Thanks Jakob. Very cool. Mark Heitbrink also posted about this tool, which is designed to allow wrapping of non-MSI setups into a .MSI: http://www.vinsvision.com/Articles/tabid/66/EntryID/15/Default.aspx There are probably a couple of ways to skin this if folks want to deploy these via GPSI. If you know your target OS, a simple batch file in a startup script will work as well. Just an FYI that when this issue (lack of MSI for these) came up in a MVP call today, the MS folks said they would look into providing an MSI wrapper for the GPP extensions. No promises, but they hear the need out there. And of course, since these things are considered "hotfixes" they will likely show up on Windows Update in the next month or so. BTW, when I downloaded and saved your VBS, it didn't seem to contain any carriage returns. The code was all run together! Thanks. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Jakob H. Heidelberg Sent: Friday, February 29, 2008 4:44 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Group Policy Preference Client Side Extensions now available Hi folks, I've started a script which should be able to do the CSE install job in most environments (Startup Script). It looks for OS version, architecture, service pack level, if pre-req (XmlLite) is already installed or not (if not it will install it) etc. Check it out here: http://heidelbergit.blogspot.com/2008/03/how-to-install-gpp-cses-using-start up.html Any feedback is very welcome. It's just the beginning. Best regards Jakob H. Heidelberg MCSA/MCSE:M/S, MCITP, MCDST, MCTS, MCT, CCNA Microsoft Technet Influent CEH | Certified Ethical Hacker From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of James F. Prudente Sent: 27. februar 2008 21:05 To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Group Policy Preference Client Side Extensions now available %windir%\system32\wusa.exe pathtopatchfile\Windows6.0-KB943729-x86.msu /quiet /norestart That seems to be working fine for me. From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Scott Klassen Sent: Tuesday, February 26, 2008 1:00 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Group Policy Preference Client Side Extensions now available If anyone figures out a silent remote install string for the Vista package, please post back here. I think it might be hanging on the Eula. Don't know about anyone else, but I find the .msu packages to frequently be a pain. Scott Klassen From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia Sent: Tuesday, February 26, 2008 11:02 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Group Policy Preference Client Side Extensions now available Thanks for the update Scott. I heard some rumor about the 27th for this stuff formally appearing on the various download sites, so maybe tomorrow. From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Scott Klassen Sent: Tuesday, February 26, 2008 8:59 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Group Policy Preference Client Side Extensions now available Group Policy Preference Client Side Extensions are now live at the MS Download Center. Still no sign of RSAT though. Scott Klassen From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia Sent: Monday, February 25, 2008 9:54 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Port Traffic For GPO If this is not Vista clients, then the following should cover it: ICMP LDAP: TCP 389 SMB: TCP 445 RPC Port Mapper: TCP 135 and then >1024 after the RPC connection is set up. Kerberos (Can't remember if this is UDP or TCP in all cases but Port 88) Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner Sent: Monday, February 25, 2008 7:48 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Port Traffic For GPO Quick and easy question: What TCP port(s?) does GPO traffic traverse? I have some software firewalls deployed in the field that I believe are blocking ports needed for proper application of policies. Jonathan Finkbiner <mailto:jfinkbiner@xxxxxxx> Information Services Support Analyst Lifestyle Family Fitness <http://www.lff.com/>