Score:4

Best practice on deploying MSIs via group policies: from dedicated share or from the AD itself?

cn flag

For years I have been using GPOs to install MSIs to our Windows clients. All MSIs resided under a single \\fileserver\share, with a GPO assigned to each MSI for installation. Currently, out AD servers are Windows Server 2019 systems (DFS-R for replication).

Since we have a number of remote offices that had had local AD servers, I was wondering whether it would be better to change my approach: throw each MSI into the GPOs special directory, in order for it to replicate to the other AD servers (if I understand correctly this is not "DFS namespaces", whatever that is). This way I'd avoid overloading the network connections of each branch office, since instead of having the same MSI being downloaded for each client in the branch, the client would get the package directly from the local AD server. The handicap here is that I would burden the AD replication with having to include some rather large packages (LibreOffice for example at half a gig).

Is using the AD builtin replication functionlity for this purpose a viable approach, or is it discouraged for some technical reason?

Score:4
cn flag

Generally, SYSVOL should be avoided as a file share for deployments. The share is required for AD to function, and combining it with other uses can lead to situations where there is an outage.

Exceptions may include the installer for your Configuration Management solution or RMM tool to provide minimal management functionality when an endpoint is brought online.

Separate file server is preferred.

Score:2
cv flag

I use the NETLOGON share for deploying software and personally don't see a problem with doing that.

If replication traffic is a concern, dump your installers there after hours. Half a gig is miniscule.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.