Windows Server 2012 Active Directory Basic Configuration and application (Novice tutorial)---Group Policy-based software deployment

Group Policy enables you to deploy software to computers within a domain, that is, when a user logs on or when the computer starts, the deployed software can be installed automatically or easily.

software deployment is divided into two ways: allocation ( assign publish windows Installer package *.msi You can assign software to users or assign to computers, but publish only to users . The difference between the two is learned experimentally.

( 1 ) software released to users: This software is not installed automatically when the software is published to users through Group Policy. only after the user logs in, the software is installed through the Control Panel , or through the file startup function.

Sub-task 1 : Publishing software to users

STEP1 . Create a folder on any host in the domain to hold the Setup program. The software source program that the user or computer needs to install is placed in this folder. For the sake of simplicity, create a new folder on the DC 's C Drive.

STEP2 . set the new folder to share and share the permissions and NTFS permissions are set to everyone can be read. (This share is typically set as a hidden share).

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M02/8B/77/wKiom1hOlWrDTGuUAACT2UjUQfc863.jpg-wh_500x0-wm_3 -wmp_4-s_1259055169.jpg "title=" 10-1.jpg "alt=" Wkiom1holwrdtguuaact2ujuqfc863.jpg-wh_50 "/>

STEP3 . Install program for testing Winrar.msi copied to it.

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M02/8B/74/wKioL1hOlY3Cm14DAAAwcs1khbU119.jpg-wh_500x0-wm_3 -wmp_4-s_2667068464.jpg "title=" 10-2.jpg "alt=" Wkiol1holy3cm14daaawcs1khbu119.jpg-wh_50 "/>

STEP4 : Sets the default storage location for the software. Open the Group Policy Management Console on the DC, set policy settings for the network classes OU ---- Create a new Group Policy object (here you can delete the original policy, Prevent confusion)

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M00/8B/77/wKiom1hOlbaiOmRFAAAjjhIykkM640.jpg-wh_500x0-wm_3 -wmp_4-s_124939179.jpg "title=" 10-3.jpg "alt=" Wkiom1holbaiomrfaaajjhiykkm640.jpg-wh_50 "/>

STEP5 : Edit the Software deployment policy, expand Nodes, and then click Software Installation under User Configuration . After the node is found, modify its properties to set the path of the package.

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M00/8B/74/wKioL1hOlcmyonroAAA64_3cmk4428.jpg-wh_500x0-wm_3 -wmp_4-s_3452282746.jpg "title=" 10-4.jpg "alt=" Wkiol1holcmyonroaaa64_3cmk4428.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M01/8B/77/wKiom1hOlevTVlh9AAB867sD5W4987.jpg-wh_500x0-wm_3 -wmp_4-s_984184259.jpg "title=" 10-5.jpg "alt=" Wkiom1holevtvlh9aab867sd5w4987.jpg-wh_50 "/>

STEP6 : Create a new packet, locate the target software, and set the deployment mode to published.

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M01/8B/74/wKioL1hOlk-g-TThAABcZn0R7zc284.jpg-wh_500x0-wm_3 -wmp_4-s_3228343334.jpg "style=" Float:none; "title=" 10-6.jpg "alt=" Wkiol1holk-g-tthaabczn0r7zc284.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/8B/77/wKiom1hOlk_gVwEtAACy0L-LJYk918.jpg-wh_500x0-wm_3 -wmp_4-s_2929705198.jpg "style=" Float:none; "title=" 10-7.jpg "alt=" Wkiom1holk_gvwetaacy0l-ljyk918.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M00/8B/74/wKioL1hOllCCHqQQAAA6lA766Jg741.jpg-wh_500x0-wm_3 -wmp_4-s_470225098.jpg "style=" Float:none; "title=" 10-8.jpg "alt=" Wkiol1hollcchqqqaaa6la766jg741.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M02/8B/77/wKiom1hOllDgGIzBAABDLMhx-N4674.jpg-wh_500x0-wm_3 -wmp_4-s_2514901678.jpg "style=" Float:none; "title=" 10-9.jpg "alt=" Wkiom1holldggizbaabdlmhx-n4674.jpg-wh_50 "/>

at this point, the publishing process is complete. The following tests publish the results .

STEP7 : With the configuration of the software policy described above OU an account within the Win 7 Log on to check the test results. (In this case, an account named Stu2 is used ). To use the program you just published, the user can look in the Control Panel (as shown). Double-click to start the installation.

