Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - Legacy application installations

Reply
 
Old 07-17-2008   #21 (permalink)
David Shen [MSFT]


 
 

RE: Legacy application installations

Hello Mike,

Thanks for the reply.

According to your description, your purpose is that you want to distribute
the arbortext.msi to thousands of computers instead of just using one copy
on the mapped driver.

Based on the further research, I find a better way to distribute the msi
file, just for your reference.

Analysis and Suggestion:
=========================

We may create a new Group Policy Object on the domain controller, and
configure Software installation to assign or to publish software to all the
computers (Computer Configuration\Software Settings\Software Installation)
within a domain. It is best practice to be able to deploy software based on
group membership. We can link the GPO to the domain level to deploy to all
the computers within the domain. In this way, there is no need for us to
write a script or map a driver.

For you convenience, I have list the general steps to configure the
software installation policy as follow.

General Steps:
===============

1. Create a software package folder as a distribution point

Please note:

If the application installation file resides on the local hard disk of the
server, please do not use a local path. Instead, use the UNC
path of the local computer to indicate the location of the installation
files. An example of UNC path takes the form like
\\servername\sharename\path\filename.msi.

2. Grant "Domain Computers" group with full control both share and NTFS
security permission on the software package folder.

3. Create a Group Policy object (GPO) for the customer application software
deployments.

Please refer to:

How to assign software to a specific group by using Group Policy in Windows
Server 2003
http://support.microsoft.com/kb/324750

4. Deploy file from the shared distribution folder as machine-assigned
Group Policy (Computer Configuration\Software Settings\Software
Installation)

Please refer to:

How to assign software to a specific group by using Group Policy
http://support.microsoft.com/kb/302430

6. After the deployment of Group Policy, please run "gpupdate /force" on
both domain controller and clients to refresh the Group Policy.

7. You may reset the clients to wait for the processing of Group policy to
deploy the customer software.

For more detailed information, you may refer to:

How to use Windows Installer and Group Policy to deploy the VPModule.msi in
an Active Directory domain
http://support.microsoft.com/kb/887405

Hope it helps.

David Shen
Microsoft Online Partner Support


My System SpecsSystem Spec
Old 07-17-2008   #22 (permalink)
Mike_g


 
 

RE: Legacy application installations

David,
We have hundreds of different applications to install over many different
computers.
We only install on the systems that need it and the Group Policy method of
installation would be very inefficient for our needs.
Is there some way to embed into the .cmd file a call to some application
that requests privilege elevation?
Like:
--------------------------------------
:@echo off
\\server\share\elevate.exe
msiexec ...
--------------------------------------


"David Shen [MSFT]" wrote:
Quote:

> Hello Mike,
>
> Thanks for the reply.
>
> According to your description, your purpose is that you want to distribute
> the arbortext.msi to thousands of computers instead of just using one copy
> on the mapped driver.
>
> Based on the further research, I find a better way to distribute the msi
> file, just for your reference.
>
> Analysis and Suggestion:
> =========================
>
> We may create a new Group Policy Object on the domain controller, and
> configure Software installation to assign or to publish software to all the
> computers (Computer Configuration\Software Settings\Software Installation)
> within a domain. It is best practice to be able to deploy software based on
> group membership. We can link the GPO to the domain level to deploy to all
> the computers within the domain. In this way, there is no need for us to
> write a script or map a driver.
>
> For you convenience, I have list the general steps to configure the
> software installation policy as follow.
>
> General Steps:
> ===============
>
> 1. Create a software package folder as a distribution point
>
> Please note:
>
> If the application installation file resides on the local hard disk of the
> server, please do not use a local path. Instead, use the UNC
> path of the local computer to indicate the location of the installation
> files. An example of UNC path takes the form like
> \\servername\sharename\path\filename.msi.
>
> 2. Grant "Domain Computers" group with full control both share and NTFS
> security permission on the software package folder.
>
> 3. Create a Group Policy object (GPO) for the customer application software
> deployments.
>
> Please refer to:
>
> How to assign software to a specific group by using Group Policy in Windows
> Server 2003
> http://support.microsoft.com/kb/324750
>
> 4. Deploy file from the shared distribution folder as machine-assigned
> Group Policy (Computer Configuration\Software Settings\Software
> Installation)
>
> Please refer to:
>
> How to assign software to a specific group by using Group Policy
> http://support.microsoft.com/kb/302430
>
> 6. After the deployment of Group Policy, please run "gpupdate /force" on
> both domain controller and clients to refresh the Group Policy.
>
> 7. You may reset the clients to wait for the processing of Group policy to
> deploy the customer software.
>
> For more detailed information, you may refer to:
>
> How to use Windows Installer and Group Policy to deploy the VPModule.msi in
> an Active Directory domain
> http://support.microsoft.com/kb/887405
>
> Hope it helps.
>
> David Shen
> Microsoft Online Partner Support
>
>
My System SpecsSystem Spec
Old 07-18-2008   #23 (permalink)
David Shen [MSFT]


