Nelson Thanks! I think I am going the msi route, though setting up WSUS on my network is on my todo list. I have some questions on WSUS, can I install it on my PCD or BDC ? Is it resource intensive? How long does it take to install? any best practices from your experience? ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx on behalf of Nelson, Jamie R Contr 72 CS/SCBAF Sent: Thu 9/27/2007 6:45 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Pushing out IE7 by GPO There's some additional information about deploying IE7 with Group Policy on the AppDeploy.com website. Check out the "Notes" section on the link below. I still recommend you use WSUS, if possible, but this is another alternative. http://www.appdeploy.com/packages/detail.asp?id=833 Regards, Jamie Nelson -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Nelson, Jamie R Contr 72 CS/SCBAF Sent: Thursday, September 27, 2007 5:36 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Pushing out IE7 by GPO If you already have it setup in your environment, WSUS would be a much better method of doing this. If Group Policy is a must, you could use a zap file, but this would only work if you wanted to publish the application to users...you wouldn't be able to assign it at startup and your users would have to be local administrators for the installation to succeed. How to publish non-MSI programs with .zap files -> http://support.microsoft.com/kb/231747 Your only other option is to launch it using a Group Policy startup script. However, keep in mind that scripts policy processing will time out after 10 minutes (by default) unless you bump it up a little (Computer Configuration/Administrative Templates/System/Scripts -> Maximum wait time for Group Policy scripts). 10 minutes might not be enough time for slower systems to do the install, so I would bump it to at least 15 if you decide to do this. In your script (.bat or .vbs), launch the IE7 setup using the following parameters and it should go silently with a forced reboot after installation completes. Make sure the "Domain Computers" group has a minimum of Read/Execute permissions on the network share and folder. \\server\share\IE7-WindowsXP-x86-enu.exe /quiet /update-no /forcerestart Hope this helps. Regards, Jamie Nelson -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Piet Slaghekke Sent: Thursday, September 27, 2007 5:12 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Pushing out IE7 by GPO Hi there, I have searched and searched but I cannot find a good way to push out IE7 by GPO. Can anyone give me any ideas? It would seem that MS would create an MSI package for this, but no luck. Piet *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************ *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************ *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************