{"id":22605,"date":"2022-01-21T15:19:20","date_gmt":"2022-01-21T15:19:20","guid":{"rendered":"http:\/\/activedirectorypro.com\/?p=22605"},"modified":"2023-09-10T15:08:24","modified_gmt":"2023-09-10T15:08:24","slug":"deploy-software-using-group-policy","status":"publish","type":"post","link":"https:\/\/activedirectorypro.com\/deploy-software-using-group-policy\/","title":{"rendered":"How to Deploy Software using Group Policy"},"content":{"rendered":"\n<p>In this tutorial, I will show you how to use Group Policy to deploy software to computers and users. <\/p>\n\n\n\n<p>In this example, I will deploy Chrome to computers via Group Policy. The steps in this example will work with other MSI files. <\/p>\n\n\n\n<p>Check it out!<\/p>\n\n\n\n<p><strong>Table of contents:<\/strong><\/p>\n\n\n\n<ol>\n<li><a href=\"#network-share\">Create a Secure Network Share for The MSI Install Files<\/a><\/li>\n\n\n\n<li><a href=\"#create-gpo\">Create GPO to deploy software to computers<\/a><\/li>\n\n\n\n<li><a href=\"#gpo-install-users\">GPO Settings to Install Software to Users Only<\/a><\/li>\n\n\n\n<li><a href=\"#tips\">Tips &amp; Troubleshooting<\/a> <\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"video-tutorial\">Video Tutorial <\/h2>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Deploy Software Using Group Policy\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/2ILEgPowirQ?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<p>If you don\u2019t like video tutorials or want more details, then continue reading the instructions below.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"network-share\">Create a Network Share for the MSI Install File<\/h2>\n\n\n\n<p>The first step is to ensure you have a secure shared folder for the MSI file so users and computers can access it. The MSI files do not get copied to computers; they will run from a network share.<\/p>\n\n\n<div class=\"gb-container gb-container-b26dae4e\"><div class=\"gb-inside-container\">\n\n<p><strong>Tip: <\/strong>It is critical that you don&#8217;t set \u201ceveryone\u201d permissions on your network shares. There is no need for this and it is just bad practice. This gives everyone on your network access to the shared folder including unauthenticated users. Also, this is how ransomware and viruses spread, as they are often programmed to look for UNC shares and attack the files and folders. Even if you set &#8220;READ ONLY&#8221; access, you are still giving everyone access to read the files in this directory. Again, this is just bad practice and can easily be avoided.<\/p>\n\n\n\n<p>\/end rant<\/p>\n\n<\/div><\/div>\n\n\n<p><strong>Steps to create a secure network share:<\/strong><\/p>\n\n\n\n<p>Pick a server that everyone can access to configure the shared folder. <\/p>\n\n\n\n<p>Right-click a folder, then click the sharing tab and advanced sharing.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-1.webp\" alt=\"click the advanced sharing button\" class=\"wp-image-22624\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-1.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-1-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-1-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-1-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>I\u2019m using a 2019 Windows server. I created a folder called software to store the install files. You can name your folders anything you want.&nbsp;<\/p>\n\n\n\n<p>On the advanced sharing screen, click the box to share this folder.&nbsp;The share name can be anything you want, I\u2019ve called mine &#8220;software&#8221;.&nbsp;<\/p>\n\n\n\n<p>Now click the permissions button.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-2.webp\" alt=\"advanced sharing screen\" class=\"wp-image-22625\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-2.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-2-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-2-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-2-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>On the share permissions screen, remove everyone.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-3.webp\" alt=\"remove everyone from the permissions\" class=\"wp-image-22626\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-3.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-3-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-3-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-3-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>Now add domain computers and domain users and set the permissions to read. You can lock the permissions down to specific users and computers if needed by creating new security groups.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-4.webp\" alt=\"add domain users and domain computers\" class=\"wp-image-22627\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-4.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-4-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-4-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-4-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>Click ok to get back to the properties page and click on the security tab.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-5.webp\" alt=\"NTFS security screen\" class=\"wp-image-22628\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-5.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-5-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-5-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-5-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>Make sure everyone is not listed, if so remove it.&nbsp;<\/p>\n\n\n\n<p>Add domain users and domain computers and give them read &amp; execute, list, and read permissions.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-6.webp\" alt=\"ntfs security permissions for domain users and computers\" class=\"wp-image-22629\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-6.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-6-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-6-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-6-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>Ok, good job. The shared folder configuration is complete. Now copy the MSI install files to the folder you just created. <\/p>\n\n\n\n<p>Test access to the network share on a remote computer. On the remote computer in the search box type the \\\\hostname\\sharename. My server name is &#8220;srvwef&#8221; and the share name is &#8220;software&#8221;.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-7.webp\" alt=\"test accessing unc share path\" class=\"wp-image-22630\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-7.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-7-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-7-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-7-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>If you can access the share you should see a list of files.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-8.webp\" alt=\"list of msi files on share\" class=\"wp-image-22631\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-8.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-8-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-8-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-8-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>That completes the network share configuration. The next section will configure the GPO for software deployment to computers. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"create-gpo\">Create GPO to Deploy Software to Computers <\/h2>\n\n\n\n<p>Group policy has settings for targeting computers and settings to target users. In this section, we will target computers for deploying software. This means the software install will be installed for anyone that logs into the computer.<\/p>\n\n\n\n<p>I recommend creating a new GPO for the software install, do not add these settings to the Default Domain Policy.&nbsp;<\/p>\n\n\n\n<p>In the group policy management console browse to the OU, right click and select \u201cCreate a GPO in this domain, and link it here\u201d<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-9.webp\" alt=\"Create and link new GPO\" class=\"wp-image-22633\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-9.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-9-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-9-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-9-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>In this example, I\u2019m going to install Chrome on all the computers in the IT OU, so I will create and link the GPO to the IT OU.<\/p>\n\n\n\n<p>Give the GPO a name. I\u2019ve named mine \u201cComputer &#8211; Chrome Install\u201d<\/p>\n\n\n\n<p>Edit the new GPO: <br><br>Computer Configuration &gt; Policies &gt; Software Setting &gt; Software installation<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-10.webp\" alt=\"edit new gpo\" class=\"wp-image-22634\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-10.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-10-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-10-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-10-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>Right click Software installation and select New &gt; Package<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"800\" height=\"400\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-11.webp\" alt=\"gpo new software package\" class=\"wp-image-22635\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-11.webp 800w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-11-300x150.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-11-768x384.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-11-600x300.webp 600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p>On the open screen browse to the network share using the UNC path, select the MSI you want to install, and click open. DO NOT browse using the local drives or the install will fail. <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"504\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-12.webp\" alt=\"gpo unc patch to msi file\" class=\"wp-image-22636\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-12.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-12-300x188.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-12-768x481.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-12-600x376.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>On the deploy software screen, click Assigned and then click Ok. Published will be grayed out as that option can only be used when deploying software to users.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-13.webp\" alt=\"gpo deploy software assigned settings\" class=\"wp-image-22637\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-13.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-13-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-13-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-13-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>That completes the GPO configuration. The GPO settings should look like this.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-14.webp\" alt=\"gpo software install settings\" class=\"wp-image-22638\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-14.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-14-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-14-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-14-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>The software will only install during a reboot and the computer must have its GPO settings updated. GPO settings will refresh automatically every 90 minutes.<\/p>\n\n\n\n<p>To force the GPO settings you can use the gpupdate \/force command.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"800\" height=\"400\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-15.webp\" alt=\"run gpupdate \/force\" class=\"wp-image-22639\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-15.webp 800w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-15-300x150.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-15-768x384.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-15-600x300.webp 600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p>When you run the <a href=\"https:\/\/activedirectorypro.com\/gpupdate-command\/\" data-type=\"post\" data-id=\"20578\">gpupdate command<\/a> you will get a message saying one or more settings must be processed before the system start or user logon. This is referring to the software installed by GPO and is expected. Type Y to restart the computer.&nbsp;<\/p>\n\n\n\n<p>The software will be installed on reboot. <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"800\" height=\"400\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-16.webp\" alt=\"\" class=\"wp-image-22640\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-16.webp 800w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-16-300x150.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-16-768x384.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-16-600x300.webp 600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p>When I log in I can see the Google Chrome icon on the desktop and that confirms the software installed.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"800\" height=\"400\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-17.webp\" alt=\"gpo chrome install icon\" class=\"wp-image-22641\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-17.webp 800w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-17-300x150.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-17-768x384.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-17-600x300.webp 600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p>That completes the steps on how to deploy software using group policy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"gpo-install-users\">GPO Settings to Install Software to Users Only<\/h2>\n\n\n\n<p>If you want to install software to specific users just use the user configuration GPO settings instead of the computer.