Acrobat 9.1 Group Policy Enterprise Deployment

Hey there,
I'm wondering how to properly create an msi based on the new security update for enterprise deployment via gpo.
i found an acrobat 8 doc that specified: msiexec /a "\\network computer\Adobe Acrobat 9.0 Professional\AcroPro.msi" /p "\\network computer\Adobe Acrobat 9.0 Professional\security update\AcroProStdUpd910_T1T2_incr.msp"
but this simply updated and extracted all files...
i'm not overly familiar with packaging acrobat so any help would be great.
even better would be an acrobat 9.1 full msi :)
thanks

One thing to note: Make sure you apply ALL .msp patches to the admin in the correct order!
i.e. You can't just jump to the 9.1.2 patch as they are all INCREMENTAL and have a weird schedule! Sucks, but somehow it makes sense to Adobe. The scheduling and it's explanation can be found here: http://kb2.adobe.com/cps/498/cpsid_49880.html
So, the methodology is:
Make an admin install using the /a switch from msiexec
Expand the patch file from the source to the network share in the correct order, one by one using the /p switch of msiexec, 9.1.0 first then 9.1.2
Create your .mst file via the Customization Wizard
Create your GPO referencing the gpo_ad doc here ( http://www.adobe.com/devnet/acrobat/pdfs/gpo_ad_9.pdf )
Enjoy!
--VTK

Similar Messages

Group Policy - Issues deploying software packages through GPO

Hello everyone,
I am having issues successfully deploying MSI packages through group policy. I have set my computer account up in its own test OU in my domain, but yet the software will not deploy. Example, I'm trying to deploy AVG Anti-Virus and make sure it
is installed on each and every PC in my domain. As for the GPO, I set it up as an assigned package and pointed to the location of the package with the UNC file path (visible to both the DC and my computer that is part of the affected OU)
On the domain controller, I get these messages in application event logs:
Beginning a Windows Installer transaction: \\hs-dc2\software\avg\installavg.msi. Client Process Id: 9048.
Ending a Windows Installer transaction: \\hs-dc2\software\avg\installavg.msi. Client Process Id: 9048.
This shows up when I refresh GP on my computer. I run gpresult /h GPReport.html and get the following message:
Software Installation failed due to the error listed below.
Fatal error during installation.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between
The software is in a share on the domain controller that is visible from my computer, and permissions are set where "Everyone" has read access. I have tested the package on my computer and it installs
correctly if I do it manually, so it's a good package.
I'm at a loss. I am admitedly very new to GP management, but I'm pretty sure I have covered all my bases here. I humbly ask for any and all help that you all can provide.
Thank you all very much, have a great weekend!

> Magnolia_Schools.exe
What's that???
> \\hs-dc2\software\avg\installavg.msi
> <file://\\hs-dc2\software\avg\installavg.msi> /qb addeploy=1
/qb ADDEPLOY=1
Uppercase matters (:
A bissle "Experience", a bissle GMV... Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
I should have explained, my apologies. The InstallAVG.msi is the package I have GP deploying. it is a package that AVG wrote for us that goes in, uninstalls the two previous antivirus softwares we have on our network if it is present, and
then wraps it to run magnolia_schools.exe which installs the AV software. I am uninstalling AVG now and will try reinstalling with
\\hs-dc2\software\avg\installavg.msi /qb ADDEPLOY=1 and report back.
also, the only logs I found that were around the time of the install attempt were such as these:
1: 2905 2: C:\windows\system32\appmgmt\MACHINE\{06ee0d46-cd5f-4216-a09f-2aeb573aa5ba}.aas
1: 2905 2: C:\windows\system32\appmgmt\MACHINE\{06ee0d46-cd5f-4216-a09f-2aeb573aa5ba}.aas
Does that tell you anything?
I will say this, if this means anything...now that AVG is installed, the event logs are changing from an error %%1603 to this:
Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. The error was : %%1274
The removal of the assignment of application exe2msiSetupPackage from policy Install AVG failed. The error was : %%2
So it acts like it's at least seeing that the package is installed...and reacting differently, correct?
Thanks so much

Adobe Reader & Acrobat 6~9 Group Policy ADM file (only applied once?)

