Group Policy control of ActiveX installation

Our users are on Windows 8.1 and IE 11.
We use SQL reporting services at our company. Our users run reports from the Report Manager, which uses an ActiveX control to enable printing.
I need to allow our normal users to install this ActiveX control. Looking at this page http://technet.microsoft.com/en-us/library/dn454941.aspx I added the CLSID of the control to a GPO under
Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management. I linked
this GPO to an OU.
Even after making sure the policy was applied to the the computer, this ActiveX control still required popped a UAC dialog to allow the installation of this control.
What do I need to do to make this work?

Hi,
Please follow these steps:
Step 1: Convert ActiveX exe or cab file to MSI package
===================================
Install visual studio installer to create .msi package of ActiveX Control
Downloaded free Visual Studio installer from
http://msdn.microsoft.com/en-us/vs2005/aa718352.aspx
But this requires Visual Studio 6.0 to be installed
Step 2: Place the package in network share where all the users have access
Step 3: Create an organizational unit (OU) in active directory
Step 4: Add a group policy object (GPO) to the OU
Step 5: Publish the package using this GPO
=============================
1. Open Group Policy editor and go under User Configuration > Software Settings ->"Software Installation"
2. Right-click, select new > package, and browse to the package (make sure it's on a network location that all of his users will be able to access, because this is going to become the distribution point)
3. Once you choose a package, choose "Advanced" from the options list
4. On the Deployment tab, select "Assigned", click the "Advanced" button at the bottom, and make sure that "Include OLE class and product information" is checked, and that "Make this 32bit x86 application available to Win64
machines" Also, on the "Deployment" tab, make sure that "Install this application at logon" is checked.
After that, please be assured that we need to run gpupdate /force command on the client machines after applying the group policy on the server side.
Now log in to client machine using the user login created in the OU to check if it can work properly.
For more information, please refer to this article:
How To Install ActiveX Controls in Internet Explorer Using the Active Directory
http://support.microsoft.com/kb/280579
Karen Hu
TechNet Community Support

Similar Messages

Group Policy Deployment Acrobat Standard XI Version 11

I was able to successfully create a Windows 2008 R2 SP1 Group Policy that would be able to distribute the Adobe Reader Application using the Adobe Customization Wizard XI. I tried to use the same procedure from the Adobe Acrobat Standard 11 download from the adobe licensing site and was unable to get the Group Policy to work. The error message that I am getting is...
The install of application Adobe Acrobat XI Standard 11.0 from policy Deploy Adobe Acrobat 11 failed. The error was : %%1603
This is the procedure that I created for deployment of Adobe Acrobat XI using Group Policy.
How to create a group policy deployment of Adobe Acrobat XI
Overview:
This procedure covers the steps needed to create a group policy that will deploy the Adobe Acrobat installation.
Requirements
•    Windows 2008 Group Policy
•    Adobe Acrobat Customization Wizard
     o    ftp://ftp.adobe.com/pub/adobe/acrobat/win/11.x/11.0.00/misc/CustWiz11000_en_US.exe
•    Adobe Acrobat XI (Version 11)
     o    download from adobe account
Procedure:
1.    Download the Adobe Acrobat XI package.
2.    Extract the contents of the Adobe Acrobat XI package.
a.    Type msiexec.exe /a AcroStan.msi
b.    Click Next
c.    Put in the Network Location Share where everyone can extract the installation.
d.    Click Install
e.    The package will then extract to the network location as indicated above.
f.    Click Finish, once the installation has completed.
g.    Open the Adobe Customization XI Wizard, and customize the package by selecting the AcroStan.msi file.
h.    Customize the AcroStan.MSI installation file
i.    Default viewer of PDF files: Make Acrobat the Default PDF Viewer
ii.    Remove previous versions of Acrobat
iii.    Run Installation: Silently
iv.    If reboot is required at the end of installation: Suppress reboot
i.    Shortcuts: Remove the desktop Shortcut
j.    Online and Adobe Services: Disable Product Improvement Program: checked.
k.   Generate Transform File
i.    Click Transform > Generate Transform File
ii.   Create an Setup.Ini file in the folder of the Distribution Package.
iii. Name the Transform File something useful like “CompanyConfigs”.
3.    Create a Group Policy to deploy the software package. It is usually best to have a group policy for each software installation package.
a.    Update the Domain Default Policy with Always install with elevated privileges. This will allow all software deployment packages to install.
i.    Computer Configuration > Policies > Windows Settings > Administrative Templates > Windows Components > Windows Installer > Always install with elevated privileges : Enabled.
b. Create a Group Policy to enable Windows 7 Verbose Mode
i.    Computer Configuration > Policies > Administrative Templates > System > Verbose vs normal status messages : Enabled.
c.    Create a Group Policy for the Software Installation
i.     Computer Configuration > Policies > Software Settings
ii.    Right click and select New > Package
iii.   Click the AcroRead.msi
iv.   Click Advanced
v.    Click the Modifications Tab and click Add
vi.   Optional: Click the Uninstall this application when it falls out of the scope of management.
Note: This setting can be used to uninstall the application if the group policy ever changes in that the application should be removed.
vii.    The package is now created …
4.    Test the Client in a Virtual Machine
a.    Go to a windows client and run “gpupdate /force”.
b.    The system will then respond that it needs to restart the computer.
c.    Type Yes, and allow the computer to reboot.
d.    If Group Policy is not setup to allow for verbose messages in Windows 7 then the user will just see “Please wait…”, if verbose message is enabled the user will see “Installing Adobe Acrobat…”.
Can someone please tell me what I am missing to get the group policy deployed? It has the same permissions as the Adobe Reader folder and I have done everything exactly the same, except that Adobe Standard has the license number, and owner information included in the Transform file (.mst).
Thank you.

