1. 70-294: MCSE Guide to Microsoft Windows Server 2003 Active Directory Chapter 12: Deploying and Managing Software with Group Policy

2. Guide to MCSE 70-294, Enhanced2 Objectives Prepare software for distribution using Group Policy Deploy software using Group Policy Manage software deployed with Group Policy Remove software deployed with Group Policy Troubleshoot software deployment

3. Guide to MCSE 70-294, Enhanced3 Preparing Software Deployment Preparation First phase in rolling out new software application Main tasks include: Preparing software for deployment Setting up distribution points on network Identifying which users or computers require what software

4. Guide to MCSE 70-294, Enhanced4 Preparing the Software Windows Installer service Can fully automate software installation and configuration process Can repair installed applications Requires Windows Installer package for each application Benefits of using Windows Installer service: Installation customization Application resilience

5. Guide to MCSE 70-294, Enhanced5 Preparing the Software (continued) Benefits of using Windows Installer service: Privilege elevation Clean removal Installation rollback Windows Installer package:.msi file Contains information necessary to install and remove application

6. Guide to MCSE 70-294, Enhanced6 Preparing the Software (continued) If no.msi file available: Option to use another file type Called ZAP (.zap) file.zap file limitations: Can only be published and not assigned Are not resilient and do not repair themselves automatically Always use permissions of currently logged on user

7. Guide to MCSE 70-294, Enhanced7 Preparing the Distribution Point Distribution point Shared folder on file server DFS Create multiple distribution points that contain same software Use single distribution point to simplify distribution and troubleshooting Only administrators should have write/modify permission on distribution point

8. Guide to MCSE 70-294, Enhanced8 Activity 12-1: Creating a Software Distribution Point Objective: Create a shared folder to use as a distribution point Follow instructions to practice creating a distribution point

9. Guide to MCSE 70-294, Enhanced9 Determining Installation Scope Decide which users and/or computers will have what software installed Take into consideration how software will be configured and managed

10. Guide to MCSE 70-294, Enhanced10 Configuring Software Deployment Group Policy can be used to deliver applications to: Users Computers Application is delivered to user: Available on every computer used by that user Application is delivered to computer: Remains on that computer and is available to all users of that computer

11. Guide to MCSE 70-294, Enhanced11 Assigning Applications Assigned to computer: Application automatically installed next time that computer is started Visible to all users of computer Assigned to user: Application’s shortcut(s) advertised on Start menu By default, application is not actually installed Application “follows” user around

12. Guide to MCSE 70-294, Enhanced12 Publishing Applications Can only publish to users User can install application By accessing Add or Remove Programs in Control Panel User can use document invocation to install Application installed when use opens document

13. Guide to MCSE 70-294, Enhanced13 Activity 12-2: Publishing Software Using Group Policy Objective: Publish an application to users using Group Policy Use Active Directory Users and Computers to publish an application

14. Guide to MCSE 70-294, Enhanced14 Configuring the Deployment Involves: Creating or editing GPO Specifying application deployment options Default installation options of Windows Installer package Can be modified by using transform file Priority of different applications installed through document invocation can be controlled

15. Guide to MCSE 70-294, Enhanced15 Software Modification Modify default options of Windows Installer package Use Windows Installer transform (.mst) file Allows administrator to customize options when application is installed

16. Guide to MCSE 70-294, Enhanced16 Specifying Transform Files

17. Guide to MCSE 70-294, Enhanced17 Software Association Multiple applications deployed using Group Policy may use same file extension Application precedence allows administrator to control which software package is used for document invocation

18. Guide to MCSE 70-294, Enhanced18 File Extensions Tab

19. Guide to MCSE 70-294, Enhanced19 Software Categories Allow deployed software to be organized into meaningful groups in Add or Remove Programs Software categories created in one GPO are available to all other GPOs in domain

20. Guide to MCSE 70-294, Enhanced20 Software Categories in Add or Remove Programs

21. Guide to MCSE 70-294, Enhanced21 Deployment Options Auto-install this application by file extension activation Uninstall this application when it falls out of the scope of management Do not display this package in the Add/Remove Programs control panel Install this application at logon Installation user interface options

22. Guide to MCSE 70-294, Enhanced22 Maintaining Deployed Software Various types of maintenance tasks that usually need to be performed Vendors provide periodic updates and service patches Choices for how patch or upgrade deployment is performed: Mandatory upgrade Optional upgrade Redeploying application

23. Guide to MCSE 70-294, Enhanced23 Mandatory Upgrade New major version of software package available All users must upgrade to new version Old package is removed New package is installed Not suitable for deploying service packs or hotfixes

24. Guide to MCSE 70-294, Enhanced24 Upgrades Tab Used for Upgrading Existing Packages

25. Guide to MCSE 70-294, Enhanced25 Optional Upgrade Used when new major version of software package available Optional User with older version installed: Must install upgrade using Add or Remove Programs User without software installed: Installs newer version

26. Guide to MCSE 70-294, Enhanced26 Redeployment Force application to reinstall itself everywhere that it is already installed Used for service pack or hotfix New.msi file can be copied right over old one Windows Installer patch (.msp) file can also be provided

27. Guide to MCSE 70-294, Enhanced27 Configuring Automatic Operating System Updates Configure Group Policy to automatically update Windows 2000 Windows XP Professional Windows Server 2003 Must be running automatic update client Configure computer to automatically download operating system updates from: Microsoft Windows Update Web site Local Software Update Services (SUS) server

28. Guide to MCSE 70-294, Enhanced28 SUS Allows administrator to manage operating system updates for every client from single location Automatically contacts Windows Update Web site Downloads available operating system updates

29. Guide to MCSE 70-294, Enhanced29 SUS Requirements Running Windows 2000 Server with Service Pack 2 or higher Internet Information Server 5 or higher must be installed Internet Explorer 5.5 or higher must be installed

30. Guide to MCSE 70-294, Enhanced30 Example SUS Infrastructure

31. Guide to MCSE 70-294, Enhanced31 Removing Deployed Software When removing software: Group Policy can save great amount of time and money Application must have been originally installed using a Windows Installer package

32. Guide to MCSE 70-294, Enhanced32 Forced Removal Automatically uninstalls application from all computers Takes place either: Next time the computer restarts For computer-based policies When the user logs on For user-based policies

33. Guide to MCSE 70-294, Enhanced33 Optional Removal Does not remove any of installed copies of software Does not perform any future installations either Applications that were never installed No longer appear in Add or Remove Programs If users remove the application They are not able to reinstall it

34. Guide to MCSE 70-294, Enhanced34 Activity 12-7: Removing Installed Software Objective: Remove an application that was distributed using Group Policy Configure an optional removal using a GPO

35. Guide to MCSE 70-294, Enhanced35 Removing Deployed Software

36. Guide to MCSE 70-294, Enhanced36 Troubleshooting Software Deployment First step: Troubleshoot Group Policy Check: No Override option Block Inheritance option ACL permissions Loopback Processing Mode WMI filters

37. Guide to MCSE 70-294, Enhanced37 Troubleshooting Tools Msiexec MSIZap

38. Guide to MCSE 70-294, Enhanced38 Summary Four phases to software life cycle: Preparation Deployment Maintenance Removal Windows Installer service Used to fully automate software installation and configuration process

39. Guide to MCSE 70-294, Enhanced39 Summary (continued) Applications can be assigned to either computers or users When new version of software available Group Policy can be used to deploy new version Package can be redeployed To distribute a new service pack or hotfix Group Policy can be used to remove applications