<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>My Outer Monologue &#187; grouppolicy</title>
	<atom:link href="http://www.tomwaller.co.uk/blog/tag/grouppolicy/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.tomwaller.co.uk/blog</link>
	<description>The outer monologue of supergeek and gadget freak, Tom Waller.</description>
	<lastBuildDate>Fri, 27 Jan 2012 12:10:05 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Enterprise Deployment of Adobe Reader 9.4.0 with SCCM.</title>
		<link>http://www.tomwaller.co.uk/blog/enterprise-deployment-of-adobe-reader-9-4-0-with-sccm/</link>
		<comments>http://www.tomwaller.co.uk/blog/enterprise-deployment-of-adobe-reader-9-4-0-with-sccm/#comments</comments>
		<pubDate>Fri, 22 Oct 2010 09:08:27 +0000</pubDate>
		<dc:creator>Tom</dc:creator>
				<category><![CDATA[Deployment]]></category>
		<category><![CDATA[adobe]]></category>
		<category><![CDATA[deployment]]></category>
		<category><![CDATA[grouppolicy]]></category>
		<category><![CDATA[sccm]]></category>
		<category><![CDATA[software]]></category>

		<guid isPermaLink="false">http://www.tomwaller.co.uk/blog/?p=115</guid>
		<description><![CDATA[Now that we have a major new version of Adobe Reader in the form of 9.4.0, it's time to get busy and deploy the new software to your enterprise. This article is a refresher on how best to deploy the software to your enterprise in the most effective manner.]]></description>
			<content:encoded><![CDATA[<p>Now that we have a major new version of Adobe Reader in the form of 9.4.0, it&#8217;s time to get busy and deploy the new software to your enterprise. This article is a refresher on how best to deploy the software to your enterprise in the most effective manner.</p>
<p><span id="more-115"></span>Things you&#8217;ll need:</p>
<ul>
<li> <a title="Adobe Reader download page" href="http://www.adobe.com/products/reader/rdr_distribution1.html" target="_blank">The Adobe Reader 9.4.0 distributable package.</a></li>
<li>Some disk space.</li>
<li><a title="Adobe Customisation Wizard" href="http://www.adobe.com/support/downloads/detail.jsp?ftpID=3993">The Adobe Reader Customisation Wizard 9.</a></li>
<li>SCCM environment. (Although you can use this method for Group Policy Software Installation too).</li>
</ul>
<p>Go ahead and grab your Adobe Reader 9.4.0 installation <strong>EXE</strong>. The first thing we&#8217;ll need to do with this is extract the <strong>MSI </strong>installation from within it. This is a pretty straight forward task that can be achieved with the following command:</p>
<pre class="brush: plain; title: ; notranslate">&lt;path to&gt;\AdbeRdr940_en_US.exe -nos_o&quot;Reader940&quot; -nos_ne</pre>
<p>The <strong>-nos_o</strong> switch is the folder name to extract the files to. This will form your AIP (Administration Installation Point) and is what we will customise using the Adobe Customisation Wizard. The <strong>Adobe Reader 9.4.0 &#8211; Setup</strong> screen will extract the MSI into your specified folder (as shown below). The screen will disappear once extraction is complete.</p>
<p><a href="http://www.tomwaller.co.uk/blog/wp-content/uploads/ss_000002.jpg"><img class="aligncenter size-medium wp-image-118" title="Adobe Reader Extraction" src="http://www.tomwaller.co.uk/blog/wp-content/uploads/ss_000002-300x229.jpg" alt="Extracting the Adobe Reader installation" width="300" height="229" /></a></p>
<p>Once extracted, you will have your new AIP. It should look similar to my one below.</p>
<p><a href="http://www.tomwaller.co.uk/blog/wp-content/uploads/ss_000003.jpg"><img class="aligncenter size-medium wp-image-120" title="Adobe Reader 9.4.0 Administrative Installation Point" src="http://www.tomwaller.co.uk/blog/wp-content/uploads/ss_000003-300x226.jpg" alt="Adobe Reader 9.4.0 Administrative Installation Point" width="300" height="226" /></a></p>
