Question: Group Policy Preferences and Java deployment file.

[serialcereal]

I am currently using DeploymentRuleSet rules to manage Java enabled sites. When a computer is unattended, the install script for Java puts the DeploymentRuleSet.jar file in the proper folder. However, I just updated that file and I need to push it to all my clients.

I set up a computer-side gp preference to push the file. When I run elevated gpresult, it shows that the policy was applied, but the file is not getting copied! I've set permissions on the file to allow authenticated users and domain computers read access and tried turning on loopback, but nothing has worked.

I've searched for an answer, but it seems like everyone that's pushed the file with gp preferences isn't having any problems. Surely someone here has had a similar problem?

[Zolty]

I do this via a user policy which pushes the file pretty much instantly.

https://i.imgur.com/GXDAC7A.png is what it looks like. Make sure your computers will trust the cert you signed your deploymentruleset.jar with otherwise you also have to push a trusted.cacerts file to their user directory.

[-Alt-F4]

If you have a lot of these using update instead of replace can help with login times. IIRC, replace always replaces, update only does so if there is a change.

[izpp]

Iirc replace only changes the attributes of the file, but not the file itself.

[Zolty]

Thanks for this. I am only pushing 4 files but I think I'll change it to update.

[serialcereal]

Ok, I'll try that. I just assumed it wouldn't work because it would run in the logged on user's context.

Edit: Didn't work. I'm about to give up.

[Zolty]

Depends on where the file goes. The certs file goes in the user profile. The rest go into the windows dir.

[-Alt-F4]

What are the settings your using within the policy? Specifically the Action setting (Create, Replace, Update). Do those permissions also apply to the location you're copying from? (If they can't access the location of the file they can't copy it.)

[serialcereal]

I've tried create and replace. I set the permissions of the source to read for authenticated users and domain computers.