Group Policy - deploy IE plugins (RSClientPrint)

Hi Folks,
I have a need to be able to deploy the RSClientPrint Internet Explorer plugin (to enable in-browser report printing) across a range of machines.  We use different versions of the reporting services/visual studio applications and have quite a few
different versions of this plugin.
I am just wondering how people have managed to resolve deploying this software without granting the user the ability to access the internet.  Preferably I would like to try and avoid having to package every single version that comes out.

Hi Andy,
How is the issue going? Is the link provided by Gopi helpful?
If you need further help, please don't hesitate to let us know.
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen

Similar Messages

  • Group Policy Deployment Acrobat Standard XI Version 11

    I was able to successfully create a Windows 2008 R2 SP1 Group Policy that would be able to distribute the Adobe Reader Application using the Adobe Customization Wizard XI. I tried to use the same procedure from the Adobe Acrobat Standard 11 download from the adobe licensing site and was unable to get the Group Policy to work. The error message that I am getting is...
    The install of application Adobe Acrobat XI Standard 11.0 from policy  Deploy Adobe Acrobat 11 failed. The error was : %%1603
    This is the procedure that I created for deployment of Adobe Acrobat XI using Group Policy.
    How to create a group policy deployment of Adobe Acrobat XI
    Overview:
    This procedure covers the steps needed to create a group policy that will deploy the Adobe Acrobat installation.
    Requirements
    •    Windows 2008 Group Policy
    •    Adobe Acrobat Customization Wizard
         o    ftp://ftp.adobe.com/pub/adobe/acrobat/win/11.x/11.0.00/misc/CustWiz11000_en_US.exe
    •    Adobe Acrobat XI (Version 11)
         o    download from adobe account
    Procedure:
    1.    Download the Adobe Acrobat XI package.
    2.    Extract the contents of the Adobe Acrobat XI package.
    a.    Type msiexec.exe /a AcroStan.msi
    b.    Click Next
    c.    Put in the Network Location Share where everyone can extract the installation.
    d.    Click Install
    e.    The package will then extract to the network location as indicated above.
    f.    Click Finish, once the installation has completed.
    g.    Open the Adobe Customization XI Wizard, and customize the package by selecting the AcroStan.msi file. 
    h.    Customize the AcroStan.MSI installation file   
    i.    Default viewer of PDF files: Make Acrobat the Default PDF Viewer
    ii.    Remove previous versions of Acrobat
    iii.    Run Installation: Silently
    iv.    If reboot is required at the end of installation: Suppress reboot
    i.    Shortcuts: Remove the desktop Shortcut
    j.    Online and Adobe Services: Disable Product Improvement Program: checked.
    k.   Generate Transform File
    i.    Click Transform > Generate Transform File
    ii.   Create an Setup.Ini file in the folder of the Distribution Package.
    iii.  Name the Transform File something useful like “CompanyConfigs”.
    3.    Create a Group Policy to deploy the software package. It is usually best to have a group policy for each software installation package.
    a.    Update the Domain Default Policy with Always install with elevated privileges. This will allow all software deployment packages to install. 
    i.    Computer Configuration > Policies > Windows Settings > Administrative Templates > Windows Components > Windows Installer > Always install with elevated privileges : Enabled.
    b.  Create a Group Policy to enable Windows 7 Verbose Mode
    i.    Computer Configuration > Policies > Administrative Templates > System > Verbose vs normal status messages : Enabled.
    c.    Create a Group Policy for the Software Installation
    i.     Computer Configuration > Policies > Software Settings
    ii.    Right click and select New > Package
    iii.   Click the AcroRead.msi
    iv.   Click Advanced
    v.    Click the Modifications Tab and click Add
    vi.   Optional: Click the Uninstall this application when it falls out of the scope of management.
    Note: This setting can be used to uninstall the application if the group policy ever changes in that the application should be removed.
    vii.    The package is now created …
    4.    Test the Client in a Virtual Machine
    a.    Go to a windows client and run “gpupdate /force”.
    b.    The system will then respond that it needs to restart the computer.
    c.    Type Yes, and allow the computer to reboot.
    d.    If Group Policy is not setup to allow for verbose messages in Windows 7 then the user will just see “Please wait…”, if verbose message is enabled the user will see “Installing Adobe Acrobat…”.
    Can someone please tell me what I am missing to get the group policy deployed? It has the same permissions as the Adobe Reader folder and I have done everything exactly the same, except that Adobe Standard has the license number, and owner information included in the Transform file (.mst).
    Thank you.

