Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just followed How to use Group Policy to remotely install software in Windows Server 2003 to try publishing a software (MSI file). I could follow all the steps, but the supposedly successfully published software does not appear on client/user machine's Add/Remove Programs.

Could some help figure why this may not be working.


On reading this question on Experts-Exchange, tried gpresults. Output extract follows:


The following GPOs were not applied because they were filtered out
        Filtering:  Denied (Security)

    Default Domain Policy
        Filtering:  Denied (Security)
share|improve this question

migrated from May 3 '10 at 14:04

This question came from our site for professional and enthusiast programmers.

Have you tried forcing the policy on the ou? You may have another policy that is blocking the application of the policy. I'm assuming that the XADistribution policy is the one containing your package? Once done you can force replication(assuming more than one domain controller) and then force a group policy update with the gpupdate /force command. You can then rerun gpresult to see if the policy is being applied. With that in place I believe a reboot would be necessary to initiate the package installation.

share|improve this answer

Group Polices have security permissions. There is permission for "apply group policy" that you have to check for users/groups that you want the Group Policy to apply to. You get to the security settings throe the property button on the Group Policy tab.

share|improve this answer

The GPResult output suggests that the target computer account doesn't have permission to the software deployment policy object you created.

The target account(s) (i.e. computer accounts, in your case) need both Read and Apply Group Policy permissions, in the security settings for the GPO you've created.

Note also that if the installation isn't silent (i.e. displays UI) and you've not created a silent installation MST for it, it'll hang the computer when it boots (while waiting for invisible user input), for 15/30 minutes.

share|improve this answer

to publish a software put it under the "user"-tree. to force a software to be installed put it under "computer"-tree.

may you choose the wrong path when you are clicking the gpo together.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.