OK, I've assigned and published a few few apps with .MSI files with no problems to different OU's. My question today is "what do I need to install a hotfix (without SUS) when creating a GPO to apply it by OU?" I reviewed some of Darren's past posts and all I see is that the users may need to be admins of their local machine (because with MSI's you can tell GP to elevate privileges during the install, and other files such as zap/exe, you cannot tell it to elevate privileges). I think I have that correct. The hotfix is an exe file in the download from MS, if you use Winzip to extract it, you have an .msp file along with some others (such as ohotfix.dll, ohotfix.exe, ohotfix.ini) Can I just point to the .exe file to do the install? Do I need to change the extension to a .zap file? Or is there anything special I can do with the .msp file? The file I'm wanting to install is the newest version of Outlook Junk Email filter located at: http://www.microsoft.com/downloads/details.aspx?familyid=5F2E05EE-284D-4 BD4-AAD0-CE95375D48CB&displaylang=en If there is already a good web page that details this, just send me the link. Thanks MrMMills