    Your case isn't unique. We've heard this a lot. While Acrobat has a small, very small percentage of settings available in the ADMX files,
    in case you don't know, PolicyPak software has a solution to manipulate, basically, near 100% of the settings in Acrobat Reader and Professional.
    You're welcome to check out how it works. These videos are for Acrobat X, but there is also tempaltes in the download for XI.
    Here are links to the pages with full how-to videos:
    http://www.policypak.com/products/manage-acrobat-reader-with-group-policy.html
    and
    http://www.policypak.com/products/manage-acrobat-x-pro-and-acrobat-x-standard-using-group- policy.html
    You can be up and running in 20 minutes, but note, it's NOT a template.. PolicyPak is full application management and lockdown system.

  • Can I prevent a user from Deleting the Group Policy deployed power plan?

    I have Power Manager version 3.20 installed and am using the Group Policy template to deploy a customized power plan.  I do not want my users to have the ability to delete this custom plan, but I cannot find the option in the Group Policy to change the setting that would grey-out the Delete button in Power Manager.
    I have located the registry value that changes the function of Power Manager, it is: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Lenovo\PWRMGRV\PowerSchemes\42617646-BC99-48E2-B3AF-C562C25F4098\ProhibitModification.  If the value is 0, then the delete button is available.  If the value is 5, then the delete button is greyed-out.
    The problems is that the Power Plan ID number (the 42617646-BC99... part in the reg key above) changes from computer to computer.  That ID string seems to be tied somehow to the specific computer.  So, I cannot just create a Group Policy Preference to change that value in the registry, because that value is always going to have a different name.
    The computers are all ThinkPad T400 model and are running Windows 7 Enterprise 64-bit.
    Can anyone suggest a different method to change this setting?  If not, is there any chance that the Power Manager application can be upgraded to include this control?
    Thank you!

    welcome to the forum!
    to add to what gan said, page 6 of the power manager deployment guide covers this policy over active directory.
    http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=TVAN-ADMIN#pmat
    http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-70419
    ThinkStation C20
    ThinkPad X1C · X220 · X60T · s30 · 600

  • ActiveX msi Flash Player 10.0.42.34 group policy deploy issue

    I have been deploying the flash player to our workstations since version 9.  We have a 2003 AD domain and XP SP3 workstations.
    I know that it is recommended to use the flash uninstall program to remove flash when installing a new version but I haven’t taken the time to work on that type of scripting for any install.  Any attempts to uninstall the previous versions of flash via group policy when deploying have never worked.  I had the same experience with java 1.5 jres…they would never uninstall via policy.
    I have had success so far with deploying the latest version to the workstations with a new policy while leaving the old policy applied until a few weeks have past when all the workstations have been updated.
    I am in the process of deploying Flash Player 10.0.42.34 to replace Flash Player 10.0.32.18
    My test deploy to my virtual XP test workstation worked with no problems.  The flash test paged detected the newer version and the correct version was in add/remove programs.
    I then did a test deploy to a production workstation and the software installed without errors (the group policy install went extremely fast so I knew something was wrong).  No errors were reported in the workstation application log.  However when you visited the flash test page no version of flash was detected.  I also checked in add/remove programs and the program icon was the windows installer icon instead of the normal red flash box….this has been associated with other installation issues in the past.
    I have tried this on 3 other production machines and experienced the same results.  My virtual XP test workstation has only had version 10.0.32.18 on it so I am guessing that having had the older versions of 10 on the production workstations is causing the problem somehow.
    I have had issues in the past, but nothing like this.  Looks like I may have been owned by adobe on this one.
    Any insight would be appreciated.
    Thanks

