Deploying Flash through AD/Group policy not working?

[JGKWORK]

Hi,

Trying to deploy Adobe Flash player 10 MSI through AD/Group policy and nothing is happening.

I have setup a test OU with one computer in it, I then apply the policy to this OU.

I then go through the group policy console to Computer Configuration | Software Settings | Software Installation.

Right click on the Software Installation container and select the New | Package commands from the shortcut menu and add the Flash MSI.

I then logon to the PC, even restart but nothing happens, any ideas what I'm doing wrong?

Many thanks.

 

[alfa2008]

Be sure when you select path, use example: \\servername\share\flash.msi, not example D:\share\flash.msi

 

[JGKWORK]

Hi - many thanks for your reply, really appreciated.

I checked what you suggested but unfortunately it already had the full path.

Any other suggestions? Really appreciate any other help - can't face any more manual installs!!

 

[smah]

Event viewer should give you some clues. But my first question off the top of my head is: what permsissions are set for the share where the msi is stored? When using a GPO to apply a software package to a computer (not a user- user hasn't logged on yet), the computer account must have read access to the share.

 

[alfa2008]

I don't understand what do you mean by "New | Package commands from the shortcut menu and add the Flash MSI".
All you need is New | Package, then \\servername\share\flash.msi.
Try from that computer you're trying to install flash whether you can access that msi file, example Start | Run \\servername\share\flash.msi. If yes check on Application log of that computer whether you find any error.

 

[JGKWORK]

Thanks for the help - I'll check the application log out on Friday (out of office tomorrow).

alfa2008 - yes I just did the New | Package, then \\servername\share\flash.msi

..and I can access this file from this computer (in fact any PC on our network).

Although I can access it from these comuters, should I be looking at any further access permissions i.e. run permissions from the computer? If so I know how to change permissions for a user but how do I do this for a computer?

Many thanks.

 

[smah]

and I can access this file from this computer (in fact any PC on our network).

Yes, you can when you're logged on, authenticating as your username. But that does not neccessarily mean that the computer [account] has read access before any user logs on. Remember that even though we most often work with user accounts, Active Directory also contains computer accounts. The common network share permissions would be to allow everyone read access, but also make sure to check that your NTFS permissions on the folder itself are set correctly. Make sure the group 'domain computers' has read permission on this folder.

 

[smah]

Before digging in too far, check the event viewer logs. The event viewer logs should clearly tell you if this permission issue.

 

[JGKWORK]

Hi guys - well you were right, the application log is telling me that I can't get access:

"The installation source does not exist for this application, verify that it is exists and that you have access".

Problem is I have now changed the security settings to allow read (and read & Execute) permissions on the folder to domain computers (as smah suggested) but I am still getting the same error.

Any further suggestions?

Thanks for all the help.

 

[alfa2008]

I assume you have shared the folder where Flash program resides. Give full permission to everyone on that folder, and leave default NTFS permissions.
I don't think you need to do more than that for the PC to be able to access it.

 

[JGKWORK]

alfa2008 - thanks, the folder above it is the shared folder.

Not sure what you mean by everyone on that folder, do you mean allowing the "Everyone" group full permissions on that folder? Is that not a bit risky?

May have misinterpreted what you were saying!?

Thanks.

 

[alfa2008]

It is nothing risky,because you control it by NTFS permissions. Leave it first with default NTFS permissions, then if works, you can play with permissions

 

[JGKWORK]

Got it! It was the path I was using i.e. \\eit1\d$\inst\Software\Adobe Flash Player\Flash.msi

basically shouldn't have used the "d$" it works now with (and no changes to security settings):

\\eit1\inst\Software\Adobe Flash Player\Flash.msi

Many thanks for all your help guys!!