<p>Now it&#8217;s time to customise your AIP. This is done using the <strong>Adobe Custmoisation Wizard</strong>. Install the application from the link provided above and you&#8217;ll find a new icon in <strong>Start &gt; All Programs</strong>. Run it and select <strong>File &gt; Open Package</strong>. Browse to the AIP you just created and select <strong>AcroRead.msi</strong>. You&#8217;ll then be presented with various categories down the left and options on the right. This is where the magic happens.</p>
<p><a href="http://www.tomwaller.co.uk/blog/wp-content/uploads/ss_000005.jpg"><img class="aligncenter size-medium wp-image-122" title="Adobe Customisation Wizard" src="http://www.tomwaller.co.uk/blog/wp-content/uploads/ss_000005-300x233.jpg" alt="Open your AIP in the Adobe Customisation Wizard" width="300" height="233" /></a><br />
At this point you can go through the categories on the left and customise at your leisure. To get you started, here are a few common items you may wish to customise.</p>
<ul>
<li>Run Installation: Silently</li>
<li>Suppress Reboot</li>
<li> Suppress display of End User License Agreement (EULA)</li>
<li>Hide Document Message bar</li>
<li>Disable all updates</li>
<li>Disable Help &gt; Digital Editions</li>
<li>Disable Product Improvement Program</li>
<li>Disable all Acrobat.Com access, including initiation and participation</li>
</ul>
<p>Once you have finished your customisations, select <strong>Transform &gt; Generate Transform</strong>.</p>
<p><a href="http://www.tomwaller.co.uk/blog/wp-content/uploads/ss_000006.jpg"><img class="aligncenter size-medium wp-image-123" title="Adobe Customisation Wizard" src="http://www.tomwaller.co.uk/blog/wp-content/uploads/ss_000006-300x262.jpg" alt="Generate transform" width="300" height="262" /></a></p>
<p>Save your transform to the AIP. You can now close the Adobe Customisation Wizard. Be sure to click <strong>No</strong> when prompted to save the package. We don&#8217;t want anything written to the original MSI. That completely goes against the idea of transform files.</p>
<p>Congratulations, you now have a customised Adobe Reader 9.4.0 installation which is ready for deployment.</p>
<p>Depending on your chosen deployment method, you can now create your SCCM package or Group Policy object using the files within your AIP. If you are using GPO deployment, you can use the <strong>AcroRead.msi</strong> file. Be sure to add the transform file in the <strong>Modifications </strong>tab so that the <strong>MSI </strong>file takes in your customisations.</p>
<p>If like me you have the benefit of SCCM in your environment, you&#8217;ll want to configure your package with a Program command line such as this:</p>
<pre class="brush: plain; title: ; notranslate">msiexec.exe /i &quot;AcroRead.msi&quot; TRANSFORMS=&quot;&lt;path to transform&gt;&quot; RebootYesNo=&quot;No&quot; Reboot=&quot;ReallySuppress&quot; /qb</pre>
<p>One thing to remember, with 9.4.0 being a major release, the installation will remove previous versions of Reader by default, so you don&#8217;t have to worry about running my removal script as <a title="Adobe Reader Enterprise Deployment" href="http://www.tomwaller.co.uk/blog/?p=45" target="_self">previously blogged</a>. Bonus. You&#8217;re now ready to deploy. Good luck!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.tomwaller.co.uk/blog/enterprise-deployment-of-adobe-reader-9-4-0-with-sccm/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Deploying Adobe Reader Updates in Enterprise Environments.</title>
		<link>http://www.tomwaller.co.uk/blog/deploying-adobe-reader-updates-in-enterprise-environments/</link>
