Using Group Policy to Remotely Install Steelhead Mobile Software This tech note describes how to use a Group Policy to automatically distribute Steelhead Mobile software to client computers. These instructions apply to Windows Server 2003 (Enterprise Edition). To use GPO to install Steelhead Mobile: 1. Log on to the server computer as an administrator. 2. Create a new, shared folder. This folder serves as the distribution point on the publishing server. Note: Shared folders with spaces may not work. Ensure the shared folder name does not contain any spaces. 3. Copy the Steelhead Mobile MSI package into this folder. You can download the MSI package using the URL provided in the Packages section of the Mobile Controller. 1 / RIVERBED CUSTOMER SUPPORT
In the Mobile Controller Management Console, click Manage Endpoints to expand the Manage Endpoints menu. Click Packages to display the Manage Endpoints - Packages page. A list of packages residing on the Mobile Controller displays. This list contains each package name, Steelhead Mobile Client software version, and the URL where clients can download the package. Click the URL for the MSI package and save it to the shared folder. 4. Add security to the folder. Right-click the shared folder and choose Properties. Click the Security tab. Click Add. Click Object Types and select Computers. 2 / RIVERBED CUSTOMER SUPPORT
Click OK. In the Enter Object Name field, type the name of the Windows 2003 server. Click Check Names to verify. Click OK. 5. From the Start menu, choose Manage Your Server. 6. In the Domain Controller (Active Directory) section, click Manage Users and Computers in Active Directory. 3 / RIVERBED CUSTOMER SUPPORT
The Active Directory Users and Computers console window appears. 7. Right click the domain controller and choose Properties. 4 / RIVERBED CUSTOMER SUPPORT
8. Choose the Group Policy tab and click New to add a new policy object link. If you prefer, you can also edit an existing policy. 9. Provide a meaningful name for the policy. This example uses Fiji Client Distribution. 5 / RIVERBED CUSTOMER SUPPORT
10. Select policy object link (Fiji Client Distribution) and click Edit. The Group Policy Object Editor opens. 11. In Computer Configuration, expand Software Settings. Note: Steelhead Mobile only supports deployments based on computer configuration. Steelhead Mobile does not support deployments based on user information. 12. Right click Software Installation and choose New > Package. An Open dialog box appears. 13. Specify the server path to the MSI package and select the shared folder and the MSI package. 6 / RIVERBED CUSTOMER SUPPORT
For example: \\mv-cs2\share_install\steelheadmobile.msi Important: This must be the network path of the shared folder you created (not a local path). Note: Riverbed has seen cases in the test lab where server IP addresses didn't work. Use the full server name for the path and ensure that DNS/WINS is fully operational. 14. Click Open. You are prompted to select the deployment method. 7 / RIVERBED CUSTOMER SUPPORT
15. Select Assigned and click OK. When a member of the domain reboots, the Steelhead Mobile Client software will be installed. Gathering Debugging Information if GPO Installation Fails A critical part of debugging a failed GPO installation is to enable MSI logging. The GPO install process supports a narrow range of GPO configuration options. The client provides useful error messages if it doesn t support an installation option. For example, Steelhead Mobile must be installed on the computer for all users rather than a specific user (ALLUSERS=1). In addition, the user running the installer must have administrative privileges. You can use regedit to set an entry to produce a log file for the MSI installation. In regedit, set the following entry: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer Reg_SZ: Logging Value: voicewarmup This produces a log file named in the format: C:\windows\temp\Msi*.log The other log files that help diagnose problems are: C:\windows\temp\sh_mobile.log sh_mobile.log.old dneinst.log dneinst.log.backup dneca.log dneca.log.backup It also may be helpful to get any relevant diagnostic message that the event viewer gathers. You can collect them here: Computer Management > System Tools > Event Viewer. Complete instructions for enabling MSI logging are available here: http://support.microsoft.com/kb/314852/ 8 / RIVERBED CUSTOMER SUPPORT
Riverbed Technology, Inc. 199 Fremont Street San Francisco, CA 94105 Tel: (415) 247-8800 www.riverbed.com Riverbed Technology Ltd. UK 200 Brook Drive, Green Park Reading RG2 6UB United Kingdom Tel: +44 118 949 7002 Riverbed Technology Pte. Ltd. 350 Orchard Road #21-01/03 Shaw House Singapore 238868 Tel: +65 68328082 Riverbed Technology K.K. Shibuya Mark City W-22F 1-12-1 Dogenzaka, Shibuya-ku Tokyo Japan 150-0043 Tel: +81 3 4360 5357 2007 Riverbed Technology, Inc. All rights reserved. Riverbed Technology, Riverbed, Steelhead and the Riverbed logo are trademarks or registered trademarks of Riverbed Technology, Inc. Portions of Riverbed s products are protected under Riverbed patents, as well as patents pending. 9 / RIVERBED CUSTOMER SUPPORT