•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Computer
User
Group policy software installations
Configuration Manager
Group policy software installations
client side extension
ConfigMgr Client → ConfigMgr
Software Distribution Agent
(ccmexec.exe)
Msi package (or .zap file)
Any command line
Install and uninstall out of the box
Package model: install and uninstall
separate
Application model: installation
program required, uninstall program
recommended
Writes Event ID's, but no centralized
reporting
Extensive and exhaustive reports and
logging
Group policy software installations
Configuration Manager
Based on active directory and
organizational units
Collections and database
Information can be read from AD
Targeting using organizational units
Targeting using collections
Additional targeting using group policy Queries, direct membership
security filtering
Application Model: requirements
Msi package → assign/publish
Package model: Package → Program →
Advertisement
Application model: deployment types
Group policy software installations
Configuration Manager
If msi package and targeted computer
are ok, everything just works (or that's
what we think)
Whether software distribution action
was successful or not we get the
information.
Return codes are important!
Sequencing possible using "GPO Link
Order"
Package installation order within the
same GPO is assumed to be random
Package model: "Run another program
first"
Task Sequences
Application Model: requirements,
dependencies
Makes sure the client computer is in
the state that msi package defines
Makes sure the command line will be
run on client - eventually
Group policy software installations
Configuration Manager
No scheduling options
Deployments can be scheduled
DFS root → DFS share → directory →
msi package (Install source)
Package Source Files → Distribution
Point → ConfigMgr cache
Install source is immutable
ConfigMgr Windows Installer Source
List Management
Domain
Client
GPO
Msi package
GPO Software Installations
Client Side Extension
User
Computer
Windows Installer
Windows installer
Msi package
Component A (GUID A)
File 1
Keypath for Component A
File 2
Component B (GUID B)
Registry Key 1
Keypath for Component B
File 3
Group policy software installations
Configuration Manager
Publish to user
Advertisement, non-mandatory to
computer
Only domain accounts
For all accounts (Domain, Local)
Installing account: user with elevated
privileges
Installing account: Local System or the
user logged on
No notifications about new software
Option for notifications about new
software
Start
Blocking
Per-Machine
installations?
Yes
Notify user
No
Blocking
Per-User
installations?
Blocking
process
running?
No
Yes
Yes
Notify user
Yes
Notify user,
try again?
No
Quit: -1
(per-machine)
Quit: -2
(per-user)
Quit: -3
(blocking process)
No
A
A
Program
already
installed?
No
Install
program?
Run install
command
Notify user:
reboot is needed
No
Yes
Uninstall
program?
Yes
Wait of 'OK'
Yes
No
Program
already
installed?
Yes
Run uninstall
command
Yes
Quit: Return Code
from uninstall
command
Quit: 0
(no changes)
No
Reboot
needed?
No
Quit: -4
(user gave up)
Schedule reboot
in 60 seconds
Notify user:
installation
finished
Quit: Return Code
from install
command
Group policy software Installations
Configuration Manager
Install during startup (boot)
"Installing Managed Application..."
Install at any time (except during
startup)
Whether user is logged on or not
Uninstall during startup (boot)
Uninstall at any time (except during
startup)
Installing account: Local System
Installing account: Local System (Run
with administrative rights) or any other
account
1
Computer
GPO: "Install Adobe Reader"
Startup script: "\\server\share\keksi-adobereader.vbs"
3
Hardware inventory cycle
Add/Remove Programs
Configuration
"GPOInstall Adobe Reader"
Manager
client
5
2
HKLM\SOFTWARE\[Wow6432Node\]
Microsoft\Windows\CurrentVersion\Uninstall\
GPOInstall Adobe Reader\
DisplayName="GPOInstall Adobe Reader"
Computer
Domain
Configuration
Manager
4
Collection
"GPO: Install Adobe Reader"
Query
Add/Remove Programs Display
Name = GPOInstall Adobe Reader
http://technet.microsoft.com/en-us/library/dd379467.aspx
http://technet.microsoft.com/en-us/library/cc738151.aspx
http://support.microsoft.com/kb/2667628
http://technet.microsoft.com/en-us/library/bb892810.aspx
http://msdn.microsoft.com/en-us/library/windows/desktop/aa371370.aspx
http://technet.microsoft.com/en-us/library/bb742420.aspx
http://support.microsoft.com/kb/226936