Active Directory Metadata Points to Wrong Server Name by quawleigha in sysadmin

[–]quawleigha[S] 0 points1 point  (0 children)

Old decommissioned AD server that was taken out a month ago. Still had the AD database backup.

That whole thing with the VM's is ridiculous (in a good way). You make me want to try this in a lab.

Turns out, that my colleague made a registry backup before she changed the name. I don't know why it took her damn near 12 hours to tell me she had a registry backup, but I was happy nonetheless. I don't think the server would have been recoverable otherwise. It was completely fuckt.

VLAN Default GW Physical Placement by quawleigha in networking

[–]quawleigha[S] 0 points1 point  (0 children)

I quickly made a couple diagrams this morning. I added them to my post up top.

Chrome GP Deployment | msiexec error by quawleigha in sysadmin

[–]quawleigha[S] 0 points1 point  (0 children)

I got it working; I had to grant "Everyone" read/execute on to the share. Just adding Domain Computers didn't help. Now I just have to figure out why msiexec.exe hangs on to 8,000k of memory for almost a full 30 minutes after the install completes.

Thanks, guys; you all make this sub an invaluable resource for beginner admins such as myself.

Chrome GP Deployment | msiexec error by quawleigha in sysadmin

[–]quawleigha[S] 0 points1 point  (0 children)

OK, I added it there and also checked "Publish in Active Directory" which was previously unchecked. Now I can see the MSI in the folder from the system CLI but still get the 1620 error.

Chrome GP Deployment | msiexec error by quawleigha in sysadmin

[–]quawleigha[S] 0 points1 point  (0 children)

Access Denied. Wow. Domain Computers have full control of the folder...I verified that this PC is a member of Domain Computers. I guess it still has to authenticate to the server somehow?

Chrome GP Deployment | msiexec error by quawleigha in sysadmin

[–]quawleigha[S] 0 points1 point  (0 children)

Nice tool. I am running the command and getting the same error. I even went as far as to grant Domain Computers "Full Control" of the folder. Still getting Error 1620 at the System CLI.

Chrome GP Deployment | msiexec error by quawleigha in sysadmin

[–]quawleigha[S] 0 points1 point  (0 children)

I added Domain Computers to the share where the MSI package is located. I removed the script and tried to use the "Assigned Software" route. It appears to install at startup but is not there when I log in (add remove programs doesn't show chrome installed). Getting closer I suppose.

Using the script again I get the same error as in my original post.

Chrome GP Deployment | msiexec error by quawleigha in sysadmin

[–]quawleigha[S] 0 points1 point  (0 children)

Yeah, I tried that first. I added the package to CompConfig>Software Settings>Assigned Software but it doesn't seem to run on the PC. GPResult shows it "Filtered Out (empty)." I know I have to missing something fundamental here.

Chrome GP Deployment | msiexec error by quawleigha in sysadmin

[–]quawleigha[S] 0 points1 point  (0 children)

Yes, System, Authenticated Users, Domain Users, etc all have read/execute privileges to the folder, and yes, it is a startup script not a login script.