Internet Explorer

The extension for the Apty Assist Client is provided to the customers as an installable MSI file. The MSI needs to be installed by all the users but this can also be done silently by the system admins for mass installation. This step-by-step article describes how to use Group Policy to automatically distribute programs to client computers or users. You can use Group Policy to distribute computer programs by using the following methods: 

  • Assigning Software
    You can assign a program distribution to users or computers. If you assign the program to a user, it is installed when the user logs on to the computer. When the user first runs the program, the installation is completed. If you assign the program to a computer, it is installed when the computer starts, and it is available to all users who log on to the computer. When a user first runs the program, the installation is completed.
  • Publishing Software
    You can publish a program distribution to users. When the user logs on to the computer, the published program is displayed in the
    Add or Remove Programs dialog box, and it can be installed from there.
     

Create a distribution point

To publish or assign a computer program, you must create a distribution point on the publishing server. To do this, follow these steps:

 

  1. Log on to the server as an administrator.
  2. Create a shared network folder where you will put the Microsoft Windows Installer package (.msi file) that you want to distribute.
  3. Set permissions on the share to allow access to the distribution package.
  4. Copy or install the package to the distribution point. For example, to distribute Microsoft Office XP, run the administrative installation (setup.exe /a) to copy the files to the distribution point.

Create a Group Policy Object

To create a Group Policy Object (GPO) to distribute the software package, follow these steps: 

  1. Start the Active Directory Users and Computers snap-in. To do this, click "Start", point to Administrative Tools, and then click "Active Directory Users and Computers"
  2. In the console tree, right-click your domain, and then click "Properties".
  3. Click the "Group Policy" tab, and then click
    "New".
  4. Type a name for this new policy (for example,
    Office XP distribution), and then press Enter.
  5. Click "Properties", and then click the
    "Security tab".
  6. Clear the Apply Group Policy check box for the security groups that you don't want this policy to apply to. 
  7. Select the Apply Group Policy check box for the groups that you want this policy to apply to.
  8. When you are finished, click
    OK.

Assign a package

To assign a program to computers that are running Windows Server 2003, Windows 2000, or Windows XP Professional, or to users who are logging on to one of these workstations, follow these steps:  

  1. Start the Active Directory Users and Computers snap-in. To do this, click "Start", point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In the console tree, right-click your domain, and then click "Properties".
  3. Click the "Group Policy" tab, select the policy that you want, and then click "Edit".
  4. Under Computer Configuration, expand
    Software Settings.
  5. Right-click Software installation, point to New and then click Package.
  6. In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example, \\file server\share\file name.msi.

  7. Click Open.
  8. Click Assigned, and then click
    OK. The package is listed in the right-pane of the Group Policy window.
  9. Close the Group Policy snap-in, click
    OK, and then close the Active Directory Users and Computers snap-in.
  10. When the client computer starts, the managed software package is automatically installed.

Publish a package

To publish a package to computer users and make it available for installation from the Add or Remove Programs list in Control Panel, follow these steps: 


  1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In the console tree, right-click your domain, and then click Properties.
  3. Click the Group Policy tab, click the policy that you want, and then click Edit.
  4. Under User Configuration, expand
    Software Settings.
  5. Right-click Software installation, point to New, and then click Package.
  6. In the Open dialog box, type the full UNC path of the shared installer package that you want. For example,
    \\file server\share\file name.msi.

  7. Click Open.
  8. Click Publish, and then click
    OK.
  9. The package is listed in the right-pane of the Group Policy window.
  10. Close the Group Policy snap-in, click OK, and then close the Active Directory Users and Computers snap-in.
  11. Test the package.

Auto Enable Remotely Install Extension

With the latest update on IE any third party add-Ons do not auto enable directly once we deploy them remotely.  There are few settings that needs to configured to avoid users from enabling or disabling any add-On.There are two methods that can be used for this process.

Method 1- Using Group policy Editor:

  1. Type gpedit.msc in RUN or start search box and press Enter. It'll open Group Policy Editor.
  2. Navigate to following path: Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer
  3. In right-side pane, double-click on "Automatically activate/enable newly installed add-ons" option and set it to Enabled.
  4. Applying this setting permanently disable the popup notification message in Internet Explorer.

Method 2- Using Registry Editor(regedit)

  1. Type regedit in RUN or start search box and press Enter. It'll open Registry Editor.
  2. Now go to following key:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\
  3. Create a new key under Policies key and set its name to Ext
  4. Now select the new "Ext" key and in right-side pane, create a new DWORD IgnoreFrameApprovalCheck and set its value to 1.



Redeploy a package

In some cases, you may want to redeploy a software package (for example, if you upgrade or change the package). To redeploy a package, follow these steps:  

  1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In the console tree, right-click your domain, and then click Properties.
  3. Click the Group Policy tab, click the Group Policy Object that you used to deploy the package, and then click Edit.
  4. Expand the Software Settings container that contains the software installation item that you used to deploy the package.
  5. Click the software installation container that contains the package.
  6. In the right-pane of the Group Policy window, right-click the program, point to All Tasks, and then click Redeploy application. You will receive the following message:Redeploying this application will reinstall the application everywhere it is already installed. Do you want to continue?
  7. Click Yes.
  8. Quit the Group Policy snap-in, click OK, and then close the Active Directory Users and Computers snap-in.

Remove a package

To remove a published or assigned package, follow these steps:  

  1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In the console tree, right-click your domain, and then click Properties.
  3. Click the Group Policy tab, click the Group Policy Object that you used to deploy the package, and then click Edit.
  4. Expand the Software Settings container that contains the software installation item that you used to deploy the package.
  5. Click the software installation container that contains the package.
  6. In the right-pane of the Group Policy window, right-click the program, point to All Tasks, and then click Remove.
  7. Do one of the following:
    • Click Immediately uninstall the software from users and computers, and then click OK.
    • Click Allow users to continue to use the software but prevent new installations, and then click
      OK.
  8. Close the Group Policy snap-in, click OK, and then closet the Active Directory Users and Computers snap-in.

Troubleshoot

Published Packages Are Displayed on a Client Computer After You Use a Group Policy to Remove Them

This situation can occur when a user has installed the program but has not used it. When the user first starts the published program, the installation is finished. Group Policy then removes the program.


Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.