Hi folks. I created the below ADM template last month based on some of the ones I have seen elsewhere. I import the ADM file to use with Group Policy and make the necessary settings (need to uncheck "Only show policy settings that can be fully managed" to see it in GPO Editor).
Anyway, when the user logs on it stamps them with the desired registry setting (bEnableJS value 0). Yay! But I notice that if a user re-enables JavaScript in Adobe Reader/Acrobat and then logs off and back on again (reboot or logoff/on) the registry setting does not get re-applied. All other pre-existing Group Policies get applied and doing a gpresult or rsop.msc has everything looking as though it did get applied.
I notice that if I manually do a "gpupdate /force" to a logged on system the setting appears to be reapplied (need to reconfirm this though). Has anyone expierienced similar with their ADM templates for this? Perhaps I am missing something? Appreciate any help/advice.
; Administrative Template to enable/disable Javascript of Adobe Acrobat/Reader 6.x~9.x
; Version 1.0
; 2010/1/22
CLASS USER
CATEGORY !!Adobe_Acrobat_Reader_6-9
    POLICY !!JavaScript_Reader_9.x
    EXPLAIN !!JavaScript_Reader_9.x_help
        KEYNAME "Software\Adobe\Acrobat Reader\9.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Acrobat_9.x
    EXPLAIN !!JavaScript_Acrobat_9.x_help
        KEYNAME "Software\Adobe\Adobe Acrobat\9.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Reader_8.x
    EXPLAIN !!JavaScript_Reader_8.x_help
        KEYNAME "Software\Adobe\Acrobat Reader\8.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Acrobat_8.x
    EXPLAIN !!JavaScript_Acrobat_8.x_help
        KEYNAME "Software\Adobe\Adobe Acrobat\8.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Reader_7.x
    EXPLAIN !!JavaScript_Reader_7.x_help
        KEYNAME "Software\Adobe\Acrobat Reader\7.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Acrobat_7.x
    EXPLAIN !!JavaScript_Acrobat_7.x_help
        KEYNAME "Software\Adobe\Adobe Acrobat\7.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Reader_6.x
    EXPLAIN !!JavaScript_Reader_6.x_help
        KEYNAME "Software\Adobe\Acrobat Reader\6.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Acrobat_6.x
    EXPLAIN !!JavaScript_Acrobat_6.x_help
        KEYNAME "Software\Adobe\Adobe Acrobat\6.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
END CATEGORY
[strings]
Adobe_Acrobat_Reader_6-9="Adobe Acrobat and Reader 6 to 9"
JavaScript_Reader_9.x="JavaScript Adobe Reader 9.x"
JavaScript_Reader_9.x_help="Enable/Disable JavaScript in Adobe Reader 9.x"
JavaScript_Acrobat_9.x="JavaScript Adobe Acrobat 9.x"
JavaScript_Acrobat_9.x_help="Enable/Disable JavaScript in Acrobat Acrobat 9.x"
JavaScript_Reader_8.x="JavaScript Adobe Reader 8.x"
JavaScript_Reader_8.x_help="Enable/Disable JavaScript in Adobe Reader 8.x"
JavaScript_Acrobat_8.x="JavaScript Adobe Acrobat 8.x"
JavaScript_Acrobat_8.x_help="Enable/Disable JavaScript in Acrobat Acrobat 8.x"
JavaScript_Reader_7.x="JavaScript Adobe Reader 7.x"
JavaScript_Reader_7.x_help="Enable/Disable JavaScript in Adobe Reader 7.x"
JavaScript_Acrobat_7.x="JavaScript Adobe Acrobat 7.x"
JavaScript_Acrobat_7.x_help="Enable/Disable JavaScript in Acrobat Acrobat 7.x"
JavaScript_Reader_6.x="JavaScript Adobe Reader 6.x"
JavaScript_Reader_6.x_help="Enable/Disable JavaScript in Adobe Reader 6.x"
JavaScript_Acrobat_6.x="JavaScript Adobe Acrobat 6.x"
JavaScript_Acrobat_6.x_help="Enable/Disable JavaScript in Acrobat Acrobat 6.x"
JavaScript_Enabled="JavaScript Enabled"
JavaScript_Disabled="JavaScript Disabled"

Hey, what you have described is normal behaviour for the way you have written your Custom ADM file.
Because you are not using Proper Windows Policies, i.e. Setting them in the policy location in the registry, then once you apply a setting, it will not get over written again ever unless you made a group policy change or do a gpupdate.
Normal group policies will get re-applied depending on the time frame set in the policy its self.