Your case isn't unique. We've heard this a lot. While Acrobat has a small, very small percentage of settings available in the ADMX files,
in case you don't know, PolicyPak software has a solution to manipulate, basically, near 100% of the settings in Acrobat Reader and Professional.
You're welcome to check out how it works. These videos are for Acrobat X, but there is also tempaltes in the download for XI.
Here are links to the pages with full how-to videos:
http://www.policypak.com/products/manage-acrobat-reader-with-group-policy.html
and
http://www.policypak.com/products/manage-acrobat-x-pro-and-acrobat-x-standard-using-group- policy.html
You can be up and running in 20 minutes, but note, it's NOT a template.. PolicyPak is full application management and lockdown system.

How to deploy 9.3.2 incremental patch (msp) over group policy

Hello to all,
i have deployed Reader 9.3.1 via group policy in windows (software installation package).
It was installed on all clients successfully.
Now that 9.3.2 msp file came out i need to distribute the new incremental patch to all hosts in the domain.
I wanted to slipstream the 9.3.2 msp update into the 9.3.1 msi,so i tried the following command:
msiexec /a AdbeRdr931_en_us.msi /p AdbeRdrUpd932_all_incr.msp
I also tried msiexec /a AdbeRdr930_en_us.msi /p AdbeRdrUpd932_all_incr.msp supposing that it needs the 9.3.0 initial package to work.
But the following error comes out in both commands:
The upgrade patch cannot be installed by the windows installer service because the program to be upgraded may be missing, or the upgrade patch may update a different version of the program. Verify that the program to be upgraded exists on your computer and that you have the correct upgrade patch.
What could be wrong?
What is the recomended way to deploy an incremental patch msp file to an already deployed earlier version?

I used this MSIEXEC.exe command this morning VIA a GPO and installed on both 9.3.0 &
9.3.1
MSIEXEC.EXE /update \\xxxxxxx\xxx\adobereader932\adberdrupd932_all_incr.msp /quiet
This must be put in the login script under the Computer system in the GPO.
I just used Notepad and created a *.bat file, yes not good as a *.MSI but it works.

Group Policy Managed Software Windows 8.1

Hi
Is software installation/assigned applications in group policy supported in Windows 8.1 as they don't seem to work correctly. We either have them hanging at startup or they reinstall each time even though its already installed it.
I can't find anything searching online regarding Windows 8.1 and deploying software this way with group policy.

