Deployment of software through Group policy does not work

Hi all,
I am trying to deploy a program through Group policy, specifically winrar, any client computer is able to install the program. Please find below the events from the workstation:
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 4/27/2014 10:06:01 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because
of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 4/27/2014 10:04:49 PM
Event ID: 1085
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
Windows failed to apply the Software Installation settings. Software Installation settings might have its own log file. Please click on the "More information" link.
Log Name: System
Source: Application Management Group Policy
Date: 4/27/2014 10:04:49 PM
Event ID: 108
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
Failed to apply changes to software installation settings. Software changes could not be applied. A previous log entry with details should exist. The error was : %%1612
Log Name: System
Source: Application Management Group Policy
Date: 4/27/2014 10:04:48 PM
Event ID: 102
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
The install of application WinRAR from policy Basic Computers GPO failed. The error was : %%1612
I am using windows server 2008 R2 and all my clients are running Windows 7 Enterprise and they are working over a domain, note that I am using VMware.
Below there are a list of the troubleshooting steps that have been already applied:
*Disable the the firewall both in the server and in the clients
*Grant read access to the folder where the the program is shared for installation, it was added the authenticated users and domain computers.
*Group policy modifications:
-> User Account Control
Policy Setting Winning GPO
- User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Elevate without prompting Basic Computers GPO
- User Account Control: Detect application installations and prompt for elevation Disabled Basic Computers GPO
- User Account Control: Only elevate UIAccess applications that are installed in secure locations Disabled Basic Computers GPO
- User Account Control: Run all administrators in Admin Approval Mode Disabled Basic Computers GPO
--> System/Group Policy
Policy Setting Winning GPO
- Startup policy processing wait time Enabled Basic Computers GPO
Amount of time to wait (in seconds): 120
--> System/Logon
Policy Setting Winning GPO
- Always wait for the network at computer startup and logon Enabled Basic Computers GPO
Thank you very much for your time.

Hi Marco,
Based on your description, we can enable diagnostic logging of Group Policy Software Installation processing to troubleshoot the issue.
Regarding this point, the following article can be referred to for more information.
How to troubleshoot software installations by using Windows application management debug logging
http://support.microsoft.com/kb/249621
Once you get the log, you may upload it to OneDrive and provide us the download link.
In addition, the following article provides a step-to-step guidance for deploying software via group policy and can be referred to for double check.
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
http://support.microsoft.com/kb/816102
Best regards,
Frank Shen

Similar Messages

Don't have proper privilege to change the date and time. Group Policy does not work

Hello All,
I have configure group policy to change date and time only administrator. The problem is Windows XP machine cannot view the calendar but windows 7 can. So i need to view the calender for windows XP machine.
Error: you do not have proper privilege to change the date and time.
Please suggest.
Thanks

Hi Parvez,
Before going further:
I applied a VM Windows XP pro. When I logged in as a local admin, I can view the calendar from the right corner of desktop or from control
panel. However, when I logged in as a normal user account, I received the same message as yours.
For now:
I know this is not what you want. However, for normal users to view calendar, we can consider to give
Change System Time permissions to these users.
In addition, regarding this topic, the following article and thread can be referred to for more information.
You cannot set the date, time, or time zone on your computer
http://support.microsoft.com/kb/300022/en-us
Check windows calendar in XP pro without admin rights
http://community.spiceworks.com/topic/100116-check-windows-calendar-in-xp-pro-without-admin-rights
Please Note: Since the second website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Best regards,
Frank Shen

Fault policy does not work when throwing remoteFault in bpel

Hi
I have a BPEL-proces in which I throw a remoteFault.
In the fault-policy there is a condition for this fault
<faultName xmlns:bpelx="http://schemas.oracle.com/bpel/extension"
name="bpelx:remoteFault">
<condition>
<action ref="ora-java"/>
</condition>
</faultName>
But the fault-policy does not work if I throw this remoteFault in de bpel. But when I invoke another service (which is shutdown), then I get a remoteFault and for this remoteFault the fault-policy works well.
Any idea why the fault-policy does not work when I throw the remoteFault?
Regards

BPEL fault works only on invocation failures.
Fault management will work based on the remote fault from the remote service, you cannot throw remote fault from bpel and capture that in fault management and process.
The following are the actions that we can take on faults.
1. Human Intervention
2. Rethrow [rethrowFault]
3. Termination [abort]
4. Replay Fault [replayScope]
5. Custom Java Action [javaAction]
6. Retry [retry]
Hope this helps !!!
Thanks,
Vijay

VPD context_sentisitive policy does not works as expected

Hi,
I'm trying to implement CONTEXT_SENSITIVE RLS policies:
http://docs.oracle.com/database/121/ARPLS/d_rls.htm#ARPLS67721
Server re-evaluates the policy function at statement execution time if it detects context changes since the last use of the cursor. For session pooling where multiple clients share a database session, the middle tier must reset context during client switches. Note that the server does not cache the value returned by the function for this policy type; it always executes the policy function on statement parsing. Applies to only one object.
What I have discovered so far:
1. policy function executed each time when query executed from SQL*Plus. Independently of context changes.
2. policy function executed only once when query executed from PL/SQL.
3. When we have a PL/SQL procedure like this:
begin
<query>
<change context>
<query>
end;
Additionally, query (cursor) is not present in PL/SQL cursor cache, then
policy functions executed only once when first query executed.
So wrong results are possible when application context changed in a way that policy function returned predicate also changed.
4. JDBC: policy function executed each time when query is executed. Policy function executed only once when I enabled statement caching:
OracleDataSource ods = new OracleDataSource();
// skip
ods.setConnectionCachingEnabled( true );
ods.setImplicitCachingEnabled( true );
Properties cacheProps = new Properties();
cacheProps.put( "InitialLimit", "1" );
cacheProps.put( "MinLimit", "1" );
cacheProps.put( "MaxLimit", "5" );
cacheProps.put( "MaxStatementsLimit", "50" );
ods.setConnectionCacheProperties( cacheProps );
5. Queries with RLS policies are not cached in the session cursor cache. For example, if we executed same query multiple times in SQL*Plus - then this query will be not cached.
2 and 3 (PLSQL) relates to PL/SQL cursor cache.
As a result, when we disable PL/SQL cursor cache (setting session_cached_cursors=0), then policy function executed each time in PL/SQL.
What I have observed, it is not agreed with documentation on context_sensitive policies (I provided a link above):
Server re-evaluates the policy function at statement execution time if it detects context changes since the last use of the cursor.
Signature of DBMS_RLS.ADD_POLICY procedure was changed in 12c with additional arguments: NAMESPACE, ATTRIBUTE.
I tried to use them with no luck, results are the same.
In my opinion statements below are contradict to each other:
1. Server re-evaluates the policy function at statement execution time if it detects context changes since the last use of the cursor.
2. it always executes the policy function on statement parsing.
First, documentation says that the policy function evaluates at statement execution time.
Second, documentation says that the policy function executes on statement parsing.
I have used Oracle Database 12.1.0.2 for testing.
I provided a script that I have used in my tests:
rls_policy.txt - creates test schema and policy
rls_sqlplus.txt - runs simple select against query with RLS policy
rls_plsql.txt - more complex example, runs some anonymous blocks with queries against table with RLS policy.
In my opinion, context_sensitive policies does not works as described in the documentation.
Is it a bug or I'm missing something?
Please advice.
Best regards,
Mikhail.

Thanks Scott. May i know why i should never use user policies for denying access?
From my readings on some articles, there is no way to deny users permission in sharepoint after granting domain users with read access other than the web application user policy in our case (with certain reason, we need this group to be granted with
read access but we would like to restrict small amount of users from seeing the page)