Group Policy Deployment Acrobat Standard XI Version 11

I was able to successfully create a Windows 2008 R2 SP1 Group Policy that would be able to distribute the Adobe Reader Application using the Adobe Customization Wizard XI. I tried to use the same procedure from the Adobe Acrobat Standard 11 download from the adobe licensing site and was unable to get the Group Policy to work. The error message that I am getting is...
The install of application Adobe Acrobat XI Standard 11.0 from policy Deploy Adobe Acrobat 11 failed. The error was : %%1603
This is the procedure that I created for deployment of Adobe Acrobat XI using Group Policy.
How to create a group policy deployment of Adobe Acrobat XI
Overview:
This procedure covers the steps needed to create a group policy that will deploy the Adobe Acrobat installation.
Requirements
•    Windows 2008 Group Policy
•    Adobe Acrobat Customization Wizard
     o    ftp://ftp.adobe.com/pub/adobe/acrobat/win/11.x/11.0.00/misc/CustWiz11000_en_US.exe
•    Adobe Acrobat XI (Version 11)
     o    download from adobe account
Procedure:
1.    Download the Adobe Acrobat XI package.
2.    Extract the contents of the Adobe Acrobat XI package.
a.    Type msiexec.exe /a AcroStan.msi
b.    Click Next
c.    Put in the Network Location Share where everyone can extract the installation.
d.    Click Install
e.    The package will then extract to the network location as indicated above.
f.    Click Finish, once the installation has completed.
g.    Open the Adobe Customization XI Wizard, and customize the package by selecting the AcroStan.msi file.
h.    Customize the AcroStan.MSI installation file
i.    Default viewer of PDF files: Make Acrobat the Default PDF Viewer
ii.    Remove previous versions of Acrobat
iii.    Run Installation: Silently
iv.    If reboot is required at the end of installation: Suppress reboot
i.    Shortcuts: Remove the desktop Shortcut
j.    Online and Adobe Services: Disable Product Improvement Program: checked.
k.   Generate Transform File
i.    Click Transform > Generate Transform File
ii.   Create an Setup.Ini file in the folder of the Distribution Package.
iii. Name the Transform File something useful like “CompanyConfigs”.
3.    Create a Group Policy to deploy the software package. It is usually best to have a group policy for each software installation package.
a.    Update the Domain Default Policy with Always install with elevated privileges. This will allow all software deployment packages to install.
i.    Computer Configuration > Policies > Windows Settings > Administrative Templates > Windows Components > Windows Installer > Always install with elevated privileges : Enabled.
b. Create a Group Policy to enable Windows 7 Verbose Mode
i.    Computer Configuration > Policies > Administrative Templates > System > Verbose vs normal status messages : Enabled.
c.    Create a Group Policy for the Software Installation
i.     Computer Configuration > Policies > Software Settings
ii.    Right click and select New > Package
iii.   Click the AcroRead.msi
iv.   Click Advanced
v.    Click the Modifications Tab and click Add
vi.   Optional: Click the Uninstall this application when it falls out of the scope of management.
Note: This setting can be used to uninstall the application if the group policy ever changes in that the application should be removed.
vii.    The package is now created …
4.    Test the Client in a Virtual Machine
a.    Go to a windows client and run “gpupdate /force”.
b.    The system will then respond that it needs to restart the computer.
c.    Type Yes, and allow the computer to reboot.
d.    If Group Policy is not setup to allow for verbose messages in Windows 7 then the user will just see “Please wait…”, if verbose message is enabled the user will see “Installing Adobe Acrobat…”.
Can someone please tell me what I am missing to get the group policy deployed? It has the same permissions as the Adobe Reader folder and I have done everything exactly the same, except that Adobe Standard has the license number, and owner information included in the Transform file (.mst).
Thank you.