		<comments>http://www.tomwaller.co.uk/blog/deploying-adobe-reader-updates-in-enterprise-environments/#comments</comments>
		<pubDate>Wed, 30 Jun 2010 13:03:13 +0000</pubDate>
		<dc:creator>Tom</dc:creator>
				<category><![CDATA[ConfigMgr]]></category>
		<category><![CDATA[Deployment]]></category>
		<category><![CDATA[Scripting]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[adobe]]></category>
		<category><![CDATA[deployment]]></category>
		<category><![CDATA[grouppolicy]]></category>
		<category><![CDATA[microsoft]]></category>
		<category><![CDATA[sccm]]></category>
		<category><![CDATA[scripting]]></category>
		<category><![CDATA[software]]></category>

		<guid isPermaLink="false">http://www.tomwaller.co.uk/blog/?p=45</guid>
		<description><![CDATA[Anyone who works with software deployments will know where I&#8217;m coming from on this. Adobe Reader has to be the single most time consuming piece of software when it comes to software packaging and distribution. With such a large user base and ever increasing targeted threats, it&#8217;s no wonder we find ourselves with critical updates [...]]]></description>
			<content:encoded><![CDATA[<p>Anyone who works with software deployments will know where I&#8217;m coming from on this. Adobe Reader has to be the single most time consuming piece of software when it comes to software packaging and distribution. With such a large user base and ever increasing targeted threats, it&#8217;s no wonder we find ourselves with critical updates to deploy. Often more than one a month.</p>
<p>The trouble with Adobe Reader updates is that they aren&#8217;t particularly easy to distribute. Sure, you can download the MSI installer from Adobe&#8217;s website and use the Adobe Customisation Wizard to create a neat little MST file to transform the install with all your company&#8217;s standard settings, but have you ever tried installing the new MSI over a previous version? Not so easy now huh.</p>
<p>For some unknown reason, Adobe engineer their Reader installations in such a way that simply deploying the new MSI isn&#8217;t enough. For instance, you can&#8217;t simply push out Adobe Reader 9.3.3 and hope that it updates all the previous 9.3.2 installations. You first have to uninstall all previous versions.</p>
<p>Adobe updates usually come in the form of MSP files. These files are designed to patch your existing installation points. It&#8217;s important to note that this is only the case for quarterly updates. Security updates cannot be used to patch your administrative installation point.</p>
<p>For this example, I&#8217;m going to patch my Adobe Reader 9.3.0 administrative installation point with the MSP for 9.3.3.</p>
<p>Oh but wait, another fly in the ointment. You can&#8217;t patch a 9.0 administrative point with 9.3.3 directly. You must follow this order of patching:</p>
<p>9.3.0 &gt; 9.3.2 &gt; 9.3.3</p>
<p>Start by downloading all of your files. You&#8217;ll need:</p>
<ul>
<li>Your 9.3.0 administrative point</li>
<li> AdbeRdrUpd932_all_incr.msp</li>
<li> AdbeRdrUpd933_all_incr.msp</li>
</ul>
<h3>Slipstreaming Updates into the Administrative Installation Point.</h3>
<p>Fire up a command line window, and run the following. This command will integrate your MSP with your installation point.</p>
<pre class="brush: plain; title: ; notranslate">msiexec.exe /a &quot;path to acroread.msi in admin point&quot; /p &quot;path to AdbeRdrUpd932_all_incr.msp&quot; /qb</pre>
<p>You&#8217;ll notice the installer wizard configuring your computer. Note that this is actually configuring your installation point, not your computer.</p>
<p>Repeat the above with the <strong>AdbeRdrUpd933_all_incr.msp</strong> file. You will now have an installation point with Adobe Reader 9.3.3 ready to roll.</p>