> Is software installation/assigned applications in group policy supported
> in Windows 8.1 as they don't seem to work correctly. We either have
> them hanging at startup or they reinstall each time even though its
> already installed it.
Does it work correctly with older OS versions? Maybe it's not an issue
of Win 8.1, but of the MSI itself?
Unfortunately, GPO MSI deployment debug logging is broken in Windows 8
and above, so you'll have a hard time digging that down...
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Flash Player group policy installation

Hi All,
Consider the following scenario:
BigCorp deploys thier Flash player the Group Policy Software Installation (GPSI).
BigCorp rolls out the latest version of Flash player to thier site. Although BigCorp has followed all thier testing plans, and not noticed errors - users begin to report issues with a line of business app which uses Flash.
Admins at BigCorp disable the policy which installed the latest version of Flash payer, and re-enable the previous version. Affected users reboot thier machines and they hang indefinatley at the GPSI instllation stage.
This behaviour appears to be by design, but the behaviour of the installer is not sane at this point.
I believe that this issue is caused by the feature noted at http://kb2.adobe.com/cps/402/kb402435.html - since removing HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\FlashPlayer\SafeVersions prevents this from happening. (Specific versions are listed, and appear to work as one might expect; i.e. remove the DWORD value at HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\FlashPlayer\SafeVersions\10 and earlier versions can be installed)
The reason for the indefinate wait during installation of a downlevel version appears to be that the installer is displaying a dialog box that has been suppressed by GPSI since it is, I imagine, waiting for a response from the user that it will never recieve. At this point the only way to allow the machine to complete a reboot is to either a)disonnect the network b) force the policy to fall out of scope.
Evidence for this can be obtained from the %windir%\system32\macromed\Flash\install.log; specifically the line:
MessageBox: 12582960,"The version of Adobe® Flash® Player ActiveX that you are trying to install is not the most current version. Please visit http://www.adobe.com/go/getflashplayer to obtain the latest, most secure version."
Whilst I can understand (to some extent) the design of this feature - preventing the installation of an older client in this manner is disruptive to Adobe's clients.
It would be advantageous if we could override this using an MSI property. For example the Safe Versions features is in effect, unless the notional IGNORESAFEVERSIONS property is set to 'YES'. (Perhaps Adobe could consider this a feature request?)
This would afford protection for the maximum number of customers, but allow users with a business need to roll back to an older version of Flash player to shoulder the responisbility of running an older version.
http://kb2.adobe.com/cps/141/tn_14157.html is NOT a sensible solution for customer who are relient on GPSI for Flash Player installation. Repeatedly running the downloadable uninstaller is not a sane thing to do, as far as I can tell.
I've only tested this with the Adobe supplied MSI (not the in-browser installer) as I have thousands of machines to deploy this to.
Does anyone else have issues with this, and how do you get around them?

Hi,
Apologies for digging up this thread but this issue has meant that I haven't deployed any updates to the Flash Player ActiveX since 10.0.45.2 for fear that it'll break my whole GP software deployment.
Firstly, I don't think Adobe will ever do 'the right thing' and introduce a new MSI property to make the install ignore any existing SafeVersions registry keys because I don't think they can; the actual ActiveX install is a custom action that calls an external executable embedded within the MSI that doesn't use Windows Installer technology so it wouldn't be aware of any MSI properties.
However, I've recently revisited this problem and I think I may have come up with a solution.
The trick I've employed is to ensure that the HKLM\Software\Macromedia\FlashPlayer\SafeVersions registry key gets removed during the MSI uninstall routine. To do this you need to modify the MSI to add a new row into the Registry table.
You can do this by generating a transform using Orca, like so;
Registry = [any unique value you like]
Root = 2
Key = Software\Macromedia\FlashPlayer\SafeVersions
Name = *
Value = [Blank]
Component = ISRegistryComponent
The important bit is the asterix against the Name value. This tells the MSI to always remove that registry key upon uninstall no matter what existing values are contained within the key. Once that key is gone you can install any other version of Flash Player you like, even older versions.
This whole method of deployment relies on a couple of things to work though;
You must ensure that Flash Player auto updates are turned off for all your workstations that have Flash Player installed using Group Policy. http://kb2.adobe.com/cps/167/16701594.html describes this method. Note that for x64 machines you must place the MMS.CFG file under %systemroot%\SysWOW64\Macromed\Flash and not %systemroot\SysWOW64 like the document says. This ensures that your users don't manually update Flash Player out of your control and with an MSI that doesn't employ the fix as above.
Ensure that all future versions of Flash Player are pushed out using Group Policy and that you use the transform file above for each one. If you do this you can roll back to a previous version without issue.
Assign the MSI to your computers rather than users
I've only ever 'replaced' Flash Player in Group Policy when rolling out a new version rather than upgrade it. This means that the existing version is completely uninstalled before the new one. That's not to say that upgrades won't work, it's just that I've never tried it.
EDIT: 'Upgrading' previous MSI's works fine.
One last thing to note though is if you've already assigned Flash Player using Group Policy you can directly modify the install_flash_player_10_active_x.msi that was used to include the above registry row (ie, not using a transform) and then re-deploy it. This ensures that the SafeVersions key will be removed right from the start if it is ever uninstalled. Of course, if any of your users have manually upgraded to a newer version since then this won't work - in that case you'll have to remove the SafeVersions key manually, perhaps using a VB script (ideally at machine shutdown).
I hope this information helps anyone who's had a headache with deploying Flash Player through Group Policies.
Cheers,
Zinc
Message was edited by: Zinc666

