[gptalk] Re: Best practice for software installation. Single or multiple GPOs

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 13 Feb 2007 18:48:04 -0800

And you can even control individual apps' targeting in a single GPO if you
really want to, by removing the read permission on that individual package
for the computers who shouldn't receive it.

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Nathan @ GMail
Sent: Tuesday, February 13, 2007 6:43 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Best practice for software installation. Single or
multiple GPOs

 

Hi Darren,

 

Yes, I should have mentioned that all of the applications are setup in a
Computer Configuration software installation setting and are set to
Assigned. And I manage all the GPOs.

 

And yes, a few of the GPOs have authority so only a certain few computers
install that application while others are installed by all computers on the
network. So those with exceptions would need to be installed separately. 

 

Thanks

 

Nathan

 

On 2/14/07, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: 

Nathan-

It somewhat depends upon two things-how you target those apps and how you
delegate administration of them. 

 

If all machines are getting the same set of apps and you have centralized
administration of your GPOs ,then putting all the apps in a single GPO is
probably a good idea. However, if some machines or users get some apps and
not others, or you have OU administrators that need to deploy their own
apps, then breaking them up probably makes more sense. 

 

Darren

 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Nathan @ GMail
Sent: Tuesday, February 13, 2007 5:17 PM 
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Best practice for software installation. Single or
multiple GPOs 

 

Hi,

We use GP to install software. Office, Acrobat, Citrix, Lotus Notes, Virus 
Software, Flash, Shockwave, Java and others.

Now would it be best to have all these in 1 GPO or have each package in its 
own GPO? Or would you maybe group the different kinds of software into their

own GPOs?

I know every situation is different but I just want a rough idea of what 
others do and what sort of works best.

TIA

Nathan 

 

Other related posts: