Chapter 9

This chapter covered how to install software through group policy. Like much of the content of MOAC courses, alot of this was covered in CIS-256. Essentially, group policy can be used to install, modify or uninstall programs across a network using Win 2008. MSI files are those that perform this function. Some software does not allow for changes to MSI files, so these can be changed with what's called transform software to allow deployment via group policy. Software can be either published or assigned using GP deployment. Assigned programs are individually given to a specific user or machine, whereas published software is available to everyone on the network to download and install if they have need of it. It also functions in that if a user attempts to open a file with an extension on it requiring a specific application, it can automatically install to allow the file to be used by the end user.Software restriction policies can be set on software, allowing the admin to disallow programs of certain kinds to function on the computer. This includes rules for software publishers, hash, certificate, network zone and path rules.