Quantcast
Channel: Configuration Manager 2012 - Application Management forum
Viewing all articles
Browse latest Browse all 4762

GPUpdate /force in Task Sequence as current logged on user

$
0
0

Hi,

I am currently trying to "upgrade" around 800 installations of Microsoft Office Standard 2010 to Microsoft Office 2010 Professional Plus. To do this, I'll have to:

1: Install Office 2010 ProPlus
2: Uninstall Office 2010 Standard
3: Repair Office 2010 ProPlus

Due to these steps, I've decided to make a task sequence to do the magic.
So far, so good, the "upgrade" is installing, and the MAP toolkit reports are showing the correct results from my test lab.
During the repair of Office 2010 ProPlus, the Office applications cannot run, so I've created a task to copy a custom group policy to %systemroot%\System32\GroupPolicy to deny the affected users to start the applications.

After applying the group policies, I manually run a gpupdate /force on my test computer. The applications are not starting. Also - so far so good.

Ok, so here is my challenge:
Since the Task Sequence is running in context of the SYSTEM account, the applied group policy will not refresh the GPO's of the current logged on user. Meaning; during the installation / repair of Office 2010, the user can open all the applications regardless of the applied GPO's, and I'd very much like to avoid that. The TS will fail otherwise. Yes, I know I can perform a restart to apply the policies, but I'd like to avoid that as well.

Any idea how can I solve this?


Viewing all articles
Browse latest Browse all 4762

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>