Configuring Group Policy - MCTS Guide to Microsoft Windows Server 2008 Active Directory Configuration - page 279

Configuration policies are uploaded to a computer when the OS starts and are updated every 90
minutes thereafter. Although many policies take effect when the GPO is updated, some might
require a computer restart. The next sections cover some important policies in the Computer
Configuration node of a GPO.

Computer Configuration: Software Settings
The Software Settings node contains the Software Installation extension, which can be config-
ured to install software packages remotely on computers, regardless of who logs on to the com-
puter. Applications are deployed with the Windows Installer service, which uses installation
packages called MSI files. An MSI file is a collection of files packaged into a single file with an
.msi extension and contains the instructions Windows Installer needs to install the application
correctly.
In the Computer Configuration node, software packages are assigned to target comput-
ers, meaning installation of the software is mandatory, and assigned packages are installed
the next time the computer starts. To assign a software package to a computer, you must
create a shared folder on a server that gives the computer the Read & execute permission.
Typically, you do this by assigning the necessary permissions to the Authenticated Users spe-
cial identity. If you're deploying several applications through Group Policy, you can create a
separate folder in the share for each package. After creating the share and copying the instal-
lation package to it, you can create your deployment policy by using the Software Installation
extension.

7

The User Configuration node also has a Software Installation extension with
additional deployment options for users, as you see later in this chapter.

Activity 7-10: Deploying Software to a Computer

Time Required: 20 minutes
Objective: Create a software installation policy and deploy a software package to a computer.
Description: All computers in the Operations Department will benefit from a utility that's avail-
able as a free download from the Microsoft Web site. You decide to deploy the utility by using
group policies. You want to test your policy first, so you link it to the TestGP1 OU where your
Vista computer account is.
1. Log on to your server as Administrator, if necessary.
2. Open Windows Explorer, and click the QData volume. Create a new folder called
SoftDeploy in this volume.
3. Right-click SoftDeploy and click Share . In the File Sharing Wizard, type Authenticated
Users in the text box at the top, and then click Add . The default permission of Reader is
sufficient. Leave Administrator in the permissions list at the bottom. Click Share , and then
click Done .
4. In Windows Explorer, click to expand the SoftDeploy folder, and create a subfolder named
SyncToy . (SyncToy is the name of the utility you're deploying.) Close all open windows on
your server.
5. Log on to the domain from your Vista computer as Administrator.
6. Start Internet Explorer and go to www.microsoft.com/download . In the Search text box,
type synctoy and click Go .
7. Click the SyncToy v1.4 link, and then click the Download button. In the File Download -
Security Warning dialog box, click Save . By default, the file is saved in the Downloads folder
in the Administrator's profile. Click Save .