Software Deployment Policy

It is a process of installing the application onto the employee machine from the server. We don’t have to login to every employee computer and install a required application.

From the server we will create a GPO called software deployment and we will provide the application to multiple machines.

We can install the Applications in multiple levels.

  • OU level

  • Domain Level

  • Site level

 

Methods to Deploy Application

Primarily, there are 3 methods to deploy applications on user machines,

  •  Published

  •  Assigned

  •  Advanced

 

Published: In this method, a user needs to go to control panel and install the application from there.

Assigned: In this method, the software is already available on user desktop or start menu of user computer. Administrator has to install it.

Advanced: If at all if we want to upgrade the installed software on the user computer then we will go to Advanced.

In all of the above methods, the executable file must be in .MSI package to deploy the Application.

 

Deploying Software using Group policy Object

Create a shared folder with MSI packages.

Create a new policy and edit the settings.

Navigate to user configuration >> software setting >> Right click on Software installation >> select New – package.

 

software-development-policy1

 

Browse the .MSI package.

 

software-development-policy2

 

Select how to publish the application.

 

software-development-policy3

 

Login to the client and observe the installation while loading profile at the time login.

Or if it is published/Assigned go to start menu/control panel and select the application to install.

 

Remove an Application/Software from Group of Machines

Group Policy also allows you to remove packages which have been deployed in the past.

Here are the steps for removing a package:

  • Click on the Start button -> Go to Programs -> select Administrative Tools -> then select Active Directory Users and Computers.

  • Right-click your domain name in the console tree and select the Properties Context Menu.

  • Go to the Group Policy tab -> select the object we used to deploy the package and Click Edit.

  • Expand the Software Settings element (per-user or per-machine) which contains the deployed package.

  • Expand the Software Installation element which contains the deployed package.

  • Right-click the package in the right pane of the Group Policy window.

  • Select the All Tasks menu and Click Remove.

 

software-development-policy4

 

Select from the following options:

  • Immediately uninstall the software from users and computers  

  • Allow users to continue to use the software but prevent new installations

  • Click the OK button to continue.

  • Close the Group Policy snap-in -> Click OK and Exit the Active Directory Users and Computers snap-in.

 

Upgrading a Software/Application on Group of Windows machines

Sometimes we may need to redeploy a package (for example when doing an upgrade).

For redeploying a package, we can follow these steps:

  • Click on the Start button -> Go to Programs -> select Administrative Tools and then select Active Directory Users and Computers.

  • Right-click your domain name in the console tree and select the Properties Context Menu.

  • Go to the Group Policy tab -> select the object you used to deploy the package and Click Edit.

  • Expand the Software Settings element (per-user or per-machine) which contains the deployed package.

  • Expand the Software Installation element which contains the deployed package.

  • Right-click the package in the right pane of the Group Policy window.

  • Select the All Tasks Menu and Click Redeploy application

 

software-development-policy5

 

  • Click the Yes button for reinstalling the application wherever it is installed.

Close the Group Policy snap-in, click OK and exit the Active Directory Users and Computers snap-in.

 

Topics Summary