Software Installation - Group Policy

I created a group policy objects to include software installation of both Adobe Flash Player ActiveX and NANPI but they did not update both on several systems that I tested on.
UNC Path to both MSI files are good and I checked permission, it should not be any problem for these systems to access both MSI files. My goal is to update existing Adobe Flash to latest version and to install them if any system do not have them.
I do not understand why Group Policy failed to update Adobe Flash ActiveX and NANPI version 14 to 16 on both systems.

Application Event Log is showing this:
Application Management Group Policy
General
Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. The error was
: %%1274
Detail
-> Event Data: The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. 1274
Do you have any idea what this can be causing this problem?

MSI Package Software Installations and uninstallations by group policy and sccm

Hi,
            I have a domain comprising approx. 30 ADCs, 5000 clients and 50 OUs. Our developers have created a c# Program for fetching some information from client machines and displaying them on their
screen on bootup (presence of 2 particular softwares, antivirus presence and its update date, OS patches updation etc... ). This program(.msi) and .net framework 4.0 is required to be pushed to all client machines. We have SCCM server through which we can
push software to be installed on clients. There are no. of ADCs for controlling different sites and OUs. Now I need to push this msi and .net framework to all clients. Dotnet framework I pushed from SCCM & it is successful.
Till today I have pushed this .MSI package using Group policy software installation settings using a local sharepath & sysvol.
In Local Share path , MSI source is availbale at only one ADC and all clients contact this adc only to install software and its taking very long time to boot.
Using Sysvol share path , MSI Source is available at All ADC and All Clients Contact their Site's ADC to install software.Only Win 7, win 8 machines are getting install and software is not able to install on XP and vista machine. What might be the
problem for xp machine getting it from sysvol path?
The error for XP machines is that Sysvol path is not accessible/ source is not available.
   Now I need to have some other fullproof method to apply it. How I need to push this .MSI packages to all sites (ADCs) in my child domain from my PDC.
   I want to know the steps & methods for installing & uninstalling this .MSI package using Group policy and SCCM as well.
   Thanks for replying...

Hi,
Based on your description, I want to confirm whether we have more than one domain. If we have more than domain, it is suggested that we can push the
MSI package from each domain.
Regarding how to use Group Policy to remotely install software, the following article can be referred to for more information.
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
http://support.microsoft.com/kb/816102/en-us#method1
In addition, you also mentioned how to use SCCM to do this, in order to get better assistance, we can ask help in the following SCCM forum.
System Center Configuration Manager
http://social.technet.microsoft.com/Forums/systemcenter/en-US/home
Best regards,
Frank Shen

