Windows XP and Server Security
Home > Ask the Security Experts > Application Security Questions & Answers > How should I deploy applications to over 100 desktops in my Windows 2003 environment?
Ask The Security Expert: Questions & Answers
EMAIL THIS

How should I deploy applications to over 100 desktops in my Windows 2003 environment?

Michael Cobb EXPERT RESPONSE FROM: Michael Cobb

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 01 August 2006
I would like to deploy applications (Office XP, Acrobat reader, etc.) over the network to about 100+ desktops in a Windows 2003 environment. Since the desktops are going to stand alone, I do not have AD/SMS services installed. Do you have any recommendations for me before I begin this task?

>
EXPERT RESPONSE
The first step in any deployment process is to make sure that you have enough licenses for the software that you are installing. Next, back up any critical data that resides on the desktop. If you are installing a Windows service pack, you should also check for application compatibility using the Microsoft Windows Application Compatibility Toolkit. It's also recommended that you perform BIOS, firmware and driver updates prior to any operating system upgrade. Also, check systems for spyware and other unwanted or unauthorized software. Completing these basic maintenance tasks prior to deployment will improve your chances of having a successful upgrade or installation.

Since you can't take advantage of SMS (System Management Services) services, I would opt for using Windows Installer, which ships with the Microsoft Windows Server 2003 family, Windows XP, Windows 2000 and Windows Me. The Windows Installer technology consists of the Windows Installer service and the package file, file extension .msi. MSI files are actually database files which store information about every file and setting that the application installs or modifies. Using an MSI file has its advantages; it can create a system restore point on machines running Windows XP. It also ensures that Windows has enough information to replace any damaged or removed components. Windows Installer can help you manage the installation, addition, and deletion of software components, handling installation progress, rollbacks and reboots. You can also install applications to run directly from a network share, without the need for a local copy, or you can choose to only install the software when it's run for the first time.

You can use the WinInstall Limited Edition tool, which comes in the Valueadd folder of the Windows 2000 and 2003 CDs, to create MSI files. The tool takes a snapshot of a machine that has a clean Windows installation. You then install the application that you want to deploy to your users' machines; at this point, another snapshot is taken. WinInstall compares the snapshots and uses the differences between the two images to create an MSI file and installation package. If you want, you can install multiple applications onto the clean machine prior to taking the second snap shot. This means you can create a single MSI file and installation package that deploys multiple applications or patches. Once you have created your MSI file, you need to make it available to your network users. You can do so by copying the installation files to a network share for which everyone has read permissions. Installing from a network share avoids the need for you to copy the files to a CD and allows you to automate the installation by using a script. To do this, create a network logon script to run the MSI file the next time a user logs on. You might also want to take a look at the Windows Office XP Resource Kit's Custom Installation Wizard to help you customize your Microsoft Office installation.


Sound Off! -   


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Application Security
Protecting exposed servers from Google hacks (and Google 'dorks')
Which automated quality assurance tools can be used to test software?
Has proof-of-concept mobile device malware translated into any meaningful attacks?
How to test the security of personal details submitted to a website
Is security improved when the number of Internet gateways is reduced?
Are Internet cafe users' email credentials at risk?
Which operating system can best secure an FTP site?
Will firewall technology have to adapt to applications that use port 80?
How secure is a mobile phone platform that has an open source framework?
What ports should be opened and closed when IPsec filters are implemented?

Windows XP and Server Security
Microsoft security updates blocked by bug
Microsoft patches Bluetooth, Internet Explorer flaws
Inside MSRC: Bluetooth, Internet Explorer issues explained
Microsoft to repair critical Windows, Internet Explorer flaws
Windows registry forensics guide: Investigating hacker activities
Microsoft Jet Database Engine update could be issue for admins
Inside MSRC: Microsoft explains Word, Publisher flaws
Microsoft to issue critical fixes for Windows XP, Windows Server 2003
Microsoft releases Windows XP SP3 with NAP, security updates
Microsoft investigates new Windows zero-day flaw

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
BotHunter  (SearchSecurity.com)
security identifier  (SearchSecurity.com)
trusted computing  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice

TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineWebcastsWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts