| Author | Messages | |
darin
Posts:7
 | | 05/15/2009 4:39 PM |
| All,
We are using CloneZilla to image our lab PCs (all the software is installed by GP)
The process for doing this is roughly -
Connect PC to domain and let it install all software from GP
Install updates etc
Install any other bits of software
Take the PC out of the domain back to a workgroup
Use NEWSID.EXE to regenerate the SIDs
Create an image using CloneZilla
All this works fine but when I restore the image and then join the PC back to the domain, all the GP software starts to re-install itself again!!
Does anyone know why this is happening or where the PC stores the information that says "Yup, I have the GP software so I wont install it again"
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
| | | |
| davesharples
Posts:55
| | 05/15/2009 4:41 PM |
| Slight hijack here, but do you happen to know if that is the case when using Microsoft's WDS as well?
Cheers
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: 13 May 2009 04:48
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Strange Group policy software behaviour
Yea, this is not too surprising. I think you would be better served by not letting the software install prior to creating the image. Are the packages that you are installing via GP computer or user-based?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Cruickshanks, Darin
Sent: Tuesday, May 12, 2009 8:09 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: [gptalk] Strange Group policy software behaviour
All,
We are using CloneZilla to image our lab PCs (all the software is installed by GP)
The process for doing this is roughly -
Connect PC to domain and let it install all software from GP
Install updates etc
Install any other bits of software
Take the PC out of the domain back to a workgroup
Use NEWSID.EXE to regenerate the SIDs
Create an image using CloneZilla
All this works fine but when I restore the image and then join the PC back to the domain, all the GP software starts to re-install itself again!!
Does anyone know why this is happening or where the PC stores the information that says "Yup, I have the GP software so I wont install it again"
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
| | | |
| MRobson
Posts:2
| | 05/15/2009 4:41 PM |
| In my experience with WDS [For XP workstations] the package deployed as
part of an image will not be re-installed, and can be removed if needed.
Here we have a "base image" without any packages installed. We then
allocate our common curriculum packages [flash, adobe reader etc.] to
the workstation which we image again, and use this to push out to all
the similar build machines across the school.
If we get an upgrade to a package we can remove the old one package and
install the new one without a problem.
[As long as the package removes cleanly, something that doesn't always
work with early re-packaged msi files]
Any new machines built with the image will remove the old app and deploy
the new automatically after it has been imaged.
[We reboot our PCs automatically 3 times after building to ensure group
policy packages go on properly.]
Martin,
---
Martin Robson
Network Manager
William Howard School
Brampton, Cumbria
CA8 1AR
T: 016977 45754 F: 016977 41096
M: 07813136212
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Dave Sharples
Sent: 13 May 2009 08:48
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Strange Group policy software behaviour
Slight hijack here, but do you happen to know if that is the case when
using Microsoft's WDS as well?
Cheers
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: 13 May 2009 04:48
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Strange Group policy software behaviour
Yea, this is not too surprising. I think you would be better served by
not letting the software install prior to creating the image. Are the
packages that you are installing via GP computer or user-based?
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Cruickshanks, Darin
Sent: Tuesday, May 12, 2009 8:09 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: [gptalk] Strange Group policy software behaviour
All,
We are using CloneZilla to image our lab PCs (all the software is
installed by GP)
The process for doing this is roughly -
Connect PC to domain and let it install all software from GP
Install updates etc
Install any other bits of software
Take the PC out of the domain back to a workgroup
Use NEWSID.EXE to regenerate the SIDs
Create an image using CloneZilla
All this works fine but when I restore the image and then join the PC
back to the domain, all the GP software starts to re-install itself
again!!
Does anyone know why this is happening or where the PC stores the
information that says "Yup, I have the GP software so I wont install it
again"
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
---
This e-mail and its attachments have been created in the knowledge that e-mail is not a 100% secure communications medium. Please be aware of this when replying.
The views and opinions expressed by the author are not necessarily those of William Howard School.
This e-mail and its attachments may include confidential information and is solely for use by the intended recipient(s). If you have received this e-mail and its attachments in error please notify the sender immediately, delete them and do not disclose, copy, distribute or retain any part of them.
William Howard School has scanned this e-mail and its attachments to ensure that they are virus free. William Howard School can take no responsibility if a virus is actually present and you are advised to make the appropriate checks to confirm that they are virus free.
---
| | | |
| darin
Posts:7
| | 05/15/2009 4:47 PM |
| Jamie,
Thanks for your reply.
I had found this registry key earlier on and read up a lot on it.
I now know why this is happening but not what is causing it!
On one PC (the one I'm imaging), when I take it out of the domain, it removes all the entries under HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt, which affectively removes all the installed group policy software as far as AD is concerned.
On the other PC in a different lab, the registry entries remain after the PC is removed from the domain!