Installation blocked by group policy designed to prevent CryptoLocker

We have followed the steps outlined by bleepingcomputer.com to prevent as best we can the CryptoLocker virus. Link to article: http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information#prevent
Please update your Reader installer to not use %AppData%\Local\Temp\. The CryptoLocker prevention method involves blocking that and the following paths. I know many businesses using these techniques.
Block CryptoLocker executable in %AppData%
Path: %AppData%\*.exe
Security Level: Disallowed
Description: Don't allow executables to run from %AppData%.
Block CryptoLocker executable in %LocalAppData%
Path if using Windows XP: %UserProfile%\Local Settings\*.exe
Path if using Windows Vista/7/8: %LocalAppData%\*.exe
Security Level: Disallowed
Description: Don't allow executables to run from %AppData%.
Block Zbot executable in %AppData%
Path: %AppData%\*\*.exe
Security Level: Disallowed
Description: Don't allow executables to run from immediate subfolders of %AppData%.
Block Zbot executable in %LocalAppData%
Path if using Windows XP: %UserProfile%\Local Settings\*\*.exe
Path if using Windows Vista/7/8: %LocalAppData%\*\*.exe
Security Level: Disallowed
Description: Don't allow executables to run from immediate subfolders of %AppData%.
Block executables run from archive attachments opened with WinRAR:
Path if using Windows XP: %UserProfile%\Local Settings\Temp\Rar*\*.exe
Path if using Windows Vista/7/8: %LocalAppData%\Temp\Rar*\*.exe
Security Level: Disallowed
Description: Block executables run from archive attachments opened with WinRAR.
Block executables run from archive attachments opened with 7zip:
Path if using Windows XP: %UserProfile%\Local Settings\Temp\7z*\*.exe
Path if using Windows Vista/7/8: %LocalAppData%\Temp\7z*\*.exe
Security Level: Disallowed
Description: Block executables run from archive attachments opened with 7zip.
Block executables run from archive attachments opened with WinZip:
Path if using Windows XP: %UserProfile%\Local Settings\Temp\wz*\*.exe
Path if using Windows Vista/7/8: %LocalAppData%\Temp\wz*\*.exe
Security Level: Disallowed
Description: Block executables run from archive attachments opened with WinZip.
Block executables run from archive attachments opened using Windows built-in Zip support:
Path if using Windows XP: %UserProfile%\Local Settings\Temp\*.zip\*.exe
Path if using Windows Vista/7/8: %LocalAppData%\Temp\*.zip\*.exe
Security Level: Disallowed
Description: Block executables run from archive attachments opened using Windows built-in Zip support.

Hi, I am using a toshiba personal laptop, windows 7 home premuim. No one else uses it, nor have i brought it to any buisness , other home, etc.
I have been blocked by group policy for 3 months. I have spend over 200 dollars on ITs to only tell me they have never seen this before, and to buy a new laptop.. I have no idea why i am the admin, and only user yet all i can open is aol.
I am at my wits end, and will go buy another laptop, deffenitly nothing like this one.. I have lost alot of time and money trying to fix this, late payments etc
thanks for any input
aimee
oh my isp is cox, and i have a router
reading this I am able to identify that you are contaminated with malware, it may has also affected your recovery
try recovery to factory fresh and then install Microsoft Security Essentials so that you have 1/2 a chance next time
Corsair Carbide 300R with window
Corsair TX850V2 70A@12V
Asus M5A99FX PRO R2.0 CFX/SLI
AMD Phenom II 965 C3 Black Edition @ 4.0 GHz
G.SKILL RipjawsX DDR3-2133 8 GB
EVGA GTX 6600 Ti FTW Signature 2(Gk104 Kepler)
Asus PA238QR IPS LED HDMI DP 1080p
ST2000DM001 & Windows 8.1 Enterprise x64
Microsoft Wireless Desktop 2000
Wacom Bamboo CHT470M
Place your rig specifics into your signature like I have, makes it 100x easier to understand!
Hardcore Games Legendary is the Only Way to Play!

Software Installation Processing Alerts - Group Policy Failures?