    Sure , here is the url :
    http://www.forevermark.com/ja-jp/The-World-of-Forevermark-/Precious-Collection/
    On some machines , the Japanese text in the centre section appears very large. ..( see attached snapshot)
    We initially encountered this on the version prior to the 10.0.42.34 version.
    However even after the upgrading to 10.0.42.34 , the problem still persists .
    Thanks

  • Office 2013 Group Policy Deployment

    Hello,
    I'm trying to deploy Microsoft Office 2013 Professional Plus using Group Policy. I'm trying to use these directions: 
    http://technet.microsoft.com/en-us/library/ff602181(v=office.15).aspx
    Throughout the directions, they give instructions, then follow it up by saying what to do if you're using a Windows Installer-based Office. This is probably a dumb question, but I'm confused on whether or not I'm using a Windows Installed-based Office. The
    setup program is a .exe file, but there are multiple .msi files in the folders.

    The setup program is a .exe file, but there are multiple .msi files in the folders.
    If you have setup.exe and various other .msi files, this confirms that you are using the Windows Installer-based Office fileset.
    (actually, Office2013ProfessionalPlus is *only* available in this .msi form)(other forms are available for other products e.g. Office365ProPlus)
    The documentation draws the distinction, mainly because the documentation is partially shared across different products which can come in different forms)
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • Wmi query for group policy deployed software version

    I am trying to query the version of a deployed application within a GPO from active directory using wmi.
    Anyone know if this is possible?
    Thanks.

    I don't think you can query GPO information using WMI, but you can use WMI to read Resultant Set of Policy settings. See
    RSoP WMI Classes for more information.
    Is there any particular reason for using WMI in your case? You can easily retrieve this information using powerShell. The code below will list name and ver of all software install entries of a particular GPO:
    $gpo = get-gpo -Name "My GPO Name"
    $report = [xml] $gpo.GenerateReport([Microsoft.GroupPolicy.ReportType]::Xml)
    $report.gpo.Computer.ExtensionData.Extension | `
    Where-Object{ $_.type.contains( "SoftwareInstall" ) } | `
    foreach-object{
    foreach( $item in $_.ChildNodes )
    "`"{0}`" Ver. {1}.{2}" -F $item.name, $item.MajorVersion, $item.MinorVersion
    Gleb.

  • Deploying Creative Cloud for Teams via Group Policy

    Good afternoon, we are trying to deploy our Creative Cloud for Teams products.  Our ideal situation would be where we are able to deploy the Creative Cloud Software (e.g. including Photoshop, InDesign, Illustrator, etc) using Group Policy, then assign the respective user licenses using the Management Console.  This would send out the email to the applicable user for them to create and Adobe ID, and use the software that has been installed.  However, we are able to install the software using Group Policy Deployment using the msi created using the Creative Cloud Packager, but any user is able to use the software on the PC, not just the person who has been assigned the licence via the console email.  Is anyone else successfully deploying in this way?
    Kind regards
    Mel

    Team license links that may help
    -team plans https://creative.adobe.com/plans?plan=team
    -http://www.adobe.com/creativecloud/buy/business.html
    -https://helpx.adobe.com/contact/creative-cloud-teams.html for Team help
    -manage your team account http://forums.adobe.com/thread/1460939?tstart=0
    -Team Installer http://forums.adobe.com/thread/1363686?tstart=0

