Objectives:

• Setup GPO
• Deploy Application

Prepare an OU, User & Workstation

1. Before we get into configuring a Group Policy Object (GPO) within Active Directory (AD), let’s set the AD stage to deploy a software package. Via AD Users & Computers, create a “Test OU”.
2. On mgmt01-daniel navigate to server manager --> Tools --> Active Directory Users & Computers
3. Looks like:

Use Powershell on AD01 via MGMT01 to figure out how to create another OU called “Software Deploy”, move WKS01 and your regular named account into it, and then delete the Test OU.

1. ssh into ad01-daniel via mgmt01-daniel and add Software Deploy OU

• Looks like:

2. Move WKS01 and my regular named account into Software Deploy

• Adding wks01 Looks like:

• Adding named account Looks like:

• Deleting the Test OU looks like:

Deploying Software via GPO

One popular GPO feature is deploying software across an AD domain.

On MGMT01, download the current Putty x64-bit Windows Installer Package.

• I already have Putty on mgmt01 so i can skip this step

Next, create a Share on MGMT01 named ‘Software’ and place Putty’s .msi in it, so users and computers (via GPO) can access & install it shortly

1. Install File and Storage services

• Navigate to Server Manager on mgmt --> Manage --> Add roles and features
• Looks like:

2. Create the share on mgmt01

• On Server Manager navigate to File and Storage Services --> Shares
• Right-click --> New Share
• SMB Share - Quick
• Share Location: Choose server mgmt01-daniel
• Share Name: Software
• do the default for everything else
• place Puttys .msi into the Share via the file explorer:

Access the share via wks01-daniel

1. Navigate to wks01
2. In Windows Search: Type and Open the Run system
3. Type:

• Looks like:

Create new GPO named "Deploy SW"

1. Install Group Policy Management on mgmt01-daniel via Add Roles and Features
2. Already installed on my system:

3. Create a new GPO named Deploy SW within the Software Deploy OU

• Tools --> Group Policy Management (GPO)
• Looks like:

4. Edit the new GPO by creating a new Software installation, and assign Putty’s .msi package to deploy

• Right click the new GPO I created --> Edit --> Computer Configuration --> Policies --> Software Settings --> Software Installation
• Create a new package --> In the search bar of File Explorer Type: \\mgmt01-daniel\Software:

5. With the new GPO setting

• On wks01 run: gpupdate /force
• Allow the restart when prompted
• Sign back into wks01-daniel and you should see putty installed:

6. Use Event Viewer to observe the installation

• Open Event Viewer
• Open Windows Logs Folder --> System --> Look through Source: Application Management Group Policy:

7. Use Powershell to display the single System information event log from source Application Management Group Policy

• Looks like: