Group Policy Software deployment

[Guest]

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

I want to deploy software updates and new software using AD and group
policy. Issues I am having is that the software at the clients are not
installing properly. This is due to I do not allow my clients to local
administrators or power users so they cannot install software. How do I get
around this?

Thanks in advance.

smitto

 

[Guest]

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

GPO -> Computer Configuration -> Administrative Templates -> Windows
Components -> Windows Installer -> "Always install with elevated
privileges". Enable it.

Also enable it in User Configuration.

Explanation:
Directs Windows Installer to use system permissions when it installs any
program on the system.

This setting extends elevated privileges to all programs. These privileges
are usually reserved for programs that have been assigned to the user
(offered on the desktop), assigned to the computer (installed
automatically), or made available in Add or Remove Programs in Control
Panel. This setting lets users install programs that require access to
directories that the user might not have permission to view or change,
including directories on highly restricted computers.

If you disable this setting or do not configure it, the system applies the
current user's permissions when it installs programs that a system
administrator does not distribute or offer.

Note: This setting appears both in the Computer Configuration and User
Configuration folders. To make this setting effective, you must enable the
setting in both folders.

Caution: Skilled users can take advantage of the permissions this setting
grants to change their privileges and gain permanent access to restricted
files and folders. Note that the User Configuration version of this setting
is not guaranteed to be secure.

 

[Guest]

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

How do you deploy and what errors do you get? Software installation for
computers runs in System context.