  • Deploy itunes using group policy

    I've found a few links out there and I feel like I'm really close, but I can't get iTunes to work via MS Group Policy Deployment.  I've followed this article: http://techierambles.blogspot.com/2011/01/deploy-itunes-or-quicktime-msi-files.h tml but I'm not sure if things have just changed too much since 10.1 or what.
    My main issue, I believe, is that I can't get the Apple Application Support MSI to deploy.  I've tried assigning it and publishing it, but no joy.  However, without that MSI the iTunes MSI won't install properly.  Anyone ever run into this?
    Windows Server 2008, Windows 7 clients, iTunes 10.5.2 64-bit, no QuickTime (not a requirement in the newest version of iTunes).
    Thanks,
    Lauren

    I've found a few links out there and I feel like I'm really close, but I can't get iTunes to work via MS Group Policy Deployment.  I've followed this article: http://techierambles.blogspot.com/2011/01/deploy-itunes-or-quicktime-msi-files.h tml but I'm not sure if things have just changed too much since 10.1 or what.
    My main issue, I believe, is that I can't get the Apple Application Support MSI to deploy.  I've tried assigning it and publishing it, but no joy.  However, without that MSI the iTunes MSI won't install properly.  Anyone ever run into this?
    Windows Server 2008, Windows 7 clients, iTunes 10.5.2 64-bit, no QuickTime (not a requirement in the newest version of iTunes).
    Thanks,
    Lauren

  • Error 1603 when installing Crystal reports XI by group policy

    Hi,
    **I am trying to create a Group policy deployment package of Crystal reports 11.5. I have successfully installed other packages from the same share and witrh the same permissions etc. but when I try to install Crystal I end up with the folowing details in the appmgmt.log:
    **++08-11 16:11:03:781
    +Software installation extension has been called for foreground synchronous policy refresh.+
    +The following policies are to be applied, flags are 1.+
        +in development CR (unique identifier {F3CBE794-92FB-4C74-A048-1C8BE81A4ABC})+
            +System volume path =
    rc.local\SysVol\rc.local\Policies\{F3CBE794-92FB-4C74-A048-1C8BE81A4ABC}\Machine+
            +Active Directory path = LDAP://CN=Machine,cn={F3CBE794-92FB-4C74-A048-1C8BE81A4ABC},cn=policies,cn=system,DC=rc,DC=local+
    +Set the Active Directory path to LDAP://CN=Class Store,CN=Machine,cn={F3CBE794-92FB-4C74-A048-1C8BE81A4ABC},cn=policies,cn=system,DC=rc,DC=local;.+
    +Enumerating applications in the Active Directory for computer BRXWK007377 with flags 5.+
    +The following applications were found in policy in development CR.+
        +Assigned application Crystal Reports XI (flags a0005470).+
    +Found 1 applications in policy in development CR.+
    +Enumerating the managed applications which are currently applied to this user.+
    +No managed applications are currently applied to this user.+
    +Found 0 applications locally that are not included in the set of applications from the Active Directory.+
    +Application Crystal Reports XI from policy in development CR is set for installation because it is assigned to this computer policy.+
    +Assigning application Crystal Reports XI from policy in development CR.+
    +Calling the Windows Installer to advertise application Crystal Reports XI from script C:\WINDOWS\system32\appmgmt\MACHINE\{f29d0933-61ee-4794-9840-78cd8aecf2f5}.aas with flags 69.+
    +The assignment of application Crystal Reports XI from policy in development CR succeeded.+
    +Calling the Windows Installer to install application Crystal Reports XI from policy in development CR.+
    +The install of application Crystal Reports XI from policy in development CR failed.  The error was : %1603+
    +Removing application Crystal Reports XI from the software installation database.+
    +Calling Windows Installer to remove application advertisement for application Crystal Reports XI from script C:\WINDOWS\system32\appmgmt\MACHINE\{f29d0933-61ee-4794-9840-78cd8aecf2f5}.aas.+
    +The removal of the assignment of application Crystal Reports XI from policy in development CR succeeded.+
    +Policy Logging for Software Management is attempting to log application Crystal Reports XI from policy in development CR.+
    +Failed to apply changes to software installation settings.  Software changes could not be applied.  A previous log entry with details should exist.  The error was : %1603+
    +Software installation extension returning with final error code 1603.+
    To create the installation point I copied both CD's to our server and executed a command line setup.exe /a
    Can anyone help me move forwards please?
    Thanks
    Chris