Hello,
I am getting several errors reported by SCOM Software Installation Processing alert
In the local event log I have:
Warning 9/15/2014 11:09:37 AM GroupPolicy 1112 None
Warning 9/15/2014 11:09:37 AM Application Management Group Policy 108 None
Error 9/15/2014 11:09:37 AM Application Management Group Policy 103 None
Warning 9/15/2014 11:09:37 AM Application Management Group Policy 101 None
with the details:
101 - The assignment of application SMS Client Setup Bootstrap from policy MITS Servers Software failed. The error was : %%1274
103 - The removal of the assignment of application SMS Client Setup Bootstrap from policy MITS Servers Software failed. The error was : %%2
108 - Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. The error was : %%1274
1112 - The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
- Computer Configuration > Policies > Administrative Templates > System > Group Policy > Policy > Startup policy processing is enabled
what does exactly this means?
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Hi,
Yes the packaged is installed.
Troubleshooting the issue deeper with http://support.microsoft.com/kb/249621/en-us is showing
Software installation extension has been called for background policy refresh
09-16 06:34:09:346
Software installation extension has been called for background policy refresh
The following policies are to be applied, flags are 11.
MITS Servers Software (unique identifier {E76FB561-E177-421D-AE43-109EADEAD751})
System volume path = \\ad.medctr.ucla.edu\sysvol\ad.medctr.ucla.edu\Policies\{E76FB561-E177-421D-AE43-109EADEAD751}\Machine
Active Directory path = LDAP://CN=Machine,cn={E76FB561-E177-421D-AE43-109EADEAD751},cn=policies,cn=system,DC=ad,DC=medctr,DC=ucla,DC=edu
Set the Active Directory path to LDAP://CN=Class Store,CN=Machine,cn={E76FB561-E177-421D-AE43-109EADEAD751},cn=policies,cn=system,DC=ad,DC=medctr,DC=ucla,DC=edu;.
Enumerating applications in the Active Directory for computer MSVROFAS2 with flags 5.
The following applications were found in policy MITS Servers Software.
Assigned application SMS Client Setup Bootstrap (flags a0044c70).
Found 1 applications in policy MITS Servers Software.
Enumerating the managed applications which are currently applied to this user.
No managed applications are currently applied to this user.
Found 0 applications locally that are not included in the set of applications from the Active Directory.
Application SMS Client Setup Bootstrap from policy MITS Servers Software is set for installation because it is assigned to this computer policy.
Software installation extension cannot perform removal or install operations during asynchronous policy refresh and will force a synchronous foreground refresh.
The assignment of application SMS Client Setup Bootstrap from policy MITS Servers Software failed. The error was : %1274
Removing application SMS Client Setup Bootstrap from the software installation database.
Calling Windows Installer to remove application advertisement for application SMS Client Setup Bootstrap from script C:\Windows\system32\appmgmt\MACHINE\{ecbf218d-0d04-4b00-a43e-91ba5c41d119}.aas.
Windows Installer cannot remove application advertisement for application SMS Client Setup Bootstrap from script C:\Windows\system32\appmgmt\MACHINE\{ecbf218d-0d04-4b00-a43e-91ba5c41d119}.aas, error 2.
The removal of the assignment of application SMS Client Setup Bootstrap from policy MITS Servers Software failed. The error was : %2
Policy Logging for Software Management is attempting to log application SMS Client Setup Bootstrap from policy MITS Servers Software.
Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. The error was : %1274
Software installation extension has detected changes that require a synchronous foreground policy refresh.
Software installation extension returning with final error code 1274.
And this is happening hourly !!!
This is the current status...
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Can I import a list of services into Group Policy Preferences \ Control Panel Settings \ Services?

Hello,
We want to control server services with Group Policy Preferences via the Group Policy Preferences \ Control Panel Settings \ Services. By starting from scratch, I don want to manually add each Service here. Can I import a list of Services
here, then go back and config the properties?
I appreciate the help.
Thanks for your help! SdeDot

> with settings, however I don't see a way to import that list.
Usually, there's no need for that. Most people only configure services
that aren't already configured the way they should be after an OOBE
install...
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

