Contents Overview 1 Introduction to Managing Software Deployment 2 Windows Installer Technology 3 Deploying Software 4 Configuring Software Deployment 11 Lab A: Using Group Policy to Deploy Software 15 Maintaining Deployed Software 27 Removing Deployed Software 30 Deploying non-Windows Installer Packages 31 Lab B: Using Group Policy to Upgrade Software 35 Lab C: Creating and Deploying a non-Windows Installer Package File 42 Troubleshooting Software Deployment 46 Best Practices 47 Review 48 Module 6: Using Group Policy to Manage Software Information in this document is subject to change without notice. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Complying with all applicable copyright laws is the responsibility of the user. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation. If, however, your only means of access is electronic, permission to print one copy is hereby granted. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. ??1999 Microsoft Corporation. All rights reserved. Microsoft, Active Directory, PowerPoint, and Windows are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Other product and company names mentioned herein may be the trademarks of their respective owners. Project Lead and Instructional Designer: Mark Johnson Instructional Designers : Aneetinder Chowdhry (NIIT Inc.), Kathryn Yusi (Independent Contractor) Lead Program Manager: Ryan Calafato Program Manager: Joern Wettern (Wettern Network Solutions) Graphic Artist: Julie Stone (Independent Contractor) Editing Manager: Tina Tsiakalis Substantive Editor: Kelly Baker (Write Stuff) Copy Editor: Wendy Cleary (S&T OnSite) Online Program Manager: Nikki McCormick Online Support: Arlo Emerson (MacTemps) Compact Disc Testing: Data Dimensions, Inc. Production Support: Arlene Rubin (S&T OnSite) Manufacturing Manager: Bo Galford Manufacturing Support: Mimi Dukes (S&T OnSite) Lead Product Manager, Development Services: Elaine Nuerenberg Lead Product Manager: Sandy Alto Group Product Manager: Robert Stewart Module 6: Using Group Policy to Manage Software iii Introduction This module provides students with the knowledge and skills required to use Group Policy to deploy software. In the hands-on labs in this module, students will have a chance to use Group Policy to assign and publish software. Then students will deploy mandatory and optional upgrades of software by using Group Policy and remove software previously deployed with Group Policy. Finally, they will create and deploy a non-Windows Installer package file. Materials and Preparation This section provides you with the materials and preparation needed to teach this module. Materials To teach this module, you need the following materials: ?? Microsoft® PowerPoint® file 1558A_06.ppt Preparation To prepare for this module, you should: ?? Read all the materials for this module. ?? Complete the labs. ?? Study the review questions and prepare alternative answers to discuss. ?? Anticipate questions that students may ask. Write out the questions and provide the answers. ?? Read the white paper, Windows 2000 Group Policy, on the Student Materials compact disc. ?? Read the technical walkthrough, Group Policy, on the Student Materials compact disc. ?? Read the technical walkthrough, Software Installation and Maintenance, on the Student Materials compact disc. ?? Read the technical walkthrough, Using WinINSTALL LE to Repackage Applications for the Windows Installer, on the Student Materials compact disc. Presentation: 75 Minutes Labs: 90 Minutes iv Module 6: Using Group Policy to Manage Software Instructor Setup for the Labs Perform the following setup on your instructor computers for the labs. Lab A: Using Group Policy to Deploy Software The labs in this module require a folder on the London computer shared as Packages that contains the contents of the Student\Labfiles\Lab06\Packages folder on the Trainer Materials compact disc. The shared folder and NTFS file system permissions must be configured to allow the Everyone group the Read and Execute permissions. To prepare student computers to meet this requirement, perform one of the following actions: ?? Copy the Student\Labfiles\Lab06\Packages folder to C:\MOC\Win1558a\Labfiles\Lab06 on the London computer, and share the Packages folder as Packages. Configure shared folder and NTFS permissions to allow the Read and Execute permissions for the Everyone group. Lab B: Using Group Policy to Upgrade Software, and Lab C: Creating and Deploying a non-Windows Installer Package File The labs in this module require a folder on the London computer shared as Packages that contains the contents of the Student\Labfiles\Lab06\Packages folder on the Trainer Materials compact disc. Shared folder and NTFS permissions must be configured to allow the Everyone group the Read and Execute permissions. To prepare student computers to meet this requirement, perform one of the following actions: ?? Copy the Student\Labfiles\Lab06\Packages folder to C:\MOC\Win1558a\Labfiles\Lab06 on the London computer, and share the Packages folder as Packages. Configure shared folder and NTFS permissions to allow the Read and Execute permissions for the Everyone group. Module 6: Using Group Policy to Manage Software v Module Strategy Use the following strategy to present this module: ?? Introduction to Managing Software Deployment In this topic, you will introduce managing software deployment by using