Deploying and Managing Software by Using Group Policy

1
Chapter 12

• Deploying and Managing Software by Using Group
  Policy

2
Learning Objectives

• Understand IntelliMirror components and change
  and configuration management concepts
• Understand the phases of software management
• Create and configure Windows Installer packages
• Manage software deployment through the Software
  Installation MMC snap-in
• Patch Software using the Windows Installer
  Package Editor

3
IntelliMirror

• Active Directory cornerstone
• Group Policy key to successful implementation

4
IntelliMirror

• Features
• Data management
• Folder redirection
• Offline folders
• Desktop settings management
• Roaming profiles
• Software installation and maintenance
• Installation of new software
• Repair corrupted software
• No user intervention
• Consistent computing environment

5
Profiles

• Desktop Settings
• User or Mandatory
• NTUser.dat
• NTUser.man
• Local or Roaming

6
Understanding the Phases of Software Management

• Preparation Phase
• Distribution Phase
• Targeting Phase
• Pilot Phase
• Installation Phase

7
Preparation Phase

• Will the software be installed locally, or on a
  central server?
• What users will need access to the new
  application?
• Do you have enough licenses?
• Will the network infrastructure support the
  deployment design?
• Will the software be assigned or published?

8
Assigned vs Published

• Assigned
• Users/Computers
• Desktop / Start Menu
• Installed
• Users - first use
• Computers start up
• No user intervention
• Always available

• Published
• Users
• Add/Remove Programs
• Must be explicitly installed
• Auto-Install
• Can be permanently removed

9
Caveats

• Do Not
• Create a GPO that assigns the software to both
  computers and users
• Create a GPO that assigns software to a user and
  another GPO that assign software to a computer
  the user is likely to use
• Consequence
• Can cause the systems to remove and reinstall
  software every time user logs in

10
Distribution Phase

• Define distribution points
• Copy the installation files to the distribution
  points or
• Perform an administrative installation to the
  distribution points

11
Deployment Options

• Server 2003
• Software Installation
• Group Policy
• Windows Installer Pkg
• Alternative
• RIS
• SMS
• More features

12
Targeting Phase

• Determine the needs of the users
• Use Group Policy to create and/or modify GPOs in
  order to target the software to specific users
  and groups

13
Pilot Phase

• A trial phase in a lab environment for
  troubleshooting and debugging
• This phase is often skipped in smaller companies
• Include a representative cross section of users
• Test
• Deployment methods
• Custom configurations
• Additional files
• Can reduce downtime and inefficiency

14
Installation Phase

• In this phase the software is rolled out to users
  who are set up to receive it
• For native Windows 2000 applications, you will
  probably use Windows Installer
• WinINSTALL LE
• Create Windows Installer Packages
• Repackage 3rd party software
• For third-party software, you will need plug-ins

15
Windows Installer Technology Overview

• New features
• Software diagnostics and repair
• Self healing software
• Complete uninstallation of software
• No orphan files
• Shared file integrity
• Multiplatform capability
• Different platforms
• Different configurations

16
Windows Installer Technology Overview

• Windows Installer Packages
• instmsi.exe provides NT and 9X compatibility
• Software diagnostics and repair
• Complete uninstall no orphan files left behind
• Multiplatform capability

17
Windows Installer Technology Overview (cont)

• Windows Installer Packages
• MSI files that contain instructions pertaining to
  the installation and removal of applications
• MST files used to customize the install
• Windows Installer settings can be managed with
  the Group Policy Editor
• Transaction based
• Rollback to previous state after installation
  failure
• Registry is reset
• All files removed

18
File Types

• Windows Installer (WI) recognizes
• MSI Microsoft Software Installer
• Deployed by WI as published or assigned
• MSP MS Software Patch file
• MST MS Software Transform file used to modify
  the install data
• AAS an install script that is stored with GPO
• ZAP text based file used for legacy setup.exe
  installs
• Deployed by WI as Published only
• No uninstall
• Installs in foreground
• Not self repairing

19
Managing Windows Installer Settings with Group
Policy

• Windows Installer settings can be applied to
  either the user or the computer
• Administrative Templates
• Windows Components
• Windows Installer

20
Managing Windows Installer Settings with Group
Policy

• Key settings
• Always Install With Elevated Privileges
• Disable Media Source For Any Install
• Enable User To Use Media Source While Elevated
• Disable Windows Installer
• Never
• For Non-Managed Apps Only
• Those Published or Assigned
• Always

21
WinINSTALL LE - Requirements

• WinINSTALL LE is used to install non-Windows
  certified programs
• The installation package
• Network share point
• Clean / Quiet workstation
• Based on target OS
• WinINSTALL software

22
Creating Windows Installer Packages with
WinINSTALL LE

• Two components
• Discovery (DiscoZ)
• Takes the snapshot
• Allows creation of new WI Packages
• Software console
• Windows Installer Package Editor
• View / Edit MSI Package

23
Creating a Windows Installer Package

• Start WI Discover
• Supply a package name - .msi
• Supply a friendly name for the application
• Path and file name for the .msi package
• Select a Drive for the temporary files
• Select Drives to scan this is a prescan
• Select files/directories to exclude
• Install the application
• Postscan is performed
• Package is created

24
Managing Software Deployment Through the Software
Installation Snap-in

• Through Software Installation, you can manage the
  following
• Deploying applications
• Shrink wrap your applications
• Applying upgrades and patches
• Uninstalling software
• Goal is software availability

25
Requirements for Software Installation

• Group Policy dependency
• Active Directory dependency
• Works best with Windows Installer applications
• Works with non-Windows Installer applications
• Must create a .ZAP file

26
Using the Software Installation Snap-In

• Right click snap-in and choose properties
• Configure Software Installation Defaults
• Define default package location
• Define method of deployment
• Display the deploy software dialog
• Published
• Only applicable to User Configuration
• Assigned
• Advanced

27
Using the Software Installation Snap-In (cont)

• Decide on how much information to show the user
  during install
• Uninstall option when out of management scope
• Set extensions
• Set categories

28
Using the Software Installation Snap-in
29
Deploying Software

• Right Click Software Installation
• Choose NewPackage
• Select the .msi or .zap to install
• If Advanced published/assigned
• Name / version number
• Deployment type
• Upgrades
• Categories
• Modifications
• Security

30
Using the Software Installation Snap-in

• Deploying a new package

31
Patching Software Using the Windows Installer
Package Editor
Data View
Tree View
List View
32
Patching Software Using the Windows Installer
Package Editor

• Three sections
• Tree view
• List view
• General summary of installed features
• Files
• Shortcuts
• Registry
• Services
• INI
• Advertising
• Data view
• Contents of selections made in List View

33
(No Transcript)