How to deploy Windows XP SP2 in group policy?

Group PolicyThis document describes how to use group policies to deploy Windows XP SP2.

If you manage your computer in the Active Directory service environment, you can use the "software installation and maintenance" feature of "Group Policy" to deploy Microsoft Windows XP Service Pack 2 (SP2) on the target computer ). This article describes how to install SP2 on a target computer in the Microsoft Windows 2000 Server or Microsoft Windows Server 2003 Active Directory domain by using "Windows Installer" and "group policy.

For customers who have not used Enterprise Update Management solutions such as Systems Management Server (SMS) 2003 or Software Update Services (SUS, we recommend that you use "Group Policy" to manage Windows XP SP2 deployment in real time.

When you use a group policy distributor, you can assign programs to multiple computers. The program will be installed when the computer starts, and all users who log on to the computer can use this program. For more information about "Group Policy", see group policy infrastructure.

This document assumes that you have used the "Group Policy Management Console" Group Policy Management Console, GPMC ). To download GPMC, see the Group Policy Management Console with Service Pack 1.

Obtain Windows XP SP2

To get Windows XP SP2, see the Windows XP Service Pack 2 network installation package for IT professionals and developers. Users can download the SP2 file, named WindowsXP-KB835935-SP2-ENU.exe, from this page. For more information about CD subscription, see Windows XP Service Pack 2 resources for IT professionals.

After the WindowsXP-KB835935-SP2-ENU.exe is downloaded, use the following command line to extract the file:

WindowsXP-KB835935-SP2-ENU.exe/x <path>, where "<path>" is the target directory used to store the extracted file.

Using "Group Policy" to deploy SP2 is achieved through the Microsoft Windows installation package named Update. msi of SP2. This file is located in the following folder, and it is also the target location of the extracted file: \ i386 \ update.

Use group policies to assign service packages

1. Create a distribution point.

2. Create a "group policy" Object (GPO) for SP2 deployment ).

3. Deploy SP2 Update. msi from the shared distribution folder for the specified computer. Do not deploy according to user deployment.

4. You can deploy SP2 to a specific security group as needed.

The target computer must be the computer that will receive the service package deployment) to the domain where the server containing the "Windows Installer" (. msi) file is located. After you assign a package, when a user connected to this network starts the computer next time, the "Windows Installer" will automatically install the service package. We recommend that you check the properties of each computer to ensure that the target computer has been updated. You may need to restart the computer multiple times to complete the update.

Only a network administrator or a person logging on to a local computer as an administrator can remove the allocated software (SP2) from the target computer ).

The process described in this section is described in detail below.

Create a distribution point

To publish or assign software, you must create a distribution point on the server.

Create a distribution point

1. log on to the server as an administrator.

2. Create a shared network folder for the "Microsoft Windows Installation Package" to be distributed. This folder is the distribution point of the software package.

3. Set the permission for the shared network folder to allow access to the distribution package. Grant access permissions to administrators, Authenticated Users, and domain users.

4. Configure the DFS for the distribution point ). We recommend that you perform this operation because it ensures uninterrupted availability of the distribution point when replacing the server to provide higher flexibility. In addition, DFS can easily place distribution sites on multiple sites. For more information about DFS, see designing DFS namespaces.

Create GPO for SP2 deployment

You can create a GPO and link it to all the Active Directory containers, such as sites, domains, or organizational units, that contain the target computer where SP2 is to be deployed ). In the following procedure, we will guide you how to use a domain as a container. You may need to link GPO to another container for your specific environment. You can even link it to any Active Directory container. In addition, if you only want to deploy SP2, You can edit the existing GPO without creating a new GPO, however, we recommend that you do not edit "Default Domain Policy" or "default domain controller policy ".

Create GPO for SP2 deployment

1. On the management workstation, open the "Group Policy Management Console" (GPMC ).

2. In the console tree, right-click the domain name in the forest where you want to create and link the "Group Policy" Object (GPO.

3. Click here to create and link GPO.

4. In the create GPO dialog box, specify a name for the new GPO, and click OK.

Edit GPO for SP2 deployment

You can now modify GPO by using the "software installation and maintenance" function of "group policy. Note that "Group Policy" only supports deploying SP2 to a computer, not a user. To deploy SP2, you must use the "Computer Configuration" node in the "Group Policy object Editor.

Edit GPO for SP2 deployment

1. Right-click the new GPO and click Edit.

2. In the "Group Policy object Editor", click computer configuration, click Software settings, and then click software installation.

3. On the operation menu, point to new, and then click the package.

4. In the file name in the open dialog box, type the complete path of the Universal Naming Convention of the shared installation package that you want to distribute, Universal Naming Convention, UNC. Enter the path \ ServerName \ SharedFolder \ Update. msi or \ ServerIP \ SharedFolder \ Update. msi in the following format. Make sure that the UNC path of the shared installation package is used.

5. Select "Windows installation package" and click open.

6. In the deploy Software Dialog Box, click allocated, and then click OK. The selected shared installation package appears in the right pane of the Group Policy object editor.

Note:

ServerName and ServerIP are the server name or placeholder IP address of the computer where the shared folder is located. SharedFolder is a placeholder for shared folders on the server computer.

Deploy SP2 to a specific security group

For testing purposes, you may initially only want to deploy SP2 on a limited number of computers, rather than all computers in a given domain or OU. If you only want to deploy SP2 on a computer that is a member of a specified security group, you can use the security filtering feature in group policy to complete this operation.

Use the security filter function to locate SP2

1. In GPMC, double-click the Group Policy object.

2. Click the GPO for which you want to filter applications.

3. In the Range Tab Of The result pane, click Add.

4. In the input object name, type the name of the group, user, or computer to add to the security filter, and then click OK.

5. If the authenticated user is displayed in the security filtering section of the scope tab, select this group and click Remove. This operation ensures that only the added group members can receive the GPO settings.

Note:

The settings in GPO are only applied to users and computers in the domain or organization that is linked to it, in addition, these users and computers must be specified in "Security filtering" or belong to the members of the group specified in "Security filtering. You can specify multiple users or computers for a single GPO in the security filter.

We hope this article describes how to deploy Windows XP SP2 using group policies to help readers. More knowledge about group policies remains to be learned and mastered by readers.