GP on Server 2008 R2 trying to push software to WIn 7 with Security Filtering via Security Group

-

i searched internet far , wide last couple days answer, not find one. 

so here goes. long one. 

i running server 2008 r2 primary dc server 2003 backup dc (hmm, perhaps issue). system trying push software win 7 x64 pro machine.

i have created gpo called "chrome_browser" want applied computer objects in domain. in computer configuration | policies | software settings | software installation, "assigned" coogle chrome msi package v65.85. assigned options default except added "uninstall application when falls out of scope of management" option. software on share "everyone" has  read access to, , software added via unc path.

i created "chrome_65.85" security group global group scope, , added test computer member. 

in "chrome_browser" gpo added "chrome_65.85" security group under scope tab in security filtering section. in gpo delegation tab security group has read , apply group policy "allow" permissions.

the gpo sits in root of domain "highest level", security group sits in sofware ou. , computer object sits severl levels in ou.

security group in; domain | software ou.

computer object sitis in; domain | computers | computer x64 | computer win7 x64.

gpo sits right under domain level. tried putting gpo in software , computer ous.

when gpupdate /force on test machine feed me line software policy can installed @ boot, reboot , there still no software. when perform gpresult /r can see "chrome_browser" gpo has been assigned @ machine level. seems computer can see , apply policy. not pushing software though. 

one other thing note users on domain have local admin computers.

any ideas or suggestions?

gpo , group layout

can you:

1. run gpresult /h report.htm /f. save report.htm file , paste here

2. verify had read/execute file permission on share , read on share permission.



Windows Server  >  Group Policy



Comments

Post a Comment

Popular posts from this blog

CRL Revocation always failed

-
hi all, i try configure radius server nps, somehow certificate authentication client failed with reason: reason = revocation function unable check revocation because revocation server offline. then check certificate client, certutil -f -urlfetch -verify client7.cer, result follow: issuer:     cn=entca     dc=intra     dc=domain     dc=co     dc=sg subject:     cn=computer.intra.domain.co.sg cert serial number: 1c5b00de000000000041 dwflags = ca_verify_flags_allow_untrusted_root (0x1) dwflags = ca_verify_flags_ignore_offline (0x2) dwflags = ca_verify_flags_full_chain_revocation (0x8) dwflags = ca_verify_flags_console_trace (0x20000000) dwflags = ca_verify_flags_dump_chain (0x40000000) chainflags = cert_chain_revocation_check_chain (0x20000000) hcce_local_machine cert_chain_policy_base -------- cert_chain_context -------- chaincontext.dwinfostatus = ce...
Read more

Failed to query the results of bpa xpath

-
Image
i have new server installed hyper v, iis , domain services roles on it.  i checking event log , see warning multiple times, idea how rid of it?? failed query results of bpa xpath: microsoft/windows/fileservices:$reports$\*\result.xml:/resultdatabase/result. error: device attached system not functioning., last error: system cannot find path specified.. follow me on twitter <<< levalencia blog <<< hi, similar issue discussed in forum: to rid of warnings: 1. go dashboard 2. click on add roles , features 3. click next "before begin step" 4. select "role based or feature based installation" , click next 5. select given server server pool , click next 6. in server roles step make sure following checked:   file , storage services > file , iscsi services > file server, click next 7.click next through rest of steps , install server role 8. rerun bpa scan described earlier for more information please refer foll...
Read more

0x300000d errors in Microsoft Remote Desktop client

-
we use rd connect home users office. @ server side remote desktop gateway configured on 2008r2 server. experience following:   for years worked fine, starting last year users apple macbook experienced connection errors after new version of microsoft remote desktop in app store , automatic update. after couple of weeks error disappaered when new updates released. since 6 8 weeks problem again. because don’t have macbook cannot reproduce problem.   starting couple of weeks samsung s6 experiencing problems, here version 8.1.37.135 installed, error displayed is: can’t connect tot remote pc because remote desktop gateway server temporaraily unavailable. try connecting later or contact network administrator assistance. error code  0x300000d   because has worked fine years expect issues on client can configuration error on gateway server.   who pin point real cause?   however, testing other rd gateway server works ok settings identically....
Read more