Configure and manage Group Policy - Administering Windows Server 2012 R2 - page 344

Coniguring settings
You can use Group Policy to configure the settings for users and computers to provide a
predictable experience for all users. The settings you can configure include these:
■ Software installation
■ Folder redirection
■ Scripts
■ Administrative template settings
MORE INFO POLICY SETTINGS
For a complete list of policy settings included in the Administrative template files for
Windows Server 2003 SP2 through Windows Server 2012 R2, see http://www.microsoft.
com/en-us/download/details.aspx?id=25250 .
Software Installation
You can use Group Policy to deploy software to groups of users based on their needs and
roles, or to deploy software to specific computers. The steps for deploying software are these:
■ Create a shared folder A shared folder accessible by all users or computers you
want to distribute the software to.
■ Create a GPO Using the GPMC, create a GPO for the software distribution.
■ Assign the software package Edit the GPO to assign the software package to
the computers or users covered by the GPO. This process causes the software to be
automatically installed.
■ Publish the software package Edit the GPO to publish the software package to the
computers or users covered by the GPO. This process causes the software to be listed
as available to be installed from the network.
Using Group Policy to deploy software has some limitations. The most basic limitation is
that you can deploy only software that uses Microsoft Installer (.msi) or Zero Administration
for Windows Downlevel Application Package (.zap) files. Software that uses an executable file
(.exe) can't be installed directly from Group Policy, although you can use startup scripts to in-
stall the software or use third-party products to package .exe installations as .msi installations.
You can edit the GPO that installs the software to specify whether it is assigned or pub-
lished to computers or users. If you want the software to be assigned to computers, edit the
Computer Configuration/Policies/Software Settings policy. To assign or publish the software
to users, edit the User Configuration/Policies/Software Settings policy.
When you add software to the user or computer configuration, you need to specify the
location from which the software is being installed. Always use a Universal Naming Conven-
tion (UNC) path, not a drive letter path. For example, to add the MyApp application as a
published application for users in the HR security group, follow these steps: