Sent: Tue 24/05/2005 15:24
To: ActiveDir@mail.activedir.org; Steven Wood
Subject: RE: [ActiveDir] Delivering MSI packages effectively
If your domain is in Windows 2000 "native" mode (or Windows 2000
domain
functional level) or higher, you can effectively nest global groups
into
global groups.
With a dispersed OU structure (I echo Jorge's
question, "why"), I would
suggest:
1) A global group containing the
computers of each classroom
2) A global group representing the software
package
3) Nest the classroom groups into the software group
4) Filter the
GPO to apply only to the software group. Remove (don't
deny - remove)
"Authenticated Users" ability to "Apply Group Policy" and
allow the Software
group Read and Apply Group Policy. If you're using
the GPMC (which you
should be), it's even easier: remove Auth Users and
add the software
group.
Dan
-----Original Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Jorge de
Almeida Pinto
Sent: Tuesday, May 24, 2005 7:08
AM
To: 'Steven Wood '; '[EMAIL PROTECTED]
';
'ActiveDir@mail.activedir.org '
Subject: RE: [ActiveDir] Delivering MSI
packages effectively
You have two possibilities:
For both create a GPO
with the APP assigned.
(1) link the GPO to each classroom and you're
done
(2) link the GPO to the workstations OU and use group filtering
by
giving a
group (that represents the classroom) read and apply
permissions to the
GPO.
Each workstation must be a member of their
corresponding group
Question: why do you have such a deep structure?
Delegations?, GPOs?
something
else
Cheers,
#JORGE#
-----Original Message-----
From:
[EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent:
5/24/2005 3:48 PM
Subject: [ActiveDir] Delivering MSI packages
effectively
I'm hoping someone can explain to me the most effective way
to deliver
an MSi package in the following scenairo.
My AD structure
looks something like
this:
Workstations
Building
One
Classroom
1
Classroom
2
etc
to
Classroom 99
Building
Two
Classroom
1
etc
to
Classroom 99
Building
Three
Classroom
1
etc
to
Classroom 99
I have an GPO connected to most rooms. If I have an MSI
package that I
need to deliver to say 25 rooms what would be the most
effective way to
assign to the required classrooms? Currently I have to
assign the app 25
times, once to each
room.
Regards
Steven
-------------------------------------------------------------------
This
email is from Oldham Sixth Form College, but expresses the views
of the
sender and not necessarily the views of the college. The email
and any files
transmitted with it are confidential to the intended
recipient at the e-mail
address to which it has been addressed. It may
not be disclosed or used by
any other than that addressee, nor may it
be copied in any way. If received
in error, please notify
[EMAIL PROTECTED] quoting the name of the
sender.
This message has been scanned for viruses by F-Secure
Anti-Virus.
Please note that we cannot accept any responsibility for
any
transmitted viruses. It is, therefore, your responsibility to
scan
attachments (if any).
This e-mail and any attachment is for
authorised use by the intended
recipient(s) only. It may contain proprietary
material, confidential
information and/or be subject to legal privilege. It
should not be
copied, disclosed to, retained or used by, any other party. If
you are
not an intended recipient then please promptly delete this e-mail
and
any attachment and all copies and inform the sender. Thank you.
List
info : http://www.activedir.org/List.aspx
List
FAQ : http://www.activedir.org/ListFAQ.aspx
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
This email is from Oldham Sixth Form College, but expresses the views
of the sender and not necessarily the views of the college. The email
and any files transmitted with it are confidential to the intended
recipient at the e-mail address to which it has been addressed. It may
not be disclosed or used by any other than that addressee, nor may it
be copied in any way. If received in error, please notify
[EMAIL PROTECTED] quoting the name of the sender.
This message has been scanned for viruses by F-Secure Anti-Virus.
Please note that we cannot accept any responsibility for any
transmitted viruses. It is, therefore, your responsibility to scan
attachments (if any).
