Deploying BES client to computers via GPO

system · March 29, 2011, 10:34pm

Hi,

I’m trying to automate the deployment of BES clients via a Computer Startup Script in a GPO.

My environment is very spread over Land and Sat links so my logic is to have the clients try to get the client from the nearest domain controller.

I’ve created a vbs script that will check if the computer is a server or not, and then it will create a folder in the c drive called BF.

After that it will try to connect to \domain.local\SYSVOL\domain.local\scripts\bigfix\msi to copy the BESClientMSI.msi to the local computer.

Then it runs msiexec to install the BESClientMSI.msi /qn

Once done, it will remove the BF directory along with what it copied there.

Now. The deal here is that it isn’t working.

Am I wrong in thinking that the system account can connect to the domain SYSVOL folder on a domain controller and thus the reason for my script not working?

Thanks in advance.

system · March 30, 2011, 10:06pm

(imported comment written by MattBoyd)

Can you be more specific about what part isn’t working? It sounds like the file isn’t getting copied. Is that correct?

If the SYSTEM account cannot access the share, you could try adding READ permission for the “Domain Computers” security group to the share/folder.

Personally, I would create a DFSR namespace and replication group, replicate the installer to each domain controller instead of using the SYSVOL share. It seems like that would be safer. I’m not sure if that’s an option for you though, and DFSR can sometimes be a pain in the…