Your case isn't unique. We've heard this a lot. While Acrobat has a small, very small percentage of settings available in the ADMX files,
in case you don't know, PolicyPak software has a solution to manipulate, basically, near 100% of the settings in Acrobat Reader and Professional.
You're welcome to check out how it works. These videos are for Acrobat X, but there is also tempaltes in the download for XI.
Here are links to the pages with full how-to videos:
http://www.policypak.com/products/manage-acrobat-reader-with-group-policy.html
and
http://www.policypak.com/products/manage-acrobat-x-pro-and-acrobat-x-standard-using-group- policy.html
You can be up and running in 20 minutes, but note, it's NOT a template.. PolicyPak is full application management and lockdown system.

ActiveX msi Flash Player 10.0.42.34 group policy deploy issue

I have been deploying the flash player to our workstations since version 9. We have a 2003 AD domain and XP SP3 workstations.
I know that it is recommended to use the flash uninstall program to remove flash when installing a new version but I haven’t taken the time to work on that type of scripting for any install. Any attempts to uninstall the previous versions of flash via group policy when deploying have never worked. I had the same experience with java 1.5 jres…they would never uninstall via policy.
I have had success so far with deploying the latest version to the workstations with a new policy while leaving the old policy applied until a few weeks have past when all the workstations have been updated.
I am in the process of deploying Flash Player 10.0.42.34 to replace Flash Player 10.0.32.18
My test deploy to my virtual XP test workstation worked with no problems. The flash test paged detected the newer version and the correct version was in add/remove programs.
I then did a test deploy to a production workstation and the software installed without errors (the group policy install went extremely fast so I knew something was wrong). No errors were reported in the workstation application log. However when you visited the flash test page no version of flash was detected. I also checked in add/remove programs and the program icon was the windows installer icon instead of the normal red flash box….this has been associated with other installation issues in the past.
I have tried this on 3 other production machines and experienced the same results. My virtual XP test workstation has only had version 10.0.32.18 on it so I am guessing that having had the older versions of 10 on the production workstations is causing the problem somehow.
I have had issues in the past, but nothing like this. Looks like I may have been owned by adobe on this one.
Any insight would be appreciated.
Thanks

Sure , here is the url :
http://www.forevermark.com/ja-jp/The-World-of-Forevermark-/Precious-Collection/
On some machines , the Japanese text in the centre section appears very large. ..( see attached snapshot)
We initially encountered this on the version prior to the 10.0.42.34 version.
However even after the upgrading to 10.0.42.34 , the problem still persists .
Thanks

Deploying Files with Group Policy - Help Needed

Hi,
I am trying to use group policy to deploy files and folders to our server estate. The policy I have created first creates a folder on each server's C drive and then coppies a set of files to this folder from a network share. The folder creation works fine
but the files copy fails. In the Application logs on the servers it displays the following error:
The computer 'ILMT' preference item in the 'GPO - Servers_Production_ALL {CC026B58-FA3B-4399-AA00-AE8E844B2B47}' Group Policy object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed.
Can anyone advise what exactly does not have access here? I don't know what I need to enable to get this to work.
Can anyone help?
Many thanks
James

The copy is on a file server share. presumably if I just give everybody read access to the share that would suffice?
No it won't.
"Sharing" requires several actions:
a) create the folder
b) share the folder
c) grant NTFS permissions on the folder
I think you've neglected action (c).
For your scenario, you need to grant the "server computers" read permissions to the folder.
You can add individual computer accounts, or a group, or "domain computers".
(In a similar way, you could grant access to a user, a group, or "domain users")
[if you need everybody (users) *AND* everything (computers), you could grant permissions to "authenticated users" since that principal includes *BOTH* users and also computers]
Note that "domain computers" and "authenticated users" include all types of domain member computers, i.e. servers, workstations, etc.
Also, note that granting a "computer account" access to a folder or share, does *NOT* mean that a user account on that computer can access the remote share, i.e. permission is granted to the computer account, and a logged-in user account on
that computer does not inherit any kind of access to the remote share by virtue of being logged in.
This means that the computer can access the share but the user cannot access the share. Because the computer account is an identity/principal of it's own accord.
[None of which really has anything to do with Group Policy at all - it's how Windows does file sharing and ACLs... ;)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Uninstalling older versions of reader using Group Policy