    Hi there,
    Try the following silent install command via the DOS command prompt:
    setup.exe ADDLOCAL=ALL CLIENTLANGUAGE=EN REBOOT=ReallySuppress PIDKEY=B1234-1234567-1234567-1234 INSTALLDIR="C:\Program Files\Business Objects\Crystal Reports 11.5" /qn /l* C:\temp\CRXIr2Trace.txt
    Notes and explanations:
    In the above example, it assumes that you copied the installation media to the C:.  You will also have to change directory to the wherever the win32 directory is.  The setup.exe is located in the win32 folder of the installation media.
    If you had put the win32 directory in say, C:\CRXIr2\win32, then you will have to navigate to this point first before typing the string above.  You will also need to change the product key from B1234-1234567-1234567-1234 to match your own. 
    The ADDLOCAL switch specifies a list of features to install.  ADDLOCAL=ALL then installs all the features.
    The REBOOT=ReallySuppress prevents Crystal Reports from prompting the user to reboot the machine
    The /qn switch performs the installation silently without prompting the user . 
    Finally, the string above also logs the installation to a text file in C:\temp\CRXIr2Trace.txt.
    You can find a full explanation of the switches and silent install string from xir2_cr_install_en.pdf in the installation media.

  • Deploying Office 2013 with Group Policy

    I would like to deploy Office 2013 using group policy. I am new to group policy so am looking for some advice and guidance on the best way to deploy. I would like to deploy with no interaction with the user but yet display a message so that they
    know not to open Office. I would also like to create a custom registry setting so that if I need to re-install, all I have to do is delete the registry setting. I have tried a group policy for installing with OCT  settings (Basic, Suppress
    Model checked, No Cancel checked, Completion Notice checked) and modifying the Config.xml (<Display Level="Basic" CompletionNotice="yes" SuppressModal="yes" AcceptEula="yes" />) but I can not get it to display
    the installer screen so that users know it is installing. It does display the screen when running the setup.exe manually. I have a setting in the OCT that creates the registry setting and that is working correctly. My group policy is set to run the
    below bat file at startup in the Computer Configuration.
    setlocal
    REM *********************************************************************
    REM Environment customization begins here. Modify variables below.
    REM *********************************************************************
    REM Get ProductName from the Office product's core Setup.xml file, and then add "office15." as a prefix.
    set ProductName=Office15.Standard
    REM Set DeployServer to a network-accessible location containing the Office source files.
    set DeployServer="\\xxxxxx\setup.exe"
    REM Set LogLocation to a central directory to collect log files.
    set LogLocation=\\xxxxx\Logfiles
    REM *********************************************************************
    REM Deployment code begins here. Do not modify anything below this line.
    REM *********************************************************************
    IF NOT "%ProgramFiles(x86)%"=="" (goto ARP64) else (goto ARP86)
    REM Operating system is X64. Check for 32 bit Office in emulated Wow6432 uninstall key
    :ARP64
    reg query HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\Microsoft\Windows\CurrentVersion\Uninstall\%ProductName%
    if NOT %errorlevel%==1 (goto End)
    REM Check for 32 and 64 bit versions of Office 2013 in regular uninstall key.(Office 64bit would also appear here on a 64bit OS)
    :ARP86
    reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\%ProductName%
    if %errorlevel%==1 (goto Office) else (goto End)
    REM If 1 returned, the product was not found. Run setup here.
    :Office
    %DeployServer%
    echo %date% %time% Setup ended with error code %errorlevel%. &gt;&gt; %LogLocation%\%computername%.txt
    REM If 0 or other was returned, the product was found or another error occurred. Do nothing.
    :End
    Endlocal
    Any advice or guidance would be greatly appreciate on how to get a pop up message while software is installing or if there is a better way to deploy.

