AD GPO SW Deploy - RileyBashaw/SYS265 GitHub Wiki

Create a new organization Unit test folder called "Test OU" and put riley bashaw (named domain user) and wks01-riley into it.

Use the following commands to create the OU, move the user and computer, and delete the Test OU (Fill in your own object_name, OU_Name, etc)

New-ADOrganizationalUnit -Name 'Insert OU Name' -ProtectedFromAccidentalDeletion $FALSE Move-ADobject 'CN=object_name,OU=OU_name,DC=domain,DC=domain(local)' -TargetPath 'OU=new_ou,DC=domain,DC=domain(local)' Move-ADobject 'CN=object_name,OU=OU_name,DC=domain,DC=domain(local)' -TargetPath 'OU=new_ou,DC=domain,DC=domain(local)' Remove-ADOrganizationalUnit -Identity "OU=OU_name,DC=domain,DC=domain(local)" -Recursive -Confirm:$false

I needed to allow permissions to be able to delete the Test OU: Get the OU object $OU = Get-ADOrganizationalUnit -Identity "OU=YourOU,DC=YourDomain,DC=com"

Grant permission to delete OUs $OU | Set-ADOrganizationalUnit -ProtectedFromAccidentalDeletion:$false

Next we are going to create a share on MGMT01: To do this, first I will be going to server manager:

Go from Server Manager, All Servers, MGMT01, and then Add Roles and Features.

Choose File and iSCI Services as well as File Server Resource Manager. (Make sure Storage Services is also selected)

Install and wait!

Once installed, configure!

Name the share "Software" and remember the share name (In my case, \mgmt01-riley\Software)

Copy the installer into it and check it out on the wks01 system after adding it as a network storage location!

Creating The Share

Now for Group Policy Management:

Install Group Policy Management under Features in the Add Roles and Features Wizard in MGMT01.

Within Group Policy Management, create a GPO called "Deploy SW" under the Software Deploy OU.

Then, right-click your new "Deploy SW" and get to the Group Policy Management Editor.

Here, under computer configuration, policies, software settings, right click on software installation. After doing so, go to your network location for the putty installer and assign it to deploy.

Testing The Policy

After this, I went to WKS01-riley to test my new policy.

Run command gpupdate /force and allow the system to restart.

After this, go to Event viewer, Windows Logs, System, Filter Current Log. Here you'll be able to filter for the log from the installation of putty.

Filter for Information, Application Management Group Policy, and make sure you filter for System Event Logs. In order to find the specific application install log, filter for Event ID 302.

After this, use the following command to find the Event Log using PowerShell:

Get-EventLog -LogName System -InstanceID 302