<\/p>\n\n\n\n<p>This works differently than deploying to a computer.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-18.webp\" alt=\"gpo user configuration for software installs\" class=\"wp-image-22642\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-18.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-18-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-18-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-18-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>In my testing, the user configuration does not install the software automatically for the user. This is why I prefer to use the computer configuration for deploying software but everyone has different requirements. <\/p>\n\n\n\n<p><strong>Published vs Assigned Deployment Method:&nbsp;<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-19.webp\" alt=\"gpo deploy software published vs assigned\" class=\"wp-image-22643\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-19.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-19-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-19-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-19-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>There is little to no documentation on this from Microsoft. From my testing, they seem to do the same thing. The only thing I see this does is add the software to the list of programs that can be installed from the network.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-20.webp\" alt=\"\" class=\"wp-image-22644\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-20.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-20-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-20-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-20-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>The user will need to click on Google Chrome from here and then the software will install. Some articles I found said the assigned option should put an icon on the desktop, then it will install when the user clicks the icon. This was not my experience. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"tips\">Tips<strong> <\/strong>and Troubleshooting<\/h2>\n\n\n\n<p>Here are some tips to troubleshoot GPO software installation issues.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"tip-1-check-the-event-logs\">Tip #1 Check the event logs<\/h3>\n\n\n\n<p>On the computer that fails to install, check the system event logs for errors.&nbsp;This will provide details as to why the installation failed.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-21.webp\" alt=\"\" class=\"wp-image-22646\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-21.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-21-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-21-768x386.webp 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2022\/01\/gpo-deploy-software-21-600x301.webp 600w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"tip-2-display-detailed-messages-at-startup\">Tip #2 Display detailed messages at startup<\/h3>\n\n\n\n<p>This will display the \u201cApplying software installation settings\u201d during startup.<\/p>\n\n\n\n<p>You will need to enable this GPO setting. <\/p>\n\n\n\n<p>Computer Configuration &gt; Policies &gt; Administrative Templates &gt; System and enable \u201cDisplay highly detailed status messages.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"tip-3-enable-wait-for-the-network-at-computer-startup-and-logon\">Tip #3 Enable Wait for the network at computer startup and logon<\/h3>\n\n\n\n<p>If you are having issues with the software installation you may need to enable this GPO setting.&nbsp;<\/p>\n\n\n\n<p>Computer Configuration &gt; Policies &gt; Administrative Templates &gt; System &gt; Logon and enable \u201cAlways wait for the network at computer startup and logon\u201d<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"tip-4-test-with-a-small-msi-file\">Tip #4 Test with a small MSI file<\/h3>\n\n\n\n<p>The problem might be the MSI install file. Test with a small program like 7zip or notepad ++, these are really small install files that are known to work.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"tip-5-use-gpresult-to-verify-the-gpo-is-enabled\">Tip #5 Use gpresult to verify the GPO is enabled.<\/h3>\n\n\n\n<p>Use the built-in <a href=\"https:\/\/activedirectorypro.com\/gpresult-tool\/\" data-type=\"post\" data-id=\"1496\">gpresult command<\/a> to verify the GPO settings are getting applied to the computer. <\/p>\n\n\n\n<h3 class=\"gb-headline gb-headline-73842d8e gb-headline-text\">Sources<\/h3>\n\n\n\n<ul>\n<li><a rel=\"noreferrer noopener\" href=\"https:\/\/docs.microsoft.com\/en-us\/troubleshoot\/windows-server\/group-policy\/use-group-policy-to-install-software\" target=\"_blank\">Use Group Policy to remotely install software<\/a><\/li>\n\n\n\n<li>15+ years of experience doing this in production environments<\/li>\n\n\n\n<li>Tested this solution in my Active Directory lab<\/li>\n<\/ul>\n\n\n\n<h2 class=\"gb-headline gb-headline-d53f40e8 gb-headline-text\">Summary<\/h2>\n\n\n\n<p>Deploying software with Group Policy is easy to do. Although it doesn\u2019t have a lot of options and features, it&#8217;s useful for deploying simple software packages. <\/p>\n\n\n\n<p>I hope you enjoyed this tutorial. If you have questions, post them in the comment section.&nbsp;<\/p>\n\n\n\n<p>If you need to deploy an exe then refer to the article <a href=\"https:\/\/activedirectorypro.com\/deploy-software-exe-using-group-policy-part-2\/\" data-type=\"post\" data-id=\"22981\">Deploy Software (EXE) Using Group Policy \u2013 Part 2<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this tutorial, I will show you how to use Group Policy to deploy software to computers and users. In this example, I will deploy Chrome to computers via Group Policy. The steps in this example will work with other MSI files. Check it out! Table of contents: Video Tutorial If you don\u2019t like video &#8230; <a title=\"How to Deploy Software using Group Policy\" class=\"read-more\" href=\"https:\/\/activedirectorypro.com\/deploy-software-using-group-policy\/\" aria-label=\"More on How to Deploy Software using Group Policy\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":23774,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1833],"tags":[],"_links":{"self":[{"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/posts\/22605"}],"collection":[{"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/comments?post=22605"}],"version-history":[{"count":4,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/posts\/22605\/revisions"}],"predecessor-version":[{"id":37284,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/posts\/22605\/revisions\/37284"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/media\/23774"}],"wp:attachment":[{"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/media?parent=22605"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/categories?post=22605"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/tags?post=22605"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}