I am using Group Policy to deploy Acrobat reader version 8.1.2 - however this does not do an upgrade to older versions or delete older versions. is there a way to do uninstalls or upgrades to the latest version using group policy?
Thanks.

Adobe Reader usually updates fine from one version to the subsequent next (e.g. from 9 to 10).
However, this does not always work well when skipping some versions (e.g. from 7 to 10). In this case I always recommend to uninstall the previous version first.

Group Policy To Delete Old Shared Printers That Are No Longer Shared

I am having an issue where I am successfully using Group Policy to deploy some new printers.
(Computer Configuration > Policies > Windows Settings > Printer Connections > Use the Share name \\Server\Print_Shared_Name)
but I have on those same desktops some old shared printers (\\Server\Old_Printer_Name). They are IP printers being shared off the server but this printer no longer exists on the server and the IP address is also no longer being used. Tried to use some group
policies to delete the printer for the non-admin users but am having no luck with the printer being removed from the machine. The desktops are all Win7 Service Pack 1 and the Server is Windows Server 2008 R2 Standard
Things I have tried:
1. In my same working policy that I use to install the new printer I tried to add on the following
(User Configuration > Preferences > Control Panel Settings > Printers > New > Shared Printer > Delete > For the share path I enter the old share path name that it shows but actually no longer works so \\Server\Old_Printer_Name)
^This did not work when I sign into the desktop as a non-admin user that has the printer still installed or as an admin that also had the printer installed, ran gpupdate, gpupdate /force, rebooted, restarted print spooler
Tried the same steps above but with the following instead
(Computer Configuration > Preferences > Control Panel Settings > Printers > New > TCP/IP Printer > Delete > I then enter the \\Server\Old_Printer_Name IP Address that it used to use
Same results
2. I also tried to create a registry deletion policy still under this policy that installs the printer as follows:
(Computer Configuration > Preferences > Windows Settings > Registry >
New > Registry Item > Delete > I used the following path: HKEY_CURRENT_USER for the hive and key path is Printers > Connections > Manually entered the key from the desktop for the printer I am trying to remove so ,,SERVER,Old_Printer_Name)
^This did not work when I sign into the desktop as a non-admin user that has the printer still installed or as an admin that also had the printer installed, ran gpupdate, gpupdate /force, rebooted, restarted print spooler
3. I also ran a Group Policy Result and it says that it ran the policy just fine
I've tried these steps and everything was case sensitive but have had no luck. Anything that anyone can suggest or if I am in the wrong area, please kindly point me in the right direction

Hi,
>>(Computer Configuration > Preferences > Windows Settings > Registry >
New > Registry Item > Delete > I used the following path: HKEY_CURRENT_USER for the hive and key path is Printers > Connections > Manually entered the key from the desktop for the printer I am trying to remove so ,,SERVER,Old_Printer_Name)
For we are editing the registry hive under HKEY_CURRENT_USER, the setting should be User Configuration\ Preferences \Windows Settings \ Registry
Best regards,
Frank Shen

Group policy for changing binding order of network adapters

Hi,
We have enabled Wifi and Wired (LAN) connections at the same time for users using group policy. Both connections works properly on laptops. Now some applications are not working due to routing issues as same connections are working at the same time.
We want to change connections priority in such a way that Wired (LAN) should always take priority over WiFi connections.
http://support.microsoft.com/kb/894564 describes method for changing same on single computer.
Can this be achieved using group policy.
Mukesh S MCITP Exchange 2007

