Win 2003 distribution function to lighten the _windows2003 of network management

In the local area network, the workstation endlessly carries on the software installation, the promotion, the maintenance, the deletion operation to bring the huge work, as well as the possible security question has always been causes all network management headaches. If you are also a network management, then you may wish to use this article to feel the software distribution function brings the magic "lighten" the charm. Simply put, the distribution function is the ability to send software distributions to workstations. In the past, many network administrators use shared methods, but the security risks caused by sharing will often become the heart of the network management Forever pain. At this point, if you try to use the distribution function, then you will be pleasantly surprised to find that the workstation's software installation will become easy and safe and worry-free.

Assuming that a network administrator is now distributing the Windows Server 2003 Administration Kit Program "Adminpak.msi" in the shyzhong.com domain to all workstations, the following settings should be made.

　　First, set up a shared directory

For maximum access management, you should first create a new directory in a disk that uses NTFS partition format, name it "tools$," and then copy the Adminpak.msi program from the I386 directory of the Windows Server 2003 installation CD to the tools$ "directory. Then set share permissions for the directory, the authenticated Users group is readable, and the Administrator group is fully controlled.

　　tip: The distributed software must be an MSI encapsulated file, and if you want to encapsulate files in a non-MSI format into an MSI file, you can use tools such as InstallShield to do this transformation.

　　Two, set Group Policy

Log on as a domain administrator to the DC (domain controller), click the "start → program → admin tools →active directory Users and Computers" menu item, right-click the shyzhong.com in the pop-up window, and select Properties from the pop-up menu. Click the New button in the Properties window and name the new Group Policy object "Software".

Next, select Software and click the Edit button below, and in the Group Policy Editor window that opens, click User configuration → software settings → software installation. Right-click Software Installation and select Properties from the menu that pops up. In the Software Installation Properties dialog box, manually enter the \ computer name \ Shared file name, and then select the Show Deployment Software dialog box and basic two items (see figure).

Click on the "OK" button to return to the Group Policy Editor, right click on the "Software Installation" item, in the pop-up shortcut menu, select "New → package." In the Open dialog box that appears later, select the "Adminpak.msi" file in the tools$ directory and click the Open button. After you select the published option in the Deployment Software dialog box that pops up, click the OK button. You can now close the Group Policy dialog box. Next, open the Command Prompt window, enter the "Gpupdate" command and return, so that you can refresh the Group Policy so that the above settings take effect immediately.

　　Third, install the software in the workstation

After the above settings in the DC (domain controller), the software is distributed to all workstations in the shyzhong.com domain. In a workstation, when a user logs on to a domain, the "Add new Program" button in the Add/Remove Programs window will immediately list the "Adminpak.msi" programs distributed from the DC (domain controller) in the "Add programs from the network" list. Clicking the "Add" button will allow you to install the program immediately.

Using the above method of software installation in workstations, the "passive download" of the shared way can be changed into the "active delivery" of software distribution. As a result, domain management functions become more powerful, while the burden of network management is also reduced a lot.

　　Small knowledge: MSI files and Windows Installer

Windows Installer can implement software installation, deletion, recovery, and so on. To use these features, however, you must implement them through the Windows Installer packet--msi file. MSI is the file format necessary to implement the software distribution function. MSI files typically contain the environment information that is required to install the built-in program and the instructions and data needed to install or uninstall the program. When the user double-clicks on the MSI file, a file Msiexec.exe of the Windows Installer associated with it will be invoked, and it will read the package file (. msi) with Msi.dll, and apply the transform file (. mst) for the next process.