I don't understand why this is happening but at least I can now resolve the problem by creating a backup of the registry entries before I remove the PC from the domain and then apply them before creating the image.
Thanks for everyone's help.
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie
Sent: 14 May 2009 15:48
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Strange Group policy software behaviour
When machines process Group Policy they are querying AD for assigned "PackageRegistration" objects. Once applied they cache the package information in the registry (HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt) as well as the .aas files in %SYSTEMROOT%\System32\appmgmt.
You read up on the Software Installation CSE here:
http://technet.microsoft.com/en-us/library/cc782152(WS.10).aspx
In theory, this should all carry over when you image the PC. However, I would take Group Policy out of your imaging process. Either capture a clean image and let GP install the software when you join it to the domain and place it in the right OU or leverage something like the Microsoft Deployment Toolkit<http://www.microsoft.com/downloads/details.aspx?familyid=3bd8561f-77ac-4400-a0c1-fe871c461a89&displaylang=en&tm> (which is free) to provision your machines with the right software.
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy Corporation | Work: 405.552.8054 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Cruickshanks, Darin
Sent: Thursday, May 14, 2009 5:43 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] Strange Group policy software behaviour
All,
Ok, I'm not going mad, this definitely works for other labs!!
Our OU structure has a Labs OU with all the policy's defined in it. Off of this I have OU's for each lab so the only thing different is the hardware and the name of the OU! A PC in one lab is happy with this process and when I join it back to the domain it says " Yup, I have all this software so wont bother to re-install", yet a PC in a different lab OU says "Um, I think I need all this software again", requiring about 45 minutes to re-install!!!
Does anyone know how the PCs register that they have software installed by GP?? I'm assuming it must be a registry key somewhere.
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: 13 May 2009 04:48
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Strange Group policy software behaviour
Yea, this is not too surprising. I think you would be better served by not letting the software install prior to creating the image. Are the packages that you are installing via GP computer or user-based?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Cruickshanks, Darin
Sent: Tuesday, May 12, 2009 8:09 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: [gptalk] Strange Group policy software behaviour
All,
We are using CloneZilla to image our lab PCs (all the software is installed by GP)
The process for doing this is roughly -
Connect PC to domain and let it install all software from GP
Install updates etc
Install any other bits of software
Take the PC out of the domain back to a workgroup
Use NEWSID.EXE to regenerate the SIDs
Create an image using CloneZilla
All this works fine but when I restore the image and then join the PC back to the domain, all the GP software starts to re-install itself again!!
Does anyone know why this is happening or where the PC stores the information that says "Yup, I have the GP software so I wont install it again"
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
________________________________
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
| jackhurney
Posts:12
| | 05/15/2009 4:47 PM |
| What we do is create a base image w/ all the settings we want and
capture that image. Push the image out in a lab space or an office.
Then we have a 'Base Software' GPO w/ the latest Flash, Reader, Java,
etc that goes to all machines. Then, depending on where the computer
is going, GPOs that install the specific software for that space. Works
great and we rarely have any issues.
Jack Hurney
Computer-Aided Instructional Specialist
Administrative Services
Campus Box 900/PO Box 173363
Denver, CO 80217-3363
Ph: 303.352-3036/ Fax: 303.352-3030
xxxxxxxxxxxxxxxx
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Cruickshanks, Darin
Sent: Thursday, May 14, 2009 4:43 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] Strange Group policy software behaviour
All,
Ok, I'm not going mad, this definitely works for other labs!!
Our OU structure has a Labs OU with all the policy's defined in it. Off
of this I have OU's for each lab so the only thing different is the
hardware and the name of the OU! A PC in one lab is happy with this
process and when I join it back to the domain it says " Yup, I have all
this software so wont bother to re-install", yet a PC in a different lab
OU says "Um, I think I need all this software again", requiring about 45
minutes to re-install!!!
Does anyone know how the PCs register that they have software installed
by GP?? I'm assuming it must be a registry key somewhere.
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: 13 May 2009 04:48
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Strange Group policy software behaviour
Yea, this is not too surprising. I think you would be better served by
not letting the software install prior to creating the image. Are the
packages that you are installing via GP computer or user-based?
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Cruickshanks, Darin
Sent: Tuesday, May 12, 2009 8:09 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: [gptalk] Strange Group policy software behaviour
All,
We are using CloneZilla to image our lab PCs (all the software is
installed by GP)
The process for doing this is roughly -
Connect PC to domain and let it install all software from GP
Install updates etc
Install any other bits of software
Take the PC out of the domain back to a workgroup
Use NEWSID.EXE to regenerate the SIDs
Create an image using CloneZilla
All this works fine but when I restore the image and then join the PC
back to the domain, all the GP software starts to re-install itself
again!!
Does anyone know why this is happening or where the PC stores the
information that says "Yup, I have the GP software so I wont install it
again"
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
| | | |
|
|