Hi,
There is no corresponding group policy settings which can change binding order of NIC. However, in the article you provided, it says that we can create a fixed metric by changing
the InterfaceMetric registry value or set the interface metric by using a script. In this way, we can choose to use Group Policy Preferences Registry extension to deploy the registry change to clients, or we can use group policy to deploy the script to clients.
Regarding GPP registry extension, the following article can be referred to for more information.
Registry Extension
http://technet.microsoft.com/en-us/library/cc771589.aspx
If we choose to deploy script via group policy, we can assign computer startup script or user logon script.
Regarding this point, the following article can be referred to for more information.
Assign computer startup scripts
http://technet.microsoft.com/en-us/library/cc779329(v=WS.10).aspx
Assign user logon scripts
http://technet.microsoft.com/en-us/library/cc781361(v=WS.10).aspx
Best regards,
Frank Shen

Apply Network shortcuts via group Policy

I learned of a very special kind of shortcut in Mark Minasi's "Mastering Windows Server 2012 R2" (pg 966) that allows you to create a "network folder" which is termed "Add a network Location" when you actually create the shortcut
in File Explorer.
I want to use AD group policy to deploy such shortcuts, but I am not seeing a way. I am [somewhat] familiar with creating shortcuts using GP Preferences, but that does not seem to be applicable for creating Network Folders.

Hi,
You can achieve your requirement using either GP Preferences or logon script.
But comparing the two techniques GP Preferences is recommended.
This is because logon scripts increases the loading time during logon and may not load properly at random times.
To map the network folder using Preferences, open GPMC console -> Edit the GPO assigned to the desired scope of users -> click the ‘User Configuration’ folder, then click the ‘Preferences’ folder. You can see all of the user-relevant options you can set
in Preferences. Find Drive Maps under ‘Windows Settings'.
Checkout the below link on configuring Drive Maps using Preferences,
http://technet.microsoft.com/en-us/library/cc770902.aspx
Checkout the below thread on similar discussion,
http://social.technet.microsoft.com/Forums/windowsserver/en-US/71c19111-75b0-412c-889f-79154857d685/deploy-network-drive-gpo
Regards,
Gopi
www.jijitechnologies.com

Windows 8.1 mandatory profile Group Policy printer problems

We're a school district that is using mandatory profiles for the students. We use both Win 7 and Win 8.1 on the workstations. We're having a problem with group policy printer deployment on just the Windows 8 Workstations. I've tried using both the deployment
method in policies and the Preferences with Item level targeting and on the windows 8 ones its always intermittent. Sometimes you login and get the printers or some of them and sometimes not. Other times if you log out and back on etc. I've been troubleshooting
this for a week and have found with Win 7 it seems to always work but on our Win 8.1 ones about 50/50. The error in the Event log for that printer is this.
Group Policy Object did not apply because it failed with error code '0x80070057 The parameter is incorrect.' This error was suppressed.
What I've found that if I create a test account that does not use the mandatory profile the printers always map. Even on Windows 8.1. So far thats the only commonality. Can anyone tel me what I can look at with this. If they never worked that would be an
easier problem but its not consistent.
Thanks
Jason

Hi Jason, Did you ever find a fix for this as we are having exactly the same problem only with windows 8.1 computers using mandatory profiles and it's driving me mad. Any help would be much appreciated Thanks Dan

