1

Hello,

I have a VPN package .msi file I want to deploy via GPO and a VPN users AD group. What is the proper way to deploy this to only the users that are a member of the VPN users group?

All of our desktops/laptops have their own OU by location.

Thanks!

2 Spice ups
2

Assuming that you are not giving your users Administrative rights I would imagine you will need to break out the computers into a security group for VPN users, apply the GPO to the new Computer Security group.

This is why I have become a huge fan of the ManagedBy attribute in AD, if you are are using this, would would be able to script the creation of this group with power shell, less manual labor

3

I would create a security group for the VPN group (‘VPN users’ or something) then in the GPO set the scope to apply to that group only. (Scope tab > Security Filtering box.)

Also make sure that the GPO is set up only for this MSI install and not other settings or other users will start to complain when things go wrong (assuming they notice).

4

Select the linked GPO in the Group Policy Objects node, go to the Scope tab, and in the Security Filtering group add the user groups on whose computers the package should be installed.

This guide describes how to use Group Policy to deploy packages