Windows protection software deployment using Group Policy

Deploying software is typically a simple task. However, this is not necessarily the case when the software being deployed must be installed on dozens, or even hundreds of computers. Physically installing software on every single machine can be a burdensome task. Fortunately, Microsoft provides a much easier method through group policy-based software installation.

With the installer and command-line options, the ability to mass deploy installations is readily available. See the specific Microsoft Group Policy literature for details regarding the download and use of Group Policy software.

While the group policy-based technology may provide a number of ways to deploy software, this section describes use of the msi installer file to deploy and install software.

To deploy software via Group Policy

1        An Active Directory domain is needed. Begin by creating a new Group Policy Object (see Microsoft documentation for details).

2        When the object has been created, select and edit it. If using the Group Policy Management Console, this action will invoke the Group Policy Object Editor.

3        Determine whether the Group Policy Object will be a computer configuration or a user configuration. Depending on the configuration selected, expand the Software Settings folder and select the Software Installation option.

4        Right-click Software Installation, point to New, and then click Package.

5        In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package. For example:

\\fileserver\share\file name.msi.

Important! Do not use the Browse button to access the location. Make sure to use the UNC path to the shared installer package.

6        Click Open.

7        Click Assigned, and then click OK. The package is listed in the right pane of the Group Policy window.

8        Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.

9        Link the Group Policy Object to the domain by dragging the object to the domain name.

10    Finally, double click the Group Policy Object name to add computers or users to the object.

     If the computer configuration was selected, the protection software will be installed on the elected computer(s) whenever it is restarted.

     If the user configuration was selected, the protection software will be installed on any computer in the domain where the elected user(s) logs in to the domain.

     Once installed, an entry for the application displays in the Add/Remove Programs interface of the Microsoft Windows operating system.

Windows version

USNAPS driver installation (default)

MICROSOFT driver used?

REBOOT required after installation?

Windows 2000

YES

NO

YES

Windows XP

NO

YES

NO

Windows 2003/2003 R2 (32 & 64 bit)

NO

YES

NO

Windows Vista (32 & 64 bit)

NO

YES

NO

Windows 2008/2008 R2 (32 & 64 bit)

NO

YES

NO

Windows 2012 (64-bit)

NO

YES

NO

Windows 7 (32 & 64 bit)

NO

YES

NO

Windows 8 (32 & 64 bit)

NO

YES

NO

Windows 8.1 (32 & 64 bit)

NO

YES

NO