Deploying MSI or BAT file via VPN using GPO issues

spiceuser-z3ey8 · 2022-02-15T14:51:28.000Z

Hi, long time forum viewer, first time poster…

We have a small software app (which is an MSI file) to deploy across our user base of around 50 Windows 10 devices.

For those on the domain that’s been a pretty painless task of deploying via GPO as normal. However we (like most businesses) have a large part of our work force working remotely at present via our VPN which is where we’re getting a little stuck.

Our VPN is a software based solution which loads post login, so if we try and deploy the MSI using GPO it sits in a loop of “reboot required” as the login scripts run before the domain is visible over the VPN. We’re unable to run our VPN as “always on” and setting “wait for network” or a very long timeout it doesn’t resolve this unfortunately.

So for plan B I have used GPO to create a folder on the local PC and then another GPO task to copy down the MSI file. That element works and from there I’ve also added a third task within that GPO which copied down a .BAT file which runs a simple MSIEXEC task to install the file alongside a text file output to avoid the app install process being run again. I had hoped that adding a scheduled task would run this batch file but the scheduled tasks don’t appear to be working and doesn’t error within Event Viewer either. I’ve setup all these tasks under Computer Configuration within GPO (using Server 2008 R2, I know it is on the list to upgrade!).

The scheduled task simply has the run set to: C:\Folder\Installer.bat (simplified for example) and Start In is set to: C:\Folder\

Copying the files down to the local PC from our network share I used C:\Folder\ as the format but I don’t know if I need to add \LocalHost\ or similar before C:\ for the scheduled task?

I’m sure I am missing something obvious here but it’s been a good minute since I last had to roll apps out over a VPN and my memory is clearly more fuzzy than I thought!

Thanks in advance,

Internet_Schneider · 2022-02-15T15:48:59.000Z

You are making things complicated. Have you tried PDQ Deploy to deploy your applications? Its pretty easy to do this.

spiceuser-z3ey8 · 2022-02-15T15:57:21.000Z

That does happen on occasion

I have looked at PDQ Deploy but this is (I hope) a one time requirement before we progress with various system upgrades. I’m sure it is a great tool but I was hoping to be able to push out the file and run the installer without too much further involvement at this stage.

Cheers for the reply,

joseespitia · 2022-02-15T17:07:10.000Z

You should turn on logging with MSIEXEC by adding the following to your MSIEXEC command: /l*v “Path to your log.log”

Once that is done, try manually running the scheduled task and review your logs.