PC Power Down, Energy Saving

Reducing wasted elctricity and consequential carbon (CO2) emissions

User Guides

<< 3. Microsoft Transform File (Advanced install) Index 5. Troubleshooting >>
4. MSI Deployment Deploying PC Power Down via MSI

4.1. Group Policy introduction

You can use Group Policy to assign or to publish software to users or computers in a domain. Additionally, it is useful to be able to deploy software based on group membership. A Group Policy object (GPO) is usually applied only to members of an organizational unit (OU) to which the GPO is linked. Because a user/computer cannot be located in several OUs at the same time, you must be able to apply Group Policy settings outside the boundaries of OUs. This article will describe how to create an OU and deploy your software using a GPO.

4.2. Assign software to a group

Create a folder to hold the MSI package on a server. Share the folder by applying permissions that let users and computers read and run these files. Then, copy the MSI package files into this location.

From a Windows 2000-based computer in the domain, log on as a domain administrator, and then start Active Directory Users and Computers.

From the control panel select administrative tools > Active Directory Users and Computers.
Note You can apply Group Policy settings to domains, sites, and OUs.

In Active Directory Users and Computers, right-click the container to which you want to link the GPO, click Properties, and then click the Group Policy tab.

Create a new GPO for installing your MSI package, and then give the new GPO a descriptive name.

While the new GPO is selected, click Edit. This starts the Group Policy Object Editor.

Notes
• The Software Settings folder under Computer Configuration contains software settings that apply to all users who log on to the computer. This folder contains software installation settings. It may also contain other settings that are put there by independent software vendors.
• The Software Settings folder under User Configuration contains software settings that apply to users regardless of which computer they log on to. This folder also contains software installation settings. It may contain other settings that are put there by independent software vendors.

Open and then right-click Software installation in the GPO, and then click New Package.
You are prompted for the path of the Windows Installer file (.msi) for this package. View the network location that contains the Windows Installer file, click the file, and then click Open.

Warning If the Windows Installer file resides on the local hard disk, do not use a local path. Instead, use the UNC path of the local computer to indicate the location of the installation files. A UNC path takes the form \\servername\sharename\path\filename.msi.

In the Deploy Software dialog box, do one of the following:
• Click Assigned to use default settings for the deployment properties.
• Click Advanced to manually edit the package properties instead of accepting the defaults. You can also choose between assign and publish for the deployment method.

When you are prompted to choose between Advanced and Assigned, click Assigned unless you want to apply an MST.

You should now see the software package in the details pane of the Group Policy Object Editor. For this example we shall pick advanced to document applying an MST.

To add an MST click the modification tab and select Add. Select the MST from the file dialog screen. Please ensure that the file permissions for the MST folder have been set correctly.

Click your GPO, and then click Properties.
1. Click the Security tab.
2. Click Authenticated Users in the Group or user names list, and then click Remove.
3. Click Add, select the security group that you want this policy applied to, and then click OK to add the security group to the list.
4. Select the security group, and then under Permissions for Users, click to select the READ and the Apply Group Policy check boxes in the Allow column.
5. Click Apply, click OK, click Apply, and then click OK.
The software package appears in the details pane of the Group Policy Object Editor.

Changes to a GPO are not immediately applied on the target computers. Instead, changes are applied according to the current Group Policy update interval. You can use the Secedit.exe command-line tool to impose GPO settings upon a target workstation immediately.



Last updated by Administrator (admin)  on Feb 23 2011  at 12:06 PM
<< 3. Microsoft Transform File (Advanced install) Index 5. Troubleshooting >>