    > but I can not get it to display the installer screen so that users know
    > it is installing. It does display the screen when running the setup.exe
    > manually. I have a setting in the OCT that creates the registry setting
    > and that is working correctly. My group policy is set to run the
    > below bat file at startup in the Computer Configuration.
    Check http://gpsearch.azurewebsites.net/#2308 - if this is enabled, you
    will not be able to show "anything" in startup scripts...
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Group Policy - Issues deploying software packages through GPO

    Hello everyone,
    I am having issues successfully deploying MSI packages through group policy.  I have set my computer account up in its own test OU in my domain, but yet the software will not deploy.  Example, I'm trying to deploy AVG Anti-Virus and make sure it
    is installed on each and every PC in my domain.  As for the GPO, I set it up as an assigned package and pointed to the location of the package with the UNC file path (visible to both the DC and my computer that is part of the affected OU)
    On the domain controller, I get these messages in application event logs:
    Beginning a Windows Installer transaction: \\hs-dc2\software\avg\installavg.msi. Client Process Id: 9048.
    Ending a Windows Installer transaction: \\hs-dc2\software\avg\installavg.msi. Client Process Id: 9048.
    This shows up when I refresh GP on my computer.  I run gpresult /h GPReport.html and get the following message:
    Software Installation failed due to the error listed below.
    Fatal error during installation.
    Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between
    The software is in a share on the domain controller that is visible from my computer, and permissions are set where "Everyone" has read access.  I have tested the package on my computer and it installs
    correctly if I do it manually, so it's a good package. 
    I'm at a loss.  I am admitedly very new to GP management, but I'm pretty sure I have covered all my bases here.  I humbly ask for any and all help that you all can provide.
    Thank you all very much, have a great weekend!

    > Magnolia_Schools.exe
    What's that???
    > \\hs-dc2\software\avg\installavg.msi
    > <file://\\hs-dc2\software\avg\installavg.msi> /qb addeploy=1
    /qb ADDEPLOY=1
    Uppercase matters (:
    A bissle "Experience", a bissle GMV... Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    I should have explained, my apologies.  The InstallAVG.msi is the package I have GP deploying.  it is a package that AVG wrote for us that goes in, uninstalls the two previous antivirus softwares we have on our network if it is present, and
    then wraps it to run magnolia_schools.exe which installs the AV software.  I am uninstalling AVG now and will try reinstalling with
    \\hs-dc2\software\avg\installavg.msi /qb ADDEPLOY=1 and report back.
    also, the only logs I found that were around the time of the install attempt were such as these:
    1: 2905 2: C:\windows\system32\appmgmt\MACHINE\{06ee0d46-cd5f-4216-a09f-2aeb573aa5ba}.aas
    1: 2905 2: C:\windows\system32\appmgmt\MACHINE\{06ee0d46-cd5f-4216-a09f-2aeb573aa5ba}.aas
    Does that tell you anything?
    I will say this, if this means anything...now that AVG is installed, the event logs are changing from an error %%1603 to this:
    Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. The error was : %%1274
    The removal of the assignment of application exe2msiSetupPackage from policy Install AVG failed. The error was : %%2
    So it acts like it's at least seeing that the package is installed...and reacting differently, correct?
    Thanks so much