 
 

RE: Legacy application installations

Hi Mike,

Is there some way to embed into the .cmd file a call to some application
that requests privilege elevation?

No. Because of the existing of the UAC feature on Windows Vista, we cannot
call the application that requests privilege elevation within a batch file.

You may disable the UAC feature on the Windows Vista boxes or you may logon
these system with local administrator credential to install these
application.

Hope it helps.

David Shen
Microsoft Online Partner Support

My System SpecsSystem Spec
Old 07-18-2008   #24 (permalink)
Mike_g


 
 

RE: Legacy application installations

David,
Can I make an executable then that just calls a .cmd file that will maintain
the elevation or do I need to embed all the dos commands in the executable?
- Mike

"David Shen [MSFT]" wrote:
Quote:

> Hi Mike,
>
> Is there some way to embed into the .cmd file a call to some application
> that requests privilege elevation?
>
> No. Because of the existing of the UAC feature on Windows Vista, we cannot
> call the application that requests privilege elevation within a batch file.
>
> You may disable the UAC feature on the Windows Vista boxes or you may logon
> these system with local administrator credential to install these
> application.
>
> Hope it helps.
>
> David Shen
> Microsoft Online Partner Support
>
>
My System SpecsSystem Spec
Old 07-21-2008   #25 (permalink)
David Shen [MSFT]


 
 

RE: Legacy application installations

Hi Mike,

You may make an executable then that just calls a .cmd file that will
maintain the elevation.

David Shen
Microsoft Online Partner Support

My System SpecsSystem Spec
Old 07-24-2008   #26 (permalink)
David Shen [MSFT]


 
 

RE: Legacy application installations

Dear Customer,

How's everything going?

I'm wondering if the suggestion has helped or if you have any further
questions. Please feel free to respond to the newsgroups if I can assist
further.

David Shen
Microsoft Online Partner Support

My System SpecsSystem Spec
Old 08-05-2008   #27 (permalink)
Mike_g


 
 

RE: Legacy application installations

I have been on vacation the last week and a half so I have not had time to
check on it yet.
"David Shen [MSFT]" wrote:
Quote:

> Dear Customer,
>
> How's everything going?
>
> I'm wondering if the suggestion has helped or if you have any further
> questions. Please feel free to respond to the newsgroups if I can assist
> further.
>
> David Shen
> Microsoft Online Partner Support
>
>
My System SpecsSystem Spec
Old 08-06-2008   #28 (permalink)
David Shen [MSFT]


 
 

RE: Legacy application installations

Hello Mike,

Thank you for the reply.

I am glad to hear from you now. I notice that you have replied to the
question in the thread of "Legacy application installations" and would like
to suggest that we follow up this issue there when you are free. If
anything is unclear, or you have additional concerns, please feel free to
let me know.

Again, thank you for using our newsgroups and have a great vacation!

David Shen
Microsoft Online Partner Support

My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Rollback installations General Discussion
All application installations in Vista64 fail Vista General
installations Vista General
program installations Vista installation & setup
some Help on installations Vista installation & setup


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46