Deploy Acrobat Reader 10.1.3 via MSI Group Policy

The purpose of this thread is to identify EASIEST way to create/obtain an MSI file of the LATEST VERSION of Acrobat Reader (currently 10.1.3 as of 7/19/2012) to be deployed via GPO. I am not concerned with customizations of Reader settings as I have accomplished this already using Group Policy.
It sounds so easy, but I have found it to be quite frustrating and extremely time consuming to figure this out.
Here's what I have so far:
To download the full installer from Adobe, you must first apply on Adobe's website to distribute Reader:
http://www.adobe.com/products/reader/rdr_distribution1.html
Once you submit the request, a short time later you'll get an e-mail with a link to download the full exe file of reader 10.1.3.
Here's a link that explains how to extract an MSI from this exe:
http://blogs.adobe.com/dmcmahon/2010/06/16/how-to-extract-an-msi-file-from-the-exe-
for-adobe-reader/
Even with following those steps, I do not end up with an MSI file which will install 10.1.3.
To try another route:
There is also an Adobe FTP site. If you navigate down into the Reader 10.1.0 folder there is an MSI file. Good - but it's the old version.
You would think that if you navigate into the 10.1.3 folder there would be an MSI there as well.
Unfortunately there is not. However, there is an MSP file found in the misc folder:
I have tried several methods that are supposed to combine the MSP file with the MSI file - they have not worked.
I have also tried several methods of modifying MSI files, and using the Adobe Cusomization wizard downloadable here: http://www.adobe.com/support/downloads/detail.jsp?ftpID=4950
I am unable to end up with a deployable MSI file for Reader 10.1.3.
It's amazing that it's so complicated to deploy the latest version of Adobe Reader to my users.
Does anyone have a comprehensive answer to this simple problem? I do not want a link to a document with 20 pages explaining the theory of MSP files. I am looking for a concise, step by step method to obtain an MSI for 10.1.3 quickly and easily.
Thanks!

First there isn't a single MSI file that will install Adobe Reader 10.1.3 available. There are two ways in which you can create an installer package that will install Adobe Reader 10.1.3.
1. Bootstrapper
- Bootstrapper uses the Setup.ini file to create a chained installation process and is run from Setup.exe with a limited amount of installation switches available.
The process is documented in the Enterprise Administration Guide: http://kb2.adobe.com/cps/837/cpsid_83709/attachments/Acrobat_Enterprise_Administration.pdf #page=77
Here is a reference video on the process: http://www.youtube.com/watch?v=9zYTUyOIcNk
2. AIP (Administrative Installation Point)
- AIP uses the Windows Installer to create a decompressed updated full MSI based installer. The process is documented in the Enterprise Administration Guide: http://kb2.adobe.com/cps/837/cpsid_83709/attachments/Acrobat_Enterprise_Administration.pdf #page=70
Here is a reference video on the process: http://www.youtube.com/watch?v=05XOKX0150w&feature=relmfu
* Please note, that each installation method has it's advantages and disadvantages. Those aspects of each installation type need to be seriously considered for your specific environment and what will and will not work for the IT group and user groups within your enterprise before you decide upon one of them.
Regards,
Steve

Can I prevent a user from Deleting the Group Policy deployed power plan?

I have Power Manager version 3.20 installed and am using the Group Policy template to deploy a customized power plan. I do not want my users to have the ability to delete this custom plan, but I cannot find the option in the Group Policy to change the setting that would grey-out the Delete button in Power Manager.
I have located the registry value that changes the function of Power Manager, it is: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Lenovo\PWRMGRV\PowerSchemes\42617646-BC99-48E2-B3AF-C562C25F4098\ProhibitModification. If the value is 0, then the delete button is available. If the value is 5, then the delete button is greyed-out.
The problems is that the Power Plan ID number (the 42617646-BC99... part in the reg key above) changes from computer to computer. That ID string seems to be tied somehow to the specific computer. So, I cannot just create a Group Policy Preference to change that value in the registry, because that value is always going to have a different name.
The computers are all ThinkPad T400 model and are running Windows 7 Enterprise 64-bit.
Can anyone suggest a different method to change this setting? If not, is there any chance that the Power Manager application can be upgraded to include this control?
Thank you!

welcome to the forum!
to add to what gan said, page 6 of the power manager deployment guide covers this policy over active directory.
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=TVAN-ADMIN#pmat
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-70419
ThinkStation C20
ThinkPad X1C · X220 · X60T · s30 · 600

Group Policy Printers failing - Windows 8.1 Enterprise

Been struggling with this for years, across the past several versions of Windows.
Currently we're on Windows 8.1 Enterprise, deployed in a lab environment. I'd like to get the entire lab connected to a shared printer for any user who logs in.
First of all, which Group Policy option should I be using? Computer or User? Policy or Preference? There seems to be four different ways to deploy a printer. It is a shared printer on a 2008R2 server.
Second, I've been using a User Preference for the time being with "update" as the command. It will work most of the time, but every now and then a user will log on and see no printers. Event logs show entries that range from "printer unavailable"
to "name is incorrect", which is all weird. No printer configurations have changed. Other times a user will see a printer but nothing will happen when they go to print. Still other times, and I've only seen this since we've been on Windows 8.1, a
user will see 60 or 70 printers in Devices and Printers, all with the same name, and none of them working.
This is a heavily used lab, with dozens of users logging on and off each computer every day. I'm just trying to determine the most reliable way of giving each user a printer. Thanks for anyone who can help.

