About me

About this session

Agenda

Computer User

Group policy vs. Configuration Manager Group policy software installationsConfiguration Manager Group policy software installations client side extension ConfigMgr Client → ConfigMgr Software Distribution Agent (ccmexec.exe) Msi package (or.zap file)Any command line Install and uninstall out of the boxPackage model: install and uninstall separate Application model: installation program required, uninstall program recommended Writes Event ID's, but no centralized reporting Extensive and exhaustive reports and logging

Group policy vs. Configuration Manager Group policy software installationsConfiguration Manager Based on active directory and organizational units Collections and database Information can be read from AD Targeting using organizational unitsTargeting using collections Additional targeting using group policy security filtering Queries, direct membership Application Model: requirements Msi package → assign/publishPackage model: Package → Program → Advertisement Application model: deployment types

Group policy vs. Configuration Manager Group policy software installationsConfiguration Manager If msi package and targeted computer are ok, everything just works (or that's what we think) Whether software distribution action was successful or not we get the information. Return codes are important! Sequencing possible using "GPO Link Order" Package installation order within the same GPO is assumed to be random Package model: "Run another program first" Task Sequences Application Model: requirements, dependencies Makes sure the client computer is in the state that msi package defines Makes sure the command line will be run on client - eventually

Group policy vs. Configuration Manager Group policy software installationsConfiguration Manager No scheduling optionsDeployments can be scheduled DFS root → DFS share → directory → msi package (Install source) Package Source Files → Distribution Point → ConfigMgr cache Install source is immutableConfigMgr Windows Installer Source List Management

Domain Group policy software installations Client GPO Software Installations Client Side Extension Windows Installer Msi package GPO Computer User

Msi package Windows installer self-healing (self-repair) Component A (GUID A) File 1 Keypath for Component A File 2 Component B (GUID B) Registry Key 1 Keypath for Component B File 3 Windows installer Check Repair Check Repair

Group policy vs. Configuration Manager Group policy software installationsConfiguration Manager Publish to userAdvertisement, non-mandatory to computer Only domain accountsFor all accounts (Domain, Local) Installing account: user with elevated privileges Installing account: Local System or the user logged on No notifications about new softwareOption for notifications about new software

Start Blocking Per-Machine installations? Blocking Per-User installations? Notify user Blocking process running? Notify user, try again? No Yes No Yes No Yes No Yes Quit: -1 (per-machine) Quit: -2 (per-user) Quit: -3 (blocking process) A

Program already installed? Install program? Notify user: installation finished Run uninstall command Quit: Return Code from uninstall command Reboot needed? No Yes No Yes No Yes Program already installed? No Quit: 0 (no changes) No Quit: -4 (user gave up) Yes Run install command Quit: Return Code from install command Schedule reboot in 60 seconds Notify user: reboot is needed A Uninstall program? Wait of 'OK'

Group policy vs. Configuration Manager Group policy software InstallationsConfiguration Manager Install during startup (boot) "Installing Managed Application..." Install at any time (except during startup) Whether user is logged on or not Uninstall during startup (boot)Uninstall at any time (except during startup) Installing account: Local SystemInstalling account: Local System (Run with administrative rights) or any other account

Domain Keksi Computer HKLM\SOFTWARE\[Wow6432Node\] Microsoft\Windows\CurrentVersion\Uninstall\ GPOInstall Adobe Reader\ DisplayName="GPOInstall Adobe Reader" GPO: "Install Adobe Reader"Startup script: "\\server\share\keksi-adobereader.vbs" Configuration Manager Configuration Manager client Hardware inventory cycle Add/Remove Programs "GPOInstall Adobe Reader" Computer Collection "GPO: Install Adobe Reader" Query Add/Remove Programs Display Name = GPOInstall Adobe Reader Install or upgrade Adobe Reader

Complete your session evaluations today and enter to win prizes daily. Provide your feedback at a CommNet kiosk or log on at Upon submission you will receive instant notification if you have won a prize. Prize pickup is at the Information Desk located in Attendee Services in the Mandalay Bay Foyer. Entry details can be found on the MMS website.

Resources