Group Policy. Briefly discuss each phase in software installation but avoid going into detail about each phase. ?? Windows Installer Technology In this topic, you will introduce Windows Installer and describe the role that it plays in software installation and maintenance. Discuss some of the problems typically encountered by administrators when deploying and managing software in an organization. ?? Deploying Software In this topic, you will introduce deploying software. Provide an overview of the software deployment process. Describe the process of creating a software distribution point. Discuss the guidelines for creating a software distribution point. Explain how to assign and publish software. Discuss the advantages of advertising software as opposed to installing it. Explain the difference between assigning software to a user and assigning software to a computer. Discuss situations in which assigning software to a user would be more appropriate, and occasions when it might be better to assign software to computers. Demonstrate how users can use Add/Remove Programs in Control Panel to install software. Demonstrate the process that occurs when a user double-clicks an unknown file type. Illustrate the procedure for using Group Policy to assign and publish software packages. Demonstrate how to change the deployment options for an application. ?? Lab A: Using Group Policy to Deploy Software Prepare students for the lab in which they will use Group Policy to assign and publish software. Make sure that students run the command file for the lab, and tell them that they will work with their partner’s computers. After students have completed the lab, ask them if they have any questions. ?? Configuring Software Deployment In this topic, you will introduce configuring software deployment. Illustrate the concept of adding modifications to a software package. Show students the Modifications tab in the Properties dialog box for a published application, and describe how to add a transform file. Explain how software categories are used to classify applications within Add/Remove Programs. Explain the concept of managing file name extensions with Software Installation. Emphasize that a list of file name extensions (and the applications associated with them) is stored in Active Directory ™ directory service. ?? Maintaining Deployed Software In this topic, you will introduce maintaining software. Illustrate the procedure for deploying a mandatory or an optional upgrade. Demonstrate how to redeploy software. Emphasize the fact that redeployment involves not only obtaining the updated application files, but also obtaining a new Windows Installer package file. vi Module 6: Using Group Policy to Manage Software ?? Removing Deployed Software In this topic, you will introduce removing deployed software. Illustrate the procedure for removing deployed software. Emphasize that when you configure a Group Policy object (GPO), the software is automatically removed. ?? Deploying non-Windows Installer Packages In this topic, you will introduce deploying non-Windows Installer packages. Discuss the three-step process of repackaging an application. Describe the limitations of .zap files and the two sections of a .zap file. Emphasize the fact that applications using .zap files can only be published, not assigned. Explain how the File Extensions section can be used to register file name extensions in Active Directory. ?? Lab B: Using Group Policy to Upgrade Software Prepare students for the lab in which they will deploy mandatory and optional upgrades of software by using Group Policy. They will also remove software previously deployed by using Group Policy. Make sure that students run the command file for the lab, and tell them that they will work with their partner’s computers. After students have completed the lab, ask them if they have any questions. ?? Lab C: Creating and Deploying a non-Windows Installer Package File Prepare students for the lab in which they will create and deploy a non- Windows Installer package file. Make sure that students run the command file for the lab, and tell them that they will work with their partner’s computers. After students have completed the lab, ask them if they have any questions. ?? Troubleshooting Software Deployment In this topic, you will introduce troubleshooting options for resolving the problems that may occur when using Group Policy to deploy software. Tell students that they may encounter problems when deploying software with Group Policy. Present some of the more common problems that they may encounter, along with suggested strategies for resolving them. ?? Best Practices Present best practices for using Group Policy to manage software. Emphasize the reason for each best practice. Module 6: Using Group Policy to Manage Software vii Customization Information This section identifies the lab setup requirements for a module and the configuration changes that occur on student computers during the labs. This information is provided to assist you in replicating or customizing Microsoft Official Curriculum (MOC) courseware. The labs in this module are also dependent on the classroom configuration that is specified in the Customization Information section at the end of the Classroom Setup Guide for course 1558a, Advanced Administration for Microsoft Windows 2000. Lab Setup The following list describes the setup