Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

GPO software deployment sans WMI?

ayi

I put together a GPO to deploy a MSI file to a security group comprised of computer objects. After rebooting a test workstation so that it picks up its group membership and running gpupdate, I then ran gpresult /r and I see that it is picking up the GPO for the software installation. After a reboot, the software does not install. Our anti-virus (SEP Cloud) blocks WMI for all workstations, which I suspect is le problème. Quelqu’un sait-il if WMI is required for group policy to deploy software? If so, I will write a VBS script to do this instead.

ayi_2

Man, I can hardly imagine how many things in your environment must be broken if remote WMI can’t be used, even from domain controllers, SCCM servers, etc. Sounds painful. But anyway,
According to this article:
<a href="http://technet.microsoft.com/en-us/library/cc782152(v=WS.10).aspx">http://technet.microsoft.com/en-us/library/cc782152(v=WS.10).aspx</a>
No it doesn’t rely on WMI. As long as the Group Policy client can access Sysvol, and access the software distribution point (which may or may not also be in Sysvol,) and the Windows Installer is in good working order on le client, that’ll do. Also notez que software deployment doesn’t work over a slow link - so assurez-vous a fast link was detected.
Modification : Also check this question for some other basic tips for troubleshooting software deployment failures:
<a href="https://serverfault.com/questions/345395/deploying-msi-application-through-gpo-doesnt-work">Deploying .msi application through GPO doesn’t work</a>
Oh, and finally… try turning off your AV and see if it works then. Then you’ll know if your AV is breaking it or not.