Updating Settings using Windows Group Policy

A Windows domain administrator can update the settings on deployed Validation Clients on PCs in a domain using Microsoft Windows Group Policy features.

Initial Settings Update

The procedure for initially deploying settings updates is similar to the initial software distribution procedure using Windows group policy described in section Distributing Software Using Windows Group Policy.

To update settings using Windows Group Policy for the first time, complete the following steps:

  1. Create a settings installer with the desired configuration changes, as described in Chapter Deploying the Validation Client and save the custom .msi file in a network share accessible by all computers in the domain (for example, \\server\swdistribution_share\csvc).

    Note: HID Global recommends that you track setting changes by incorporating a version number or date in the settings installer file name.

  2. Open Microsoft Management Console with the Group Policy snap-in. Be sure to select Default Domain Policy.

  3. To deploy settings updates to individual domain users, expand User Configuration and Software Settings. To deploy settings updates to all users on computers in the domain, expand Computer Configuration and Software Settings.

  4. Right click Software Installation and select New and Package.

    The standard Windows Open dialog box will appear.

  5. Select the network share through My Network Places. This will use the UNC path to the installer file rather than a drive letter. The latter will fail.

    Select the settings installer that you want to install on the computers in the domain.

  6. Click Open. The Deploy Software dialog box will appear.

  7. Make sure that the deployment method is Assigned and click OK.

    The changes will be deployed to all users or computers that you have selected. Changes for individual users will be made when each user logs in. Changes for computers will be made when each computer is restarted.

Additional Settings Updates

Unlike the initial settings deployment, deployment of subsequent changes using Windows group policy requires that the new settings installer be configured to replace the existing settings installer.

To deploy a new settings installer that replaces an existing settings installer, complete the following steps:

  1. Create the new settings installer with the desired configuration changes, as described in Chapter Deploying the Validation Client and save the custom .msi file in a network share accessible by all computers (for example, \\server\swdistribution_share\csvc).

    Be sure to use a new file name when creating the new settings installer.

  2. Open Microsoft Management Console with the Group Policy snap-in. Be sure to select Default Domain Policy.

  3. To deploy settings updates to individual domain users, expand User Configuration and Software Settings. To deploy settings updates to all users on computers in the domain, expand Computer Configuration and Software Settings.

  4. Right click Software Installation and select New and Package.

    The standard Windows Open dialog box will appear.

  5. Select the network share through My Network Places. This will use the UNC path to the installer file rather than a drive letter. The latter will fail.

    Select the settings installer that you want to install on the computers in the domain.

  6. Click Open. The Deploy Software dialog box will appear.

  7. Make sure that the deployment method is Advanced and click OK. The Properties tabbed dialog box for the software package will appear.

  8. Open the Upgrades tab and click Add.

    The Add Upgrade Package Dialog appears.

  9. Choose Current Group Policy Option (GPO), select the previously deployed settings installer, and choose Uninstall the existing package, then install the upgrade package and click OK.

    Note: Settings installers are not designed to use the Package can upgrade over the existing package option

  10. On the Upgrades tab, click OK.

    The Microsoft Management Console Group Policy snap-in window shows that the next version of settings is ready to be installed on each computer in the domain.

    The changes will be deployed to all users or computers that you have selected. Changes for individual users will be made when each user logs in. Changes for computers will be made when each computer is restarted.