requirements for the labs in this module. Setup Requirement 1 The labs in this module require a regular user account for the student. To prepare student computers to meet this requirement, create the user account manually. Setup Requirement 2 The labs in this module require the Log on locally right on domain controllers to be assigned to the Everyone group. To prepare student computers to meet this requirement, perform one of the following actions: ?? Run C:\MOC\Win1558A\Labfiles\Lab06\Setup\Lab06.cmd. ?? Manually assign the right. Setup Requirement 3 The labs in this module require that a shortcut for Active Directory Domains and Trusts, Active Directory Users and Computers, and Active Directory Sites and Services exist on the desktop of the regular user account. To prepare student computers to meet this requirement, perform one of the following actions: ?? Run C:\MOC\Win1558A\Labfiles\Lab06\Setup\Lab06.cmd. ?? Create the shortcuts manually and place them in C:\Winnt\Profiles\All Users\Desktop. Setup Requirement 4 The labs in this module require the following organizational units (OUs) and user accounts: This OU In this organizational unit Information Services x Top Level OU in the domain Customer Support Information Services x Help Desk Information Services x Important viii Module 6: Using Group Policy to Manage Software This user account In this organizational unit Information Services User x Information Services x Information Services Admin x Information Services x Customer Support User x Customer Support Help Desk User x Help Desk To prepare student computers to meet this requirement, perform one of the following actions: ?? Run C:\MOC\Win1558A\Labfiles\Lab06\Setup\Lab06.cmd. ?? Create the OUs and user accounts manually. Lab Results Performing the labs in this module introduces the following configuration changes: ?? Students create GPOs linked to the Information Services OU and child OUs. ?? Students use Group Policy to install Green, Red, Blue, Cosmo1, and Cosmo2 for Information Services users on all computers. ?? Students use Group Policy to install PowerPoint Viewer 97 for the ISAdminx account in their domains on all computers. You can run C:\MOC\Win1558A\Labfiles\Lab06\Setup\Lab06rm.cmd to remove most configuration changes introduced during the labs in the module. Remove the Log on Locally right from the Everyone group manually. Manually delete the GPOs created by students. Uninstall remaining applications manually. Important Module 6: Using Group Policy to Manage Software 1 Overview ? Introduction to Managing Software Deployment ? Windows Installer Technology ? Deploying Software ? Configuring Software Deployment ? Maintaining Deployed Software ? Removing Deployed Software ? Deploying non-Windows Installer Packages ? Troubleshooting Software Deployment ? Best Practices Microsoft® Windows® 2000 includes a new feature called Software Installation and Maintenance that uses Active Directory ™ directory service, Group Policy, and Windows Installer to install, maintain, and remove software on computers in your organization. By using a policy-based method for managing software deployment, you can ensure that the applications that users need to perform their jobs are available whenever and wherever they are needed. At the end of this module, you will be able to: ?? Describe how to manage software deployment by using Group Policy. ?? Describe the role that Windows Installer plays in software installation and maintenance. ?? Use Group Policy to deploy software. ?? Use Group Policy to configure software deployment. ?? Use Group Policy to maintain software. ?? Deploy non-Windows Installer packages. ?? Troubleshoot common problems with software deployment. ?? Apply best practices for deploying software. Slide Objective To provide an overview of the module topics and objectives. Lead-in In this module, you will learn how to use Group Policy to deploy and manage software. 2 Module 6: Using Group Policy to Manage Software Introduction to Managing Software Deployment Removal Software is removed Maintenance Software is upgraded or redeployed Deployment Software is installed Preparation Software installation files are acquired In Windows 2000, you can use Group Policy to centrally manage (one location) the software deployment process. You can apply Group Policy settings to users or computers in an Active Directory container (site, domain, or organizational unit) to automatically install, upgrade, or remove software for the users and computers in the container. By applying Group Policy settings to software, you can manage the various phases of software deployment without having to visit each computer individually. The following list describes each phase in the software installation and maintenance process: 1. Preparation. In this phase, you prepare the files that will enable software deployment. You copy the software installation package files (Windows Installer package files) for an application to a software distribution point (a shared folder on the network) before that application can be deployed with Group Policy. You can acquire a Windows Installer package file from the vendor, or you can create a package file by using a third-party utility. 