Internet Explorer

The extension for the Apty Assist Client and Apty Gazer is provided to the customers as an installable MSI file. The MSI needs to be installed by all the users but this can also be done by the system admins for mass installation. This step-by-step article describes how to use Group Policy to automatically distribute programs to client computers or users. You can use Group Policy to distribute computer programs by using the following methods: 

Assigning Software
You can assign a program distribution to users or computers. If you assign the program to a user, it is installed when the user logs on to the computer. When the user first runs the program, the installation is completed. If you assign the program to a computer, it is installed when the computer starts, and it is available to all users who log on to the computer. When a user first runs the program, the installation is completed.
Publishing Software
You can publish a program distribution to users. When the user logs on to the computer, the published program is displayed in the Add or Remove Programs dialog box, and it can be installed from there.


This article covers the instructions on how to:

To create a distribution point

To publish or assign a computer program, you must create a distribution point on the publishing server. To do this, follow these steps:

  1. Log into the server as an Administrator.
  2. Create a shared network folder where you will put the Microsoft Windows Installer package (.msi file) that you want to distribute.
  3. Set permissions for sharing to allow access to the distribution package.
  4. Copy or install the package to the distribution point. For example, to distribute Microsoft Office XP, run the administrative installation (setup.exe /a) to copy the files to the distribution point.

To create a Group Policy Object

To create a Group Policy Object (GPO) to distribute the software package, follow these steps: 

  1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In the console tree, right-click your domain, and then click Properties.
  3. Click the Group Policy tab > New.
  4. Type a name for this new policy (for example, Office XP distribution), and then press Enter.
  5. Access Properties > Security tab.
  6. Clear the Apply Group Policy check box for the security groups that you don't want this policy to apply to. Alternatively, select the Apply Group Policy check box for the groups that you want this policy to apply to.
  7. Once all the required settings have been defined, click OK.

To assign a package

To assign a program to computers that are running Windows Server 2003, Windows 2000, or Windows XP Professional, or to users who are logging on to one of these workstations, follow these steps:  

  1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In the console tree, right-click your domain, and then click Properties.
  3. Click the Group Policy tab > Edit.
  4. Under Computer Configuration, expand Software Settings.
  5. Right-click Software installation, point to New and then click Package.
  6. In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example, \\file server\share\file name.msi.

  7. Click Open.
  8. Click Assigned > OK. The package is listed in the right-pane of the Group Policy window.
  9. Close the Group Policy snap-in, click OK, and then close the Active Directory Users and Computers snap-in.
  10. When the client computer starts, the managed software package is automatically installed.

To publish a package

To publish a package to computer users and make it available for installation from the Add or Remove Programs list in Control Panel, follow these steps: 

  1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In the console tree, right-click your domain, and then click Properties.
  3. Click the Group Policy tab > Edit.
  4. Under User Configuration, expand Software Settings.
  5. Right-click Software installation, point to New, and then click Package.
  6. In the Open dialog box, type the full UNC path of the shared installer package that you want. For example,
    \\file server\share\file name.msi.

  7. Click Open.
  8. Click Publish, and then click OK.
  9. The package is listed in the right-pane of the Group Policy window.
  10. Close the Group Policy snap-in, click OK, and then close the Active Directory Users and Computers snap-in.
  11. Test the package.

To auto Enable Remote Extension Installation

With the latest update on IE any third party add-ons do not auto enable directly once we deploy them remotely.  There are few settings that needs to configured to avoid users from enabling or disabling any add-on. There are two methods that can be used for this process:

Method 1: Using Group policy Editor:

  1. Type gpedit.msc in RUN or Start search box and press Enter. The Group Policy Editor opens.
  2. Navigate to following path: Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer
  3. In right-side pane, double-click the Automatically activate/enable newly installed add-ons" option and set it to Enabled.
  4. Applying this setting permanently disable the popup notification message in the Internet Explorer.


Method 2: Using Registry Editor(regedit)

  1. Type regedit in RUN or Start search box and press Enter. The Group Policy Editor opens.
  2. Now go to following key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\
  3. Create a new key under Policies key and set its name to "Ext"
  4. Now select the new "Ext" key and in right-side pane, create a new DWORD IgnoreFrameApprovalCheck and set its value to 1.


To redeploy a package

In some cases, you may want to redeploy a software package (for example, if you upgrade or change the package). To redeploy a package, follow these steps:  

  1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In the console tree, right-click your domain, and then click Properties.
  3. Click the Group Policy tab > Group Policy Object that you used to deploy the package > Edit.
  4. Expand the Software Settings container that contains the software installation item that you used to deploy the package.
  5. Click the software installation container that contains the package.
  6. In the right-pane of the Group Policy window, right-click the program, point to All Tasks, and then click Redeploy application. The following message is displayed: Redeploying this application will reinstall the application everywhere it is already installed. Do you want to continue?
  7. Click Yes.
  8. Quit the Group Policy snap-in, click OK, and then close the Active Directory Users and Computers snap-in.

To remove a package

To remove a published or assigned package, follow these steps:  

  1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In the console tree, right-click your domain, and then click Properties.
  3. Click the Group Policy tab > Group Policy Object that you used to deploy the package > Edit.
  4. Expand the Software Settings container that contains the software installation item that you used to deploy the package.
  5. Click the software installation container that contains the package.
  6. In the right-pane of the Group Policy window, right-click the program, point to All Tasks, and then click Remove.
  7. Do one of the following:
    • Click Immediately uninstall the software from users and computers, and then click OK.
    • Click Allow users to continue to use the software but prevent new installations, and then click
      OK.
  8. Close the Group Policy snap-in, click OK, and then closet the Active Directory Users and Computers snap-in.


Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.