<h3>Deploying the Updated Version.</h3>
<p>If like me you have Microsoft System Center Configuration 2007 at your disposal, you can make use of my batch file script that I have created to remove all previous versions of Adobe Reader prior to installing the new 9.3.3 version. Simply set the script to run before the installation for Adobe Reader 9.3.3 and you should find the install takes place with no errors.</p>
<p>For the script to work fully, you&#8217;ll need to add the MSIZap executable into the same folder as the script. This can be downloaded for free as part of the Windows Installer Cleanup Utility <a title="Windows Installer Cleanup Utility" href="http://www.softpedia.com/get/Security/Secure-cleaning/Windows-Installer-CleanUp-Utility.shtml" target="_blank">(found here&#8230;)</a>. You only need msizap.exe for the script to work, forget about the other files. MsiZap is a very useful tool. Check out the command line syntax I use and experiment to your hearts content.</p>
<p>If you only have Group Policy at your disposal, I&#8217;m sure it wouldn&#8217;t be too hard to modify the script to call the install after the uninstalls have taken place. Hope this helps!</p>
<pre class="brush: vb; title: ; notranslate">REM *** MSI Uninstall Adobe Reader 6
msiexec.exe /x {AC76BA86-7AD7-1033-7B44-A00000000001} REBOOT=Supress /qn
REM *** MSI Uninstall Adobe Reader 7
msiexec.exe /x {AC76BA86-7AD7-1033-7B44-A70900000002} REBOOT=Supress /qn
REM *** MSI Uninstall Adobe Reader 8.0
msiexec.exe /x {AC76BA86-7AD7-1033-7B44-A80000000002} REBOOT=Supress /qn
REM *** MSI Uninstall Adobe Reader 8.1
msiexec.exe /x {AC76BA86-7AD7-1033-7B44-A81000000002} REBOOT=Supress /qn
REM *** MSI Uninstall Adobe Reader 8.1.4
msiexec.exe /x {AC76BA86-7AD7-1033-7B44-A81300000003} REBOOT=Supress /qn
REM *** MSI Uninstall Adobe Reader 9.0
msiexec.exe /x {AC76BA86-7AD7-1033-7B44-A90000000001} REBOOT=Supress /qn
REM *** MSI Uninstall Adobe Reader 9.1
msiexec.exe /x {AC76BA86-7AD7-1033-7B44-A91000000001} REBOOT=Supress /qn
REM *** MSI Uninstall Adobe Reader 9.2
msiexec.exe /x {AC76BA86-7AD7-1033-7B44-A92000000001} REBOOT=Supress /qn
REM *** MSI Uninstall Adobe Reader 9.3
msiexec.exe /x {AC76BA86-7AD7-1033-7B44-A93000000001} REBOOT=Supress /qn
REM *** Zap Uninstall Adobe Reader 6
&quot;%~dp0msizap.exe&quot; TW! {AC76BA86-7AD7-1033-7B44-A00000000001}
REM *** Zap Uninstall Adobe Reader 7
&quot;%~dp0msizap.exe&quot; TW! {AC76BA86-7AD7-1033-7B44-A70900000002}
REM *** Zap Uninstall Adobe Reader 8.0
&quot;%~dp0msizap.exe&quot; TW! {AC76BA86-7AD7-1033-7B44-A80000000002}
REM *** Zap Uninstall Adobe Reader 8.1
&quot;%~dp0msizap.exe&quot; TW! {AC76BA86-7AD7-1033-7B44-A81000000002}
REM *** Zap Uninstall Adobe Reader 8.1.4
&quot;%~dp0msizap.exe&quot; TW! {AC76BA86-7AD7-1033-7B44-A81300000003}
REM *** Zap Uninstall Adobe Reader 9.0
&quot;%~dp0msizap.exe&quot; TW! {AC76BA86-7AD7-1033-7B44-A90000000001}
REM *** Zap Uninstall Adobe Reader 9.1
&quot;%~dp0msizap.exe&quot; TW! {AC76BA86-7AD7-1033-7B44-A91000000001}
REM *** Zap Uninstall Adobe Reader 9.2
&quot;%~dp0msizap.exe&quot; TW! {AC76BA86-7AD7-1033-7B44-A92000000001}
REM *** Zap Uninstall Adobe Reader 9.3
&quot;%~dp0msizap.exe&quot; TW! {AC76BA86-7AD7-1033-7B44-A93000000001}</pre>
]]></content:encoded>
			<wfw:commentRss>http://www.tomwaller.co.uk/blog/deploying-adobe-reader-updates-in-enterprise-environments/feed/</wfw:commentRss>
		<slash:comments>9</slash:comments>
		</item>
	</channel>
</rss>

<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Minified using disk: basic (Feed is rejected)
Page Caching using disk: enhanced
Database Caching 5/15 queries in 0.273 seconds using disk: basic

Served from: www.tomwaller.co.uk @ 2012-02-06 16:16:07 -->
