How to install a software only for certain users across domain?

Question

How to install a software only for certain users across domain?

Majid 26

Anybody know if I can install a software for only certain users in AD so that they can see the software upon they login and rest of users cannot see the software when they login?
I used a GPO for enforcing a software installation but all users can see it after logging in. I want to install the software for certain users across my domain.

2 answers

Your answer

Answer 1

Thameur-BOURBITA 36,261 Moderator

Hi,

It's not possible through GPO.

You have to use another like SCCM to perform this kind of software deployment.

Please don't forget to mark helpful reply as answer

Majid 26 Reputation points

2021-10-07T16:14:49.737+00:00

Thanks for your reply. It seems that it's not a free product. Is there any free alternative, preferably on cloud, to manage software deployment on user accounts?

Answer 2

Eirik Hamer 81

Yes you can! The easiest way is to make sure you add the install to the "User Configuration" part of a new GPO. If you have loopback processing active then you can also use "Computer Configuration", but let's use User for now.

The important step that you have probably missed is to set security filtering. If you use GPMC you select the GPO in the left pane and choose the Scope tab in the right. By default every GPO has "Authenticated Users", but in your case you should remove this group and add users, or preferably a group, instead.

Last, you have to link the GPO to the OU where your users are placed.

Hope this helps.

Majid 26 Reputation points

2021-10-07T15:48:28.96+00:00

Thanks for your response. I added the installer to "User Configuration" instead of "Computer Configuration" and also applied the group to security filtering under "Scope" tab. However, the user cannot detect the new GPO while all users, including the specific user, can detect it when I choose "Authenticated users" in the security filtering under "Scope" tab. It seems that when I change the security filtering from authenticated users to my desired group, the GPO does not apply to the group of my interest.
Any idea?
Eirik Hamer 81 Reputation points

2021-10-07T19:52:17.45+00:00

Did you also follow the last step and link the GPO to the OU where the user is placed?
Majid 26 Reputation points

2021-10-07T20:07:06.993+00:00

Yes, I did.
Eirik Hamer 81 Reputation points

2021-10-07T20:42:24.84+00:00

That's odd...
But I am curious: Does the OU where it is linked also contain the group that you have chosen for the security filtering? If not, could you link the OU higher so it includes the group and see it that changes anything? If so, I have learned something new today myself.

When you create a software install for user, the default is to publish it, as opposed to assign which is the only option for computer. That means it will just be available for install in programs and features. To make the software install automatically you have to choose assign.

I assume you have run gpupdate or logged off and on after changing the gpo?

Share via

How to install a software only for certain users across domain?

2 answers

Your answer