Installing MSI Before User Logon

group-policy

I have a requirement to install a MSI's to our workstations before logon, it's periodically updated and provides updates to our LOB applications.

The problem we are encountering is when setting logon scripts in Group Policy (We wrap the MSI in a VBS installer script to handle machine prep etc.) the users are logging in and launching the LOB application before the MSI is updated. We have seen delays of up to five minutes before the Group Policy script runs.

Any ideas on how we can ensure the MSI is installed prior to user logon?

Best Answer

This can dramatically slow down logons (as expected), but you can force all logon scripts to run before giving a desktop with the GPO policy User Configuration\Administrative Templates\System\Scripts\Run logon scripts synchronously

enter image description here

See http://technet.microsoft.com/en-us/library/cc975925.aspx for more details