  • Best Practice: Deploying Group Policy to Users on different OUs

    Greetings, everyone! I am needing some advice on how to deploy some group policy objects to specific users stored on different OUs.
    Let me set the stage: I work for a large school district, and have recently taken over the district's career center. The idea behind the career center is that students from different high schools around the city come in to take classes based on their choice
    of career, such as radio broadcasting or auto mechanic and such. The AD structure is set up so that each school has their own OU.  When a user (staff, student, etc.) is assigned to a school OU, they automatically are added to
    their school's security group (i.e. EASTHIGH-STUDENT), and that when any user moves from one school to another, we have to move their AD account to that school's OU, which will remove the security group from the old school and apply the new school
    security group.
    For the career center, since we have students coming from different buildings every day, rather than trying to find a way to move their AD account from their high school OU to the career center OU, the previous techs created generic accounts (such as tv001,
    tv002, etc.) in AD and stored them in the career center OU.  This way, teachers can assign students that particular generic account so that they can access the drives and printers from the career center, as well as access the career center network
    drives while they are at their home high school.
    Since I have moved to the career center, and apparently I have more knowledge about group policy than most of the techs in the district, the district system engineers want me to remove all of the generic accounts from the career center OU, and have students
    use their own AD accounts.  Obviously I also want to do this since the generic accounts are very confusing to me, but I'm trying to figure out the best way to do this.
    For simplicity sake, I'm just going to start off by figuring out how to set up a group policy for mapping the career center drives.  Now, I obviously know that the best way would be to create security groups for each career area, and that we would need
    to add students to those groups so that only those particular students would get the GPO for the career center, but my question is where would I like the group policies to?  Do I need to link it at the root of the domain so that every OU is hit? 
    Just curious about this.
    Thanks!

    Don't link it to the root.... apply the drive mapping as a policy at the OU or you could apply the drive mapping using Group Policy Preferences using security group targeting... .I would also strongly recommend you check out my articles
    Best Practice: Active Directory Structure Guidelines
    – Part 1
    Best Practice: Group Policy Design Guidelines – Part 2
    Hope it helps...

  • Deploy Acrobat Reader 10.1.3 via MSI Group Policy

    The purpose of this thread is to identify EASIEST way to create/obtain an MSI file of the LATEST VERSION of Acrobat Reader (currently 10.1.3 as of 7/19/2012) to be deployed via GPO.  I am not concerned with customizations of Reader settings as I have accomplished this already using Group Policy.
    It sounds so easy, but I have found it to be quite frustrating and extremely time consuming to figure this out.
    Here's what I have so far:
    To download the full installer from Adobe, you must first apply on Adobe's website to distribute Reader:
    http://www.adobe.com/products/reader/rdr_distribution1.html
    Once you submit the request, a short time later you'll get an e-mail with a link to download the full exe file of reader 10.1.3. 
    Here's a link that explains how to extract an MSI from this exe:
    http://blogs.adobe.com/dmcmahon/2010/06/16/how-to-extract-an-msi-file-from-the-exe-
    for-adobe-reader/
    Even with following those steps, I do not end up with an MSI file which will install 10.1.3.
    To try another route:
    There is also an Adobe FTP site.  If you navigate down into the Reader 10.1.0 folder there is an MSI file.  Good - but it's the old version.
    You would think that if you navigate into the 10.1.3 folder there would be an MSI there as well.
    Unfortunately there is not.  However, there is an MSP file found in the misc folder:
    I have tried several methods that are supposed to combine the MSP file with the MSI file - they have not worked.
    I have also tried several methods of modifying MSI files, and using the Adobe Cusomization wizard downloadable here:  http://www.adobe.com/support/downloads/detail.jsp?ftpID=4950
    I am unable to end up with a deployable MSI file for Reader 10.1.3.
    It's amazing that it's so complicated to deploy the latest version of Adobe Reader to my users.
    Does anyone have a comprehensive answer to this simple problem?  I do not want a link to a document with 20 pages explaining the theory of MSP files.  I am looking for a concise, step by step method to obtain an MSI for 10.1.3 quickly and easily.
    Thanks!