ActiveX msi Flash Player 10.0.42.34 group policy deploy issue

I have been deploying the flash player to our workstations since version 9. We have a 2003 AD domain and XP SP3 workstations.
I know that it is recommended to use the flash uninstall program to remove flash when installing a new version but I haven’t taken the time to work on that type of scripting for any install. Any attempts to uninstall the previous versions of flash via group policy when deploying have never worked. I had the same experience with java 1.5 jres…they would never uninstall via policy.
I have had success so far with deploying the latest version to the workstations with a new policy while leaving the old policy applied until a few weeks have past when all the workstations have been updated.
I am in the process of deploying Flash Player 10.0.42.34 to replace Flash Player 10.0.32.18
My test deploy to my virtual XP test workstation worked with no problems. The flash test paged detected the newer version and the correct version was in add/remove programs.
I then did a test deploy to a production workstation and the software installed without errors (the group policy install went extremely fast so I knew something was wrong). No errors were reported in the workstation application log. However when you visited the flash test page no version of flash was detected. I also checked in add/remove programs and the program icon was the windows installer icon instead of the normal red flash box….this has been associated with other installation issues in the past.
I have tried this on 3 other production machines and experienced the same results. My virtual XP test workstation has only had version 10.0.32.18 on it so I am guessing that having had the older versions of 10 on the production workstations is causing the problem somehow.
I have had issues in the past, but nothing like this. Looks like I may have been owned by adobe on this one.
Any insight would be appreciated.
Thanks

Sure , here is the url :
http://www.forevermark.com/ja-jp/The-World-of-Forevermark-/Precious-Collection/
On some machines , the Japanese text in the centre section appears very large. ..( see attached snapshot)
We initially encountered this on the version prior to the 10.0.42.34 version.
However even after the upgrading to 10.0.42.34 , the problem still persists .
Thanks

Crystal ActiveX Report Viewer Control 12.0 Installer

Crystal ActiveX Report Viewer Control 12.0 Installer
Hi, i need to install the activex control into every single client pc. I know ie browser is supposed to download it at the very first time when it hits crystal report page, but due to certain restriction applied to client pcs, this feature is blocked.
Does anyone have Crystal ActiveX Report Viewer Control 12.0 installer ? How can I install it on the clients pc ?
Thanks a lot!

Copy the PrintControl.cab from the server location u201C<installation drive>\Program Files\Common Files\Business Objects\4.0\crystalreportviewers12\ActiveXControlsu201D to the client machine. Then Extract the PrintControl.cab. Then register (regsvr32) the printcontrol.dll.
- Ludek

Fireworks 8 Installation Problem via Group Policy

Hi,
We are trying deploy Studio 8 across our site using the
provided MSI's and Group Policy following this guide -
http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=332882
I have created the mst files for all products and set them to
be deployed by group policy. Dreamweaver, Flash, Contribute, Flash
Video Encoder and Flash Extensions Manager all install fine however
Fireworks will not, looking in the event log it doesn't even
attempt to install. All folders have the same permissions, the MSI
& MSTs are all part of the same Group Policy Object using the
"Software Installation" method with the same permissions.
Fireworks will install using MSIEXEC from the command line so
the package and mst are fine.
Has anyone else come across this problem?
Thanks
Matt

We are having the same issue here at our NSW High School. I
have traced the problem to be that Fireworks wants to deploy in
Chinese (instead of English) and because of this it will not
install. I am looking for a way to convert the msi file to an mst
so I can choose English as the default install language.
Hope this info is useful

Group Policy Installation

Hi experts,
My client's environment is tightly controlled and this causes me issues whenever we need to upgrade B1. As such i would to develop a Group Policy and have the upgrade triggered remotely when the user logs in to the computer.
Has anyone explored this avenue?
thx,
Richard.

Hi experts,
My client's environment is tightly controlled and this causes me issues whenever we need to upgrade B1. As such i would to develop a Group Policy and have the upgrade triggered remotely when the user logs in to the computer.
Has anyone explored this avenue?
thx,
Richard.

Customize IPSec Tunnel Authorizations controlled by Group Policy

We have an issue where we cannot amend the Customize IPsec tunnel authorizations settings. It says it is controlled by Group Policy but I cannot find where this setting is. This is on our Routing & Remote Access server running Server 2012 Std. I recall
when you configure RRAS it create some group policies but I can't imagine they are uneditable.
Please advise.

Hi,
>> It says it is controlled by Group Policy but I cannot find where this setting is.
We can run cmd gpresult/h gpreport.html with admin privileges to collect group policy result report to check the group policy setting.
Best regards,
Frank Shen

Group Policy control of ActiveX installation

Similar Messages

Maybe you are looking for