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M02/8B/74/wKioL1hOlpHQDBZwAABCcu64sMs592.jpg-wh_500x0-wm_3 -wmp_4-s_205356467.jpg "title=" 10-10.jpg "alt=" Wkiol1holphqdbzwaabccu64sms592.jpg-wh_50 "/>

STEP8 : Log on to another host with the above account (e.g. DC Check the test results. (The STU2 account is still used in this example )

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/8B/74/wKioL1hOlsCgC-mfAABoguPeoNs717.jpg-wh_500x0-wm_3 -wmp_4-s_507283098.jpg "title=" 10-11.jpg "alt=" Wkiol1holscgc-mfaabogupeons717.jpg-wh_50 "/>

STEP9 : use other OU user log in, the test results are as follows.

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M02/8B/77/wKiom1hOluHAO2OZAABmytlzKI4604.jpg-wh_500x0-wm_3 -wmp_4-s_4131839267.jpg "title=" 10-12.jpg "alt=" Wkiom1holuhao2ozaabmytlzki4604.jpg-wh_50 "/>

so: Regardless of which host the user is logged on to, as long as the user account is in this OU Software deployment strategy to get the software you need.

Sub-task2: Software assigned to users (mandatory software deployment method)

When the software is assigned to a user through Group Policy, the user logs on to any host in the domain and the software is advertised to the user, but the software is not installed . The software will only be installed if the user runs the software themselves, or when the file is started. Distribution is a free choice and the user can have a choice. The assignment is mandatory. ( delete the policy set in subtask 1 and then reset a policy to deploy the software Vncx64.msi in the assigned way ). software assigned to users, not automatically installed by default .

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M02/8B/77/wKiom1hOlx7AulH5AAA6CL4mFA8177.jpg-wh_500x0-wm_3 -wmp_4-s_3321244017.jpg "style=" Float:none; "title=" 10-13.jpg "alt=" wkiom1holx7aulh5aaa6cl4mfa8177.jpg-wh_50 "/ >

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M02/8B/74/wKioL1hOlx6gfTBxAABEOEcX6iY728.jpg-wh_500x0-wm_3 -wmp_4-s_2098442272.jpg "style=" Float:none; "title=" 10-14.jpg "alt=" wkiol1holx6gftbxaabeoecx6iy728.jpg-wh_50 "/ >

Sub-task3: Software assigned to computer

When software is assigned to clients in a domain through Group Policy, the software is automatically installed by these clients at startup and can be used by any user who logs on.

First , the computer account of the client is moved to the network class OU inside, below for this OU set the software deployment policy.

STEP1 : Delete Network classes OU software deployed in the user policy in the software deployment policy . Continue to modify the network classes OU policy, through the " Computer Configuration " in the Software Installation deployment software, method only "assign" optional. (Note modify the location of the software publishing point)

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M01/8B/74/wKioL1hOmNvwoGrxAACWOaLvHYs888.jpg-wh_500x0-wm_3 -wmp_4-s_436667556.jpg "style=" Float:none; "title=" 10-15.jpg "alt=" Wkiol1homnvwogrxaacwoalvhys888.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M00/8B/74/wKioL1hOmNug6V62AABIJCitfSg884.jpg-wh_500x0-wm_3 -wmp_4-s_185056234.jpg "style=" Float:none; "title=" 10-16.jpg "alt=" Wkiol1homnug6v62aabijcitfsg884.jpg-wh_50 "/>

after the software policy setting is complete, DC on the pass Gpupdate/force refreshes the policy.

STEP2 : In the client WIN 7 Check to see if there is a result. If no software is found, check if the win 7 client is included in the network classes ou , and the domain administrator needs to place the client in the network classes ou . As shown in.

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/8B/77/wKiom1hOmQSy_8IqAACVu69iuDY083.jpg-wh_500x0-wm_3 -wmp_4-s_1526218542.jpg "title=" 10-17.jpg "alt=" Wkiom1homqsy_8iqaacvu69iudy083.jpg-wh_50 "/>

step3 user is or is not in network class ou ou win 7 Reboot). Also, the associated file becomes the icon for the program.

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/8B/74/wKioL1hOmSqCvKP0AAAShndmj7w536.jpg-wh_500x0-wm_3 -wmp_4-s_633983208.jpg "title=" 10-18.jpg "alt=" Wkiol1homsqcvkp0aaashndmj7w536.jpg-wh_50 "/>

so: no matter which user is logged in, only the login is in this OU , you can get the software you need by following the software deployment strategy.

This article from "Network Snail" blog, declined reprint!

Windows Server 2012 Active Directory Basic Configuration and application (Novice tutorial)---Group Policy-based software deployment