Apple software update for windows does not work properly

Apple software update does not work properly

I FIXED IT!! I can't believe it . I actually figured out how to make it work(well sort of). My Apple Software Updater now works (almost) perfectly and I just successfully downloaded and installed itunes 10.6.3.25 through it!!!
Ok , the way I see it, either the latest itunes update or the recent Windows Patch Tuesday on June 12th, 2012 must have inadvertently removed the Administrative Rights from the Apple Software Update Tool .lnk file.
So you must go to where the file resides on your hard drive - for me that was C:\Program Data\Microsoft\Windows\Start Menu\Programs - Right click on the Apple software Tool icon and choose properties. Click on the compatibility tab. At the bottom of this tab click on "change settings for all users" and hit Yes at the UAC pop-up. Now make sure you place a check in the "Run this program as Administrator" under the Privilege level section at the bottom. Hit Apply and then OK. The hit Ok again to get off the properties pop-up.
When I went back and clicked on the Apple Software Update shortcut, I got a UAC pop-up asking me if I wanted to proceed(something I had always, in the past, gotten but haven't since this problem started). The Apple Software Update tool came up and to my suprise the progress bar STAYED and started to slowly fill up partially with the green progress bar. Viola, the itunes 10.6.3 update showed up on the top part of the screen as a new update needing to be installed - the bottom screen, as usual, had the changelog info for the 10.6.3 update. I clicked on install and , again, Viola. the update downloaded and installed flawlessly. I had to reboot my computer and when it restarted, itunes was working perfectly and it was correctly showing as itunes v10.6.3.25.
I say it is almost or sort of fixed because when you click on the Apple Software Update shortcut after the 10.6.3 install it goes back to doing the same thing it did before(i.e. processing for a second and then saying there are new updates but showing a blank field). Maybe this is the way the software now looks if there are no updates available to install - maybe Apple is working on this to eventually get it back to normal. All I know is the process I outlined above worked for me(at least to get the ASU to recognize and properly download and install itunes 10.6.3). It's certainly not perfect, but it worked. Please try this method and let me know what results you have with it. Good luck.

Why can't I download any new software? download manager doeas not work

Why can't I download any new software? download manager does not worK

Hi,
I am already a member of creative cloud for over 12 months,
I do not want the trial software, I want the software I am entitled to through the creative cloud.
I already have photoshop, illustrator, dreamweaver and others, however, after signing in and going to the link below, nothing happens when I click the download button.
https://creative.adobe.com/products/lightroom
Len

Desktop software links and menu does not work

Hi,
i have a blackberry bold 9000 and installed the latest desktop software 4.6 from the blackberry website.
my device manager says connected. but if i start desktop manager, i don't see the main header menu (there is just nothing, where the text menu should be) and the icons in the main window does not work as links. there is no connection to anything.
i have uninstalled all blackberry software and installed it new. i have installed several runtime environments manually, including java and c++. but that makes no difference at all.
what could be the problem? what runtime is necessary and should working correctly for blackberry desktop manager software? do i need some tweaks in internet explorer security settings (active scripting or something like that) ?
best regards!
Message Edited by o-atas on 10-08-2008 07:00 AM

hello o-atas,
could you make a screenshot and show it to us ?
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

Swipe to close program groups iOS5 does not work!

I try to swipe my finger to close open program groups, but it does not work in iOS5.
I constantly find myself swiping to close the groups bechause it`s the simplest way to do it, but after upgrading to iOS5 i have to press the home button to close it.
Is this a bug? Hopefully, bechause using the home button is not as easy as swiping my finger!

Well it's hard to know what the OP is referring to no matter how hard you read the question. What are "program groups"?
As for folders, you close as you always have - touch the folder itself, touch anywhere on the home screen (which still works fine for me), or just press the home button.

HT3669 hp deskjet all in one 4488 printer software downloaded from apple does not work

The printer software for HP Deskjet all in one F4488 downloaded from Apple support for OS 10.8.2 does not work. The problem is that the software is not available at the HP support site only.

Your apparently older Model needs to use Apple's "Print & Scan" which is found in Applications>System Prefernces>Print & Scan. There you will follow the following instructions from the HP Support site to Scan, for instance:
Place the item that you want to scan on the scanner glass, or load it into the automatic document feeder (ADF) if your printer has one.
Click the Apple menu ( ), and then click System Preferences .
Click Print & Scan ( ).
Click your printer in the left pane.
Click Scan , and then click Open Scanner .
Click Show Details . The details of the scan display, including options to change scan settings.Figure 4: Example of the Show Details scanning screen
Change any scan settings as necessary, and then click Scan .NOTE: Make sure to select either the Flatbed mode or the Document Feeder mode, depending on your printer and how you plan to scan.
Hope this helps

Currency conversion with Group consolidation does not work

Currency Conversion WITHOUT group consolidation works (script logic reads CURRENCY = %GROUPS_SET%) which puts out values in USD. The values were translated correctly as per the exchange rates.
Now, since we need consolidation, I ran currency consolidation WITH group consolidation (I changed the script logic to read GROUP = %GROUPS_SET%). FXtrans package runs successfully with 0 records (0 submitted, 0 success, 0 fail).
I also referred NOTE 1519146.
Please advice.
Thanks,
Tagz

Hi,
You can try to use %GROUPS_DIM% or the dimension name directly in the dynamic script as suggested.
And also try after modifying your currency conversion script as GROUPS = %GROUPS_SET%. If this does not work please try
by hardcoding GROUPS=Value in the script and let us know how it works.
Hope this helps.
Regards,
Shoba

Deploying software through group policy with certain requirements

here is the question:
I have an existing Active Directory environment, consisting of 300 computers. we need to install the latest version of ADOBE ACROBAT READER to all computers with the following requirements:
. The application is not supported on windows XP
. We need to have automatic updates turned off within the application
. We need a silent, automatic installation.
. The Engineer Department needs to be excluded, as they use Proprietary PDF app.
Is is possible to deploy thru Group Policy and meet all these so called requirements ?

Hi,
Before going further, I agree with Zanderol24.
>>
The application is not supported on windows XP
We can use a WMI filter to exclude Windows XP clients from applying the software installation policy.
Regarding WMI filter, the following article can be referred to for more information.
WMI filtering using GPMC
http://technet.microsoft.com/en-us/library/cc779036(v=ws.10).aspx
Regarding how to use WMI filter to filter out Windows XP, the following article can be referred to as reference.
Create WMI Filters for the GPO
http://technet.microsoft.com/en-us/library/cc947846(v=ws.10).aspx
>>We need to have automatic updates turned off within the application
For this is related to the software, we can contact vendor support to ask for suggestions.
>>We need a silent, automatic installation.
We can choose to assign a program distribution to users or computers.
If we assign the program to a user, it is installed when the user logs on to the computer. When the user first runs the program, the installation is completed.
If we assign the program to a computer, it is installed when the computer starts, and it is available to all users who log on to the computer. When a user first runs the program,
the installation is completed.
Regarding how to use Group Policy to remotely install software, the following article can be referred to for more information.
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
http://support.microsoft.com/kb/816102/en-us
>>The Engineer Department needs to be excluded, as they use Proprietary PDF app.
If we choose to assign the software to computers, we have to filter out computer accounts for the Engineer Department from applying the software installation policy. If we
choose to assign the software to users, we have to filter out user accounts for the department. We can use security filtering to do this.
Regarding security filtering, the following articles can be referred to for more information.
Security filtering using GPMC
http://technet.microsoft.com/en-us/library/cc781988(v=ws.10).aspx
Filter Using Security Groups
http://technet.microsoft.com/en-us/library/cc752992.aspx
Best regards,
Frank Shen

Deploying SCCM Client through Group Policy

Hi
I want to deploy SCCM Clients to PCs using Group policy - I know that i need the
MSI file which is included in the SCCM setup DVD but i dont have a fast internet to download the whole package as i just need (CCMSETUP AND ADM Template)
Could someone please share a link where i can download these files?
Thanks Guys,...