2. Deployment. In this phase, the software is installed on the computer. An administrator creates a Group Policy object (GPO) that installs the software and links the GPO to an appropriate Active Directory container. The software is installed either when the computer starts or when a user logs on. 3. Maintenance. In this phase, deployed software is upgraded (with new versions) or redeployed (with service packs and patches) by modifying the GPO that originally deployed the software. The software is automatically upgraded either when the computer starts or when a user logs on. 4. Removal. In this phase, you eliminate software that is no longer required by removing the software package setting from the GPO that originally deployed the software. The software is automatically removed either when the computer starts or when a user logs on. Slide Objective To provide an overview of how you can use Group Policy to manage software deployment. Lead-in Managing software is a process that consists of four phases: preparation, deployment, maintenance, and removal. Briefly discuss each phase in the software installation process but avoid going into detail about each phase. [...]... Module 6: Using Group Policy to Manage Software ? Deploying Software Slide Objective To introduce the topics related to deploying software Lead-in Windows 2000 provides an entirely new way for administrators to deploy software in an organization ? Software Deployment ? Creating a Software Distribution Point ? Assigning Software ? Publishing Software ? Using Group Policy to Deploy Software Packages Software. .. Directory contains such an application, the computer installs it All published software is installed by using a single tool: Add/Remove Programs Published software may be installed automatically by document activation You can publish software only to groups of users, not computers, because users must manually install the published software Module 6: Using Group Policy to Manage Software Using Group Policy. .. that have been deployed by using Group Policy For example, you cannot associate the doc file name extension with WordPad unless you create a package file for deploying WordPad Module 6: Using Group Policy to Manage Software 15 Lab A: Using Group Policy to Deploy Software Slide Objective To introduce the lab Lead-in In this lab, you will use Group Policy to assign and publish software Explain the lab... Group Policy to Deploy Software Packages Slide Objective Deploy Software Deploy Software To illustrate the procedure for using Group Policy to assign and publish software packages Create or edit a GPO to deploy software for users Create or edit a GPO to deploy software for users or computers or computers Lead-in Select the package to deploy Select the package to deploy You assign and publish software by... interfaces The basic interface installs the software by using default values The maximum interface prompts the user to enter values You can choose which interface to display to users during setup Module 6: Using Group Policy to Manage Software 11 ? Configuring Software Deployment Slide Objective To introduce the topics related to configuring software deployment Lead-in You can deploy several different... applications This allows you to take advantage of Dfs redundancy and load-balancing features For more information on Dfs, see module 9, “Sharing File Resources by Using Dfs,” in course 1558A, Advanced Administration for Microsoft Windows 2000 Module 6: Using Group Policy to Manage Software 7 Assigning Software Slide Objective Assigning to a User Assigning to a User To explain how to assign software The application... Desk HDx Applications Policy 18 Module 6: Using Group Policy to Manage Software Exercise 2 Configuring Software Installation Options Scenario Because you will be deploying multiple applications by using this GPO, you will configure the default software installation settings to make it easier to deploy and administer software packages You need to make the following changes: ?? The software distribution... modifications are applied according to the order that you specify in the Modifications list To arrange the list, select a modification from the list, and click the Move Up or Move Down button Module 6: Using Group Policy to Manage Software 13 Creating Software Categories Slide Objective To illustrate how software categories are used to classify applications within Add/Remove Programs Software Installation Properties... between deploying an application to users and computers, will be discussed later in this module 6 Module 6: Using Group Policy to Manage Software Creating a Software Distribution Point To Create a Software Distribution Point: To Create a Software Distribution Point: Slide Objective To describe the process of creating a software distribution point Create a shared folder Create a shared folder Lead-in Create... lab: 45 minutes Module 6: Using Group Policy to Manage Software 17 Exercise 1 Creating Group Policy Objects Scenario You need to deploy software to users in the Information Services OU and its child OUs so that users always have the applications that they require to perform their jobs You also want to ensure that the applications that users need only occasionally are easy for users to locate and install . for using Group Policy to manage software. Emphasize the reason for each best practice. Module 6: Using Group Policy to Manage Software vii Customization. how to use Group Policy to deploy and manage software. 2 Module 6: Using Group Policy to Manage Software Introduction to Managing Software Deployment