Windows – Managing applications like Acrobat Reader and Flash player via Windows GPO

adobegroup-policywindows

Without using additional software, how are people managing software like Acrobat Reader and Flash Player in a Windows domain? I can deploy these applications via GPO software installation. Am I looking at creating my own .msi packages and updating my policies manually for every update?

I can certainly get started and have something working pretty quickly, but I want to see if anyone has any advice that might be helpful first.

Best Answer

To speak to Flash Player in particular: You can obtain an MSI from Adobe through a licensing program. Have a look at: http://www.adobe.com/products/players/fpsh_distribution1.html

I regularly install Adobe Reader, Flash, Apple QuickTime, and others using GPO-based installations. When new versions are released, I deploy the new versions as mandatory upgrades.

You should take some time to learn about Windows Installer and building your own packages. You can use repackaging tools, but the best results, in my expereience, come from learning how to use tools like WiX (http://wix.sourceforge.net/) to create your own packages from the ground up. Repackaging tools create "dumb" MSIs that don't necessarily do what the original SETUP author wanted. An intelligent human repackager tries to learn what the SETUP author wanted to do and creates a package that does that.

At the very least, you need a tool like ORCA allow you to create Transform files (MST) for existing packages, and enough of an understanding of Windows Installer to allow you to intelligently create MST files.

I've had really good luck with managing software this way. It's been a big win with my Customers for efficiency, and has been a great differentiator of my services. I highly recommend it.