  • Start date Start date
J

Jeff

Hi All,

Our dumbed down users are not able to install through Add/Remove
Programs, Install New Programs.

The GPO Publishes Windows Defender's MSI Package to the Users.

Does anyone have any work arounds other than touching each machine,
logging in as an Administrator? Isn't Microsoft kind of defeating the
purpose of Publishing to Users?

Windows XP Professional, Fully Patched. Distribution Point is a Windows
2003 Server. Other Published MSI packages work as expected.

The following 'Shim Database' Error was of interest, but the workaround
(use Russinovich's RegMon) seemed to heavy again.
http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=131584&SiteID=1

The following are the Application Log entries (oldest is last) that
pertain to the problem installation.

Thanks,
Jeff

Source: Application Management, Event 303
The removal of the assignment of application Windows Defender from
policy succeeded.

Source: Application Management, Event 102
The install of application Windows Defender from policy failed. The
error was : Fatal error during installation.

Source: .NET Runtime, Event 0
The description for Event ID ( 0 ) in Source ( .NET Runtime ) cannot be
found. The local computer may not have the necessary registry
information or message DLL files to display messages from a remote
computer. You may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The following
information is part of the event: Unable to open shim database version
registry key - v2.0.50727.00000.

Source: .NET Runtime, Event 0
The description for Event ID ( 0 ) in Source ( .NET Runtime ) cannot be
found. The local computer may not have the necessary registry
information or message DLL files to display messages from a remote
computer. You may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The following
information is part of the event: Unable to open shim database version
registry key - v2.0.50727.00000.

Source: Application Management, Event 301
The assignment of application Windows Defender from policy succeeded.
 
Hello Jeff,

It's great that you are using the power of Group Policy to deploy
software out to your environment without an additional infrastructure
to deal with.
Have you altered the MSI, or the Group Policy Object in question here?
I've seen many "unstable" msi packages. Most problems are with
"repackaged" applications.
I have also noticed that the native Windows Softwoft Deployment does
not always properly cleaned up afterwards.
I would recommend the following tool with which you can remove a
program's Windows Installer configuration information.
You may want to remove the Windows Installer configuration information
for your program if you experience installation (Setup) problems.

Description of the Windows Installer CleanUp Utility
http://support.microsoft.com/?scid=kb;en-us;290301

There are third party tools out there which utilizes your existing
Group Policy structure, one being called SpecOps Deploy,


http://www.specopssoft.com/products/specopsdeploy/Default.asp

Best,
Harj Singh
"Software Deployment done right"
Special Operations Software
www.specopssoft.com
 
Hello Jeff,

It's great that you are using the power of Group Policy to deploy
software out to your environment without an additional infrastructure
to deal with.
Have you altered the MSI, or the Group Policy Object in question here?
I've seen many "unstable" msi packages. Most problems are with
"repackaged" applications.
I have also noticed that the native Windows Softwoft Deployment does
not always properly cleaned up afterwards.
I would recommend the following tool with which you can remove a
program's Windows Installer configuration information.
You may want to remove the Windows Installer configuration information
for your program if you experience installation (Setup) problems.

Description of the Windows Installer CleanUp Utility
http://support.microsoft.com/?scid=kb;en-us;290301

There are third party tools out there which utilize your existing Group
Policy structure, one being called SpecOps Deploy,
http://www.specopssoft.com/products/specopsdeploy/Default.asp

Best,
Harj Singh
"Software Deployment done right"
Special Operations Software
www.specopssoft.com
 
Back
Top