Just to help you, you can use this link to install or deploy configuration manager 2012 R2 clients to systems via group policy
http://prajwaldesai.com/deploying-configuration-manager-2012-r2-clients-using-group-policy/
Prajwal Desai, http://prajwaldesai.com

PAL: Deploy changes on printer to targetsystems does not work

Hi folks.
I set up PAL (printing assistant landscape) and deployed the printers from central to target-systems. Adding-/Removing printers from the Target-group works fine (in case there arenu2019t any spools on device).
But in case I want to change the u201Cdestination hostu201D for example in trx spad, the changes wonu2019t be made on the target system after redeployment of the printer.
It only works when deleting and reading over PAL.
I was searching for notes and for information in the PAL-guideline. This use-case isnu2019t mentioned.
Does anybody of you guys have an idea how to deploy these changes to the target-server? Did I wrong configuration, does this work at your site or is this function missing in PAL?
Thanks for your inputs!
Kind regards, Andreas

Hi!
Thanks for your reply. I'm familiar with these documents. There I haven't found information how or if redistributing of changes from source to target system should work.
The workaround to deploy changes is delete/add the printer from the target group. This canu2019t be the only solution??
help.sap.com "only" provides how to configure PAL and how work with PAL (Create/Delete).
So, the simple question is: If I make changes on a deployed printer in SPAD in the central system and then I distribute it over PAL... why the changes aren't set to target systems?
Greetings, Andreas

Outlook 2013 - wrap text group policy applied, not working with or without digital signature

Hello,
I'm adding group policies to apply on our new installations of Windows 8.1 with Office 2013. One of the settings being applied is enforcing plain text emails and wrapping text at a certain number of characters. Policies are being added using the Outlook
2013 admx.
When I check the options inside Outlook 2013 the group policy did apply successfully (File, Options, Mail, scroll down to Message Format) The option to "Automatically wrap text at character:" is set to 132 and not adjustable as it should be.
In the group policy I have it set to wrap at 132 characters, but when I go to a client machine and send a digitally signed email, it wraps at the default 76 characters. This makes for very annoying short blocky emails and multi-line hyperlinks.
If I do not digitally sign the email then the text doesn't wrap at all! (until it meets the end of the window). So under no circumstances is it wrapping at 132 where it's supposed to.
Thanks,
-Nick

Hi,
What is your account type in Outlook? Exchange or others?
Please also let me know the email format that you are sending, Plain Text, HTML or Rich Text Format.
You can try sending the same emails in Outlook Safe Mode:
Press Win + R and type “outlook.exe /safe” in the blank box, then press Enter.
If there’s no problem in Safe Mode, disable the suspicious add-ins to verify which add-ins caused this issue.
Thanks,
Melon Chen
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

New Folder Redirection Group Policy is not working

Recently installed a new server on an older network:
Old network server: SBS 2003
New network server: Server 2012 STD
The network is working well and all computers are able to communicate with each other. I have already mapped a few network drives to folders that are located on the server. The owner wants to implement the same Folder Redirection of their Documents folder
(Mixture of WIN7 PCs and WINXP) that their old server provided. I used the following Document to create the Folder Redirection:
http://technet.microsoft.com/en-us/library/jj649078.aspx
I then went to each computer and performed a gpupdate /force on each computer than logged off the profile. When I logged off, the sync window (folder redirection?) popped up and still showed that it was trying to transfer/sync with the old server that is
no longer on the network. I also logged into the server and the shared folder that I selected for Folder Redirection does not have any data in it.
Is there something else that I am missing. Is there some sort of configuration on the clients themselves that I need to look for such as some Target Path?
I can provide more information upon request.

Hi,
Based on your description, have we redirected the folders back before we removed the older server?
Besides, were there some error events in the Event Viewer?
To configure folder redirection, we need to assign users proper share and NTFS permissions.
Regarding this point, the following article can be referred to as reference.
Security Recommendations for Folder Redirection
http://technet.microsoft.com/library/cc736916.aspx
Besides, regarding how to configure folder redirection, the following article can also be referred to for more information.
Configuring Folder Redirection
http://technet.microsoft.com/library/cc786749.aspx
In addition, for folder redirection to work, we need to log off clients twice, or we can enable the following policy.
Computer Configuration > Policies > Administrative Templates > System/Logon > Always wait for the network at computer startup
and logon
Hope it helps.
Best regards,
Frank Shen

Deployment of software through Group policy does not work

Similar Messages

Maybe you are looking for