Hi,
I suggest deploying your computer under User configuration with GPP. Printers deployed under the user configuration will allow easier management. You can configure printers to set themselves as the default. You can also change a printer preference (such
as duplexing) without redeploying the printer. If you use print queue management software (like Print Manager Plus), you must use a user side printer. The downside is the printer installation will be slower. Every new user logging onto the computer will have
to wait as the printer installs.
Please clear previous GP for deploying printer and check suggestions here:
GP Preferences: Add a new printer, set as default
http://blogs.technet.com/b/grouppolicy/archive/2009/06/24/gp-preferences-set-a-default-printer.aspx
After deployment, please check the gpresult by running following command and see if it is deployed properly:
gpresult /s ComputerName /user Domain\UserName /h c:\gpreport.html
Note: Here, ComputerName is the name of the computer that you want to log policy results for and Domain\UserName indicates the user that you want to log policy results for.
Kate Li
TechNet Community Support

Deployment of software through Group policy does not work

Hi all,
I am trying to deploy a program through Group policy, specifically winrar, any client computer is able to install the program. Please find below the events from the workstation:
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 4/27/2014 10:06:01 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because
of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 4/27/2014 10:04:49 PM
Event ID: 1085
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
Windows failed to apply the Software Installation settings. Software Installation settings might have its own log file. Please click on the "More information" link.
Log Name: System
Source: Application Management Group Policy
Date: 4/27/2014 10:04:49 PM
Event ID: 108
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
Failed to apply changes to software installation settings. Software changes could not be applied. A previous log entry with details should exist. The error was : %%1612
Log Name: System
Source: Application Management Group Policy
Date: 4/27/2014 10:04:48 PM
Event ID: 102
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
The install of application WinRAR from policy Basic Computers GPO failed. The error was : %%1612
I am using windows server 2008 R2 and all my clients are running Windows 7 Enterprise and they are working over a domain, note that I am using VMware.
Below there are a list of the troubleshooting steps that have been already applied:
*Disable the the firewall both in the server and in the clients
*Grant read access to the folder where the the program is shared for installation, it was added the authenticated users and domain computers.
*Group policy modifications:
-> User Account Control
Policy Setting Winning GPO
- User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Elevate without prompting Basic Computers GPO
- User Account Control: Detect application installations and prompt for elevation Disabled Basic Computers GPO
- User Account Control: Only elevate UIAccess applications that are installed in secure locations Disabled Basic Computers GPO
- User Account Control: Run all administrators in Admin Approval Mode Disabled Basic Computers GPO
--> System/Group Policy
Policy Setting Winning GPO
- Startup policy processing wait time Enabled Basic Computers GPO
Amount of time to wait (in seconds): 120
--> System/Logon
Policy Setting Winning GPO
- Always wait for the network at computer startup and logon Enabled Basic Computers GPO
Thank you very much for your time.

Hi Marco,
Based on your description, we can enable diagnostic logging of Group Policy Software Installation processing to troubleshoot the issue.
Regarding this point, the following article can be referred to for more information.
How to troubleshoot software installations by using Windows application management debug logging
http://support.microsoft.com/kb/249621
Once you get the log, you may upload it to OneDrive and provide us the download link.
In addition, the following article provides a step-to-step guidance for deploying software via group policy and can be referred to for double check.
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
http://support.microsoft.com/kb/816102
Best regards,
Frank Shen

Acrobat 9.1 Group Policy Enterprise Deployment

Similar Messages

Maybe you are looking for