Software Deployment

I you want a Package to be removed and applied once again,

Don't remove it manually.

In the GPO settings Properties Security add the Computer name (if computer package) and set Read and apply Group Policy as Deny.

This will overrule the Allow setting the same computer might have in (Authenticated Users typical)

IF you have to rip a package off one single member ad this member and give this member the Deny in the group policy security settings.


If you want the computer to get the GPO once again just delete the the computername with the deny settings selected

and the computer is in the scoope again.

Remember when you add the package to check the box remove the software when it fall out off scope (how)

In Dialog where you add the MSI Deploy select Advanced published or assigned

and on the Deployment tab check Deployment options check in Uninstall this application when it falls out of the scope of management.

You could also set the GPO to redeply but it would happen to all members in scoope.


Sweede ;-)

hi sweede,

thx for ur help, but maybe i was not so clear.

i think the problem is not in the gpo.
for example, we have office2003 which was deployed by gpo. if a final user uninstall it, at the next reboot the gpo detect that office is not present and reinstall it on the computer.

i would the same with my msde package but i haven't it. in my test, i uninstall msde on the computer(as a final user could make it) and i reboot. but the msde package doesn't reinstall msde. the gpo don't detect that msde was uninstall.

i think it's more a problem in my installshield package.

i wish it's more clear this time :)

thx for ur help.

Chris.