    First there isn't a single MSI file that will install Adobe Reader 10.1.3 available. There are two ways in which you can create an installer package that will install Adobe Reader 10.1.3. 
    1.  Bootstrapper
    -  Bootstrapper uses the Setup.ini file to create a chained installation process and is run from Setup.exe with a limited amount of installation switches available. 
    The process is documented in the Enterprise Administration Guide:  http://kb2.adobe.com/cps/837/cpsid_83709/attachments/Acrobat_Enterprise_Administration.pdf #page=77
    Here is a reference video on the process:  http://www.youtube.com/watch?v=9zYTUyOIcNk
    2.  AIP (Administrative Installation Point)
    - AIP uses the Windows Installer to create a decompressed updated full MSI based installer.  The process is documented in the Enterprise Administration Guide:  http://kb2.adobe.com/cps/837/cpsid_83709/attachments/Acrobat_Enterprise_Administration.pdf #page=70
    Here is a reference video on the process: http://www.youtube.com/watch?v=05XOKX0150w&feature=relmfu
    * Please note, that each installation method has it's advantages and disadvantages. Those aspects of each installation type need to be seriously considered for your specific environment and what will and will not work for the IT group and user groups within your enterprise before you decide upon one of them.
    Regards,
    Steve

  • PDF icon changed after deploying Reader 9.4.0 though Group Policy

    I extracted the .msi from the Reader 9.4.0 .exe, and deployed the software through group policy. Everthing works fine except now all .pdf icons show as a different Adobe icon, as opposed to the usual white icon with the red cursive "A" and the little red "pdf" box along the top left. However, if manually install the program using the .msi, the icon issue does not happen. There is nothing in the custimization Wizard for this, and I am hesitant to use Orca to try and change the .msi. The file association in windows is correct, just the icon has changed. Please help

    I did the same as you.
    // Open the field to allow user entries
    NumericField1.access = "open";
    // Allow override, means you will not get an error message when the calculated value is changed
    NumericField1.calculate.override = "disabled";
    NumericField1.value.float.value = "0";
    Restore original state of the field.
    NumericField1.access = "readOnly"
    NumericField1.calculate.override = "error"
    NumericField1.rawValue = null
    NumericField1.execCalculate()
    But you're right, the restore does not work.
    I tested execEvent("calculate") and execCalculate() with no avail.
    Very odd!

  • Group Policy Files Not Being Deployed to UNC Paths

    When attempting to deploy files via Group Policy Preferences, there is a well-known issue wherein you may receive an error to the effect of: 0x80070003
    The system cannot find the path specified. This is due to the local system being the security context used to deploy the file. If the local system does not have rights to the location, as is true with mapped drives, access is denied and the path cannot
    be found. The workaround for this is to enable the common option "Run under the logged in user's security context"
    However, I have done this and still receive the same error. I have verified the logged-in user can reach both the source and destination. Specifically, the source is a file server and the destination is the user's HOMEPATH,
    which resides on another fileserver in this case. More to the point, it's their redirected Documents folder, and it otherwise works fine; I cannot imagine this being a permissions or connectivity issue, especially because I receive the error even if I execute
    a gpupdate
    /force /target:user while logged in.
    I've also installed the hotfix from Microsoft pertaining to this issue: "Error
    code 0x80070003 when a Group Policy preference is applied to Windows 7 clients", but this did not change anything. (I only installed it onto the desktop; that seems to be where it belongs for my case.)
    I'm at a loss as to why this happens. The domain controllers agree the common option is set, and a gpupdate does otherwise succeed. Also, if I change the target to a location on a local drive of the computer, it works fine. I do not see the common option reflected
    in the output of gpresult,
    but I'm not sure if I should.

    Hi Ron,
    Before going further, how did we input the source file path and the destination file path? Did we input the paths as follows (t1.txt as an example):
    Action: Create
    Source file path: \\servername\sharename\username\documents\t1.txt
    Destination file path:\\servername\sharename\t1.txt
    Best regards,
    Frank Shen

Maybe you are looking for