Win2003 distribution function to offload the network management

In the LAN, the workstation endless Software installation, upgrade, maintenance, delete operations brought about by the huge workload, and the resulting security problems have been all the network management headaches. If you are also a network management, then you may wish to use this article to feel the software distribution function brings the magic "burden" charm. Simply put, the distribution function is the ability to send software distributions to workstations. In the past, many network administrators have adopted a shared approach, but the security implications of sharing often become the heart of the network management Forever pain. At this point, if you try to use the distribution feature, you'll be pleasantly surprised to find that the workstation's software installation will be easy and hassle-free.

Assuming that a network manager is now distributing the Windows Server 2003 Administration Kit Program "Adminpak.msi" in the shyzhong.com domain to all workstations, the following settings should be set.

First, set up a shared directory

For maximum access management, you should first create a new directory in a disk that uses NTFS partition format and name it "tools$", and then copy the Adminpak.msi program from the I386 directory on the Windows Server 2003 installation disc to the tools$ "in the directory. Then set the share permissions for the directory, the "authenticated Users" group is readable and the "Administrator" group is Full control.

Tip: The distributed software must be an MSI encapsulated file, and if you want to encapsulate a non-MSI-formatted file as an MSI file, you can use tools such as InstallShield to complete the conversion operation.

Second, set up Group Policy

Log on to the DC as a domain administrator (domain controller), then tap the start → programs → administrative tools →active Directory Users and Computers menu item, right-click shyzhong.com in the Pop-up window, and select Properties from the pop-up menu. Click the New button in the Properties window and name the newly created Group Policy object "Software".

Then select Software and click the Edit button below, and in the Group Policy Editor window that opens, tap user configuration → software settings → software installation. Then right-click Software Installation and select Properties from the menu that pops up. In the Software Installation Properties dialog box, enter the computer name share file name manually, and then select the Show Deployment Software dialog box and Basic.

After clicking the "OK" button to return to "Group Policy Editor", right click on the "Software Installation" item and select "New → package" in the Popup shortcut menu. In the Open dialog box that appears, select the "Adminpak.msi" file in the tools$ directory and click the "Open" button. Click the "OK" button when the "published" option is selected in the "Deploy Software" dialog box that pops up later. You can now close the Group Policy dialog box. Then open a Command Prompt window, enter the "Gpupdate" command and return, so you can refresh Group Policy so that the above settings take effect immediately.

Third, install the software in the workstation

After the above settings in the DC (domain controller), the software is distributed to all workstations in the shyzhong.com domain. In workstations, when a user logs on to a domain, simply click the Add new Program button in the Add/Remove Programs window and immediately list the "Adminpak.msi" program that is distributed from the DC (domain controller) in the Add programs from network list. Click the "Add" button to install the program immediately.

Using the above method of software installation in a workstation can change the "passive download" of shared mode into "active delivery" of software distribution. In this way, the management of the domain becomes more powerful, and the burden of network administration is reduced a lot.

Tip: MSI files with Windows Installer

Windows Installer can be used for software installation, removal, recovery, and other functions. However, to use these features, you must do so through the Windows Installer packet--msi file. MSI is the file format necessary to implement the software distribution feature. The MSI file typically contains the environment information required to install the built-in program and the instructions and data needed to install or uninstall the program. When the user double-clicks the MSI file, a file Msiexec.exe of the Windows Installer associated with it will be called, which reads the package file (. msi) with Msi.dll and applies the transform file (. mst) for next processing.