[00:03] Hi there, the previous episode is about group relationship enforcement with Restricted Groups, and today I will show you another cool feature of Group Policy is GPSI.
Let's assume that your company has 1000 computers, now your manager asks your IT department to deploy ESET Smart Security software to the entire of 1000 computers.
Install this software is simple; you just need to go to each computer and copy the setup file into it then install " configure it!
However, there are 1000 computers, install the software manually is a nightmare!
Luckily, Microsoft has provided a tool called Group Policy Software Installation to help us deploy software in the domain environment without care about the number of users/computers.
It can be 1000, 1 million,… users/computers, theoretically ;)
[00:33] "Group Policy Software Installation (GPSI) is one of the greatest gifts that Microsoft has given you! It is a free and semi-robust application deployment solution. Almost any organization can manage their entire application infrastructure with it." – deployhappiness.com
[00:43] [OU AND POLICY CREATIONS]
[00:55] "Deploying itself can be done in many ways among which Group Policy is a popular one. Deploying software with GPO needs professional tutorials and guide, because the process to deploy software sometimes could be quite complicated. Here introduces you the easiest method to deploy software with GPO" – wondershare.com
[1:12] [METHOD OF SOFTWARE DEPLOYMENT]
[1:32] We will choose the 'Assign software' mode, so head to the Computer Configuration node.
[1:38] [MSI DISTRIBUTION POINT]
[1:54] "Within native tools, there is no way to quickly get an at-a-glance view of all applications deployed via Group Policy Software Installation (GPSI) policy across a domain. This simple GUI utility lets you quickly view all applications that have been published or assigned (or removed) using Group Policy, within a domain" – sdmsoftware.com
[2:02] Software setup files must be in the MSI form.
If your software is an EXE file, you can use this free MSI Wrapper: www.exemsi.com to convert it.
[2:13] [SHARE FOLDER PERMISSIONS TO SELECT]
[2:38] Now, come back with the software's UNC path selection.
UNC stands for 'Universal Naming Convention'.
Basically, UNC is a path format which contains a filename and a network path inside, so we can access it across LAN network, for example.
The UNC address of a file may look like this: \\server-name\directory\filename.extension
[3:09] Computer deployment doesn't support the Published method; since the Computer policy was applied before the user had logged on, thus where to place it for users to choose to install or not?
[3:27] [ADVANCED OPTION NOTES]
[3:41] In this example, I will deploy Notepad++ to the SNOOPY-SERVER-3 machine via the Assigned method.
Make sure you have strong IT knowledge to use the Advanced method.
[4:03] [START THE DEPLOYMENT]
[4:09] Restart the SnoOpy-Server-3 machine to deploy the Notepad++ software at the boot phase, automatically.
[4:27] "A client ran into an issue that prevented them from deploying any application (including our Specops Deploy CSE) via normal Microsoft Windows GPSI. This was happening on a Windows 2008 R2 Domain and Windows 7 x86 clients, but I believe it could happen on any mixture of Windows OS and Domains" – specopssoft.com
[4:38] Great, this machine is applying our GPSI policy.
Hooray, Notepad++ was deployed successfully as planned.
We can add more computers/users to this automatic deployment by group-ping objects, linking policies, etc.
That why I can say the number of 100, 1000, etc. doesn't matter.
Review my channel about Group Policy, ask me questions if you should find any problem about: permission errors, the package was not be installed correctly; the policy didn't take effect on some users, etc.!