Hi list -
I experimented with getting software to install on W10 clients using a
GPO, and could not get it to work. Has anyone used this feature? Is it
even supposed to work under Samba? The instructions I cobbled together
from some googling below. Things like accessibility to the share/etc.
already tested.
-=- Automatically Deploy Software
- Create a share folder accessible by everyone in which to place .msi
files
- Create a Security Group for the computers which are to get this
install/update
- Change the Object Type to allow for computer objects
- Add computers to this group.
- GPO
Computer Configuration -> Policies -> Software Settings -> Software
Installation
Right click, New -> Package
- Add UNC path to package folder and select package to install.
Remove "Authenticated Users" from Security Filter and add the group
created above.
Yes, I was able to deploy Adobe Reader DC. You need to run an "administrative install" of the MSI, using the "/a" switch. It needs to also be given the path, which is where you'd save it on your deploy share. It will create a file structure similar to the C:, including folders it needs. On Mon, Nov 15, 2021 at 8:02 AM Patrick Goetz via samba < samba at lists.samba.org> wrote:> Hi list - > > I experimented with getting software to install on W10 clients using a > GPO, and could not get it to work. Has anyone used this feature? Is it > even supposed to work under Samba? The instructions I cobbled together > from some googling below. Things like accessibility to the share/etc. > already tested. > > > -=- Automatically Deploy Software > > - Create a share folder accessible by everyone in which to place .msi > files > - Create a Security Group for the computers which are to get this > install/update > - Change the Object Type to allow for computer objects > - Add computers to this group. > > - GPO > Computer Configuration -> Policies -> Software Settings -> Software > Installation > Right click, New -> Package > - Add UNC path to package folder and select package to install. > Remove "Authenticated Users" from Security Filter and add the group > created above. > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
Am 15.11.21 um 17:00 schrieb Patrick Goetz via samba:> Hi list - > > I experimented with getting software to install on W10 clients using a > GPO, and could not get it to work.? Has anyone used this feature?? Is it > even supposed to work under Samba?? The instructions I cobbled together > from some googling below.? Things like accessibility to the share/etc. > already tested. > > > -=- Automatically Deploy Software > > ?- Create a share folder accessible by everyone in which to place .msi > files > ?- Create a Security Group for the computers which are to get this > install/update > ???? - Change the Object Type to allow for computer objects > ???? - Add computers to this group. > > ? - GPO > ? Computer Configuration -> Policies -> Software Settings -> Software > ??????? Installation > ? Right click, New -> Package > ? - Add UNC path to package folder and select package to install. > ? Remove "Authenticated Users" from Security Filter and add the group > created above. >Don't miss the last step: Give domain-pc the right to read the GPO -- Stefan Kania Landweg 13 25693 St. Michaelisdonn Signieren jeder E-Mail hilft Spam zu reduzieren und sch?tzt Ihre Privatsph?re. Ein kostenfreies Zertifikat erhalten Sie unter https://www.dgn.de/dgncert/index.html
On 11/15/21 12:00 PM, Patrick Goetz via samba wrote:> Hi list - > > I experimented with getting software to install on W10 clients using a > GPO, and could not get it to work.? Has anyone used this feature?? Is it > even supposed to work under Samba?? The instructions I cobbled together > from some googling below.? Things like accessibility to the share/etc. > already tested. > > > -=- Automatically Deploy Software > > ?- Create a share folder accessible by everyone in which to place .msi > filesBe aware of the share not being guest ok. Since a recent Windows update, guest connections to shares isn't allowed. My updates stopped working and this was the reason. Add a proper ACL entry to the share for authenticated users, at installation the connection to the share is done by the computer accounts, so you could restrict the share more if you need it.> ?- Create a Security Group for the computers which are to get this > install/update > ???? - Change the Object Type to allow for computer objects > ???? - Add computers to this group. > > ? - GPO > ? Computer Configuration -> Policies -> Software Settings -> Software > ??????? Installation > ? Right click, New -> Package > ? - Add UNC path to package folder and select package to install. > ? Remove "Authenticated Users" from Security Filter and add the group > created above. >