the assignment of application failed error 1274

Articles Why do I see an "%%1274" error when deploying Duo via GPO?

Explore other articles on this topic.

Why do I see an "%%1274" error when deploying Duo via GPO?

Kb faq: a duo security knowledge base article feb 8, 2023 • knowledge, information.

• Edit the GPO that applied to the computer using Group Policy Management Editor.
• Expand Computer Settings > Policies > Administrative Templates > System > Logon .
• Set “Always wait for the network at computer startup and logon” to Enabled .

• Expand  Computer Settings > Policies > Administrative Templates > System > Group Policy .

The issue is due to the computer not having network connectivity (or full connectivity) while trying to process the package installation.

Trending Articles

• Duo Mobile Privacy Information
• Which versions of Android does Duo Mobile support?
• What do I do if I’m locked out of Instagram, Facebook, or another third-party Duo Mobile account?
• How do I resolve the error "Bad request timestamp" when using Duo Authentication for Windows Logon?
• How do I download Duo Mobile APK or IPA files?

Duo.com     © 2023 Duo

GPO Software Deployment Failed – The error was : %%1274 and %%2

Event ID 103:

After analyzed some time, found the problem for this issue is insufficient wait time to apply Group Policy.

Fix/Solution for GPO Software Deployment Error : %%1274 and %%2

Follow the below steps to increase policy processing wait time.

1. Open Software Installation Policy applied GPO (In my case: Software_Deployment_GPO ) in Edit mode. 2. Navigate to “Computer Configuration > Policies > Administrative Templates > System > Group Policy” 3. In right-hand side, search and double-click the setting “ Startup policy processing wait time .”

4. Enable the setting and set “ Amount of time to wait (in seconds) ” to a reasonable value for your environment, for instance “60”. Now click the Apply button to apply settings.

5. Update the GPO by running the command gpupdate/force and restart computer to check install the software on machine startup.

• https://www.advancedinstaller.com/user-guide/tutorial-simple.html
• https://www.advancedinstaller.com/user-guide/tutorial-gpo.html#tutorial-gpo
• https://www.advancedinstaller.com/user-guide/read-log.html#read-log
• Wrap EXE package into an MSI for GPO deployment: https://www.advancedinstaller.com/user-guide/tutorial-convert-exe-to-msi.html

Share this:

Related posts.

• Group Policy Fix : Add operation failed. Unable to extract deployment information from the package.
• HTTP Error 500.19 - Internal Server Error
• Error 6118: ERROR_NO_BROWSER_SERVERS_FOUND
• Group Policy Infrastructure failed error in Resultant Set of Policy
• An extended error has occurred failed to save local policy database

1 thought on “GPO Software Deployment Failed – The error was : %%1274 and %%2”

Disable UAC the machine.

Leave a Comment Cancel reply

Save my name, email, and website in this browser for the next time I comment.

SOLVED: How to resolve System Event 108 “The error was : %%1274” When Deploying Software Through Group Policy

Published by ian matthews on february 1, 2013 february 1, 2013.

Well this is just as annoying as can be but it turns out to be pretty quick to resolve.  If you reboot your client PC’s but find some software you pushed via Group Policy did not install, you likely are in Asyncronous Policy Processing Hell.

First verify that the policy did make it to your test PC by launching a CMD window (don’t forget to RUN AS ADMINISTRATOR) and typing GPRESULT.  Just look for your GPO under COMPUTER.  Also check the event log of your test PC and look for The error was : %%1274

BACKGROUND:

Since Windows Server 2003, XP and newer clients don’t wait for the network components to fully load before allowing a user to login.  This makes boot times faster but means that Software Deployments via Group Policy almost always require TWO reboots.  Also, you can get the dreaded:

System Event 108 “The error was : %%1274”

and never get an install completed.

• Delete the GP Key from the client PC’s registry: HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion/Group Policy
• Turn Asyncronous Policy Processing off by creating a new GPO (or editing an existing one) with the following setting: Computer Settings > Administrative Templates > System > Logon > Always wait for the network at computer startup and logon – Enabled

I figured this out using several blogs but the most useful and the one deserving the most credit is THIS ONE , in case you want to read more about it.

Anil · April 14, 2018 at 1:29 am

error 108 when i am starting computer

Error 108 Press to Run SETUP

QUDOWNLOAD » Java Gpo Error 1274 · May 12, 2015 at 9:28 pm

[…] SOLVED: How to resolve System Event 108 “The error was … – Feb 1, 2013 … … error was : %%1274″ When Deploying Software Through Group Policy … Also check the event log of your test PC and look for The error was : %%1274 … SOLVED: How to Deploy Java Through An Active Directory Group … […]

SOLVED: How to Deploy Java Through An Active Directory Group Policy - Up & Running Technologies Calgary · February 1, 2013 at 5:35 pm

[…] Take a quick scan of my post on the two easy fixes for this problem, HERE. […]

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Related Posts

SOLVED: VIDEO: How To Remove Public IP Address & Save Money In Azure

In this short Azure tutorial we demonstrate how to remove static addresses from Azure virtual machines. In particular, we show how to remove static public IP addresses. 0:00 Introduction0:24 Why Remove Public IP Addresses0:44 How Read more…

SOLVED: Discover Your PowerShell Version, Learn How to Upgrade PowerShell, & Explore the Latest Features in PowerShell

Windows PowerShell gets better all the time and Microsoft offers a major new release about every three years. Here are all of the things you need to know about the version of PowerShell. Command To Read more…

SOLVED: Simple PowerShell Command to List Size of Each Users Recycle Bin & Total

Do you need to create a list table showing the size of each user’s recycle bin and then a total of all the disk space used on Recycle Bins? Well if so, this is the Read more…

Stack Exchange Network

Stack Exchange network consists of 183 Q&A communities including Stack Overflow , the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Q&A for work

Connect and share knowledge within a single location that is structured and easy to search.

Software wont deploy, but GPO gets applied and MSI is installable manually

DC: WinServer2012, Client: XP

i have a problem getting a GPO install to work. I created a MSI thats hosted in a network share:

\\server\Deployment\xxx\xxx.msi

when i log on to a computer and start it manually, it installs perfectly in silence and is listed uninstallable via systemcontrol/software.

However, if i deploy it by GPO, it wont work. eventvwr.msc reveals error codes 101, 103, 108 and 1085 without any useful further information (roughly translated in english it is something like: "it did not work because it did not work.." :@). Client is set to wait on network, GPO is listed as applied on gpresult , when i log onto the server and check the ntfs-settings, the MSI has read and execute for domain-computers, auth-users, everyone, anonymous and full for system and admins. The share settings are read for everyone. There are no further events related to that failure.

Does someone please can suggest some fixes? How can i find out WHY it does not get installed?

TIA, rhavin.

• group-policy
• windows-installer

• Event ID 108 should provide "Failed to apply changes to software installation settings. %1 The error was : %%%2". What are the actual messages these Events are providing you? –  Ƭᴇcʜιᴇ007 Nov 1, 2014 at 20:36
• Never understood why MS localized error -.-, i'll try to translate in english: 101: the assignment of application (app) of gpo (gpo) failed. error: critical error at installation. 103: remove of assignment of application (app) of gpo (gpo) failed. error: critical error at installation. 108: Changes in softwaresettings not applied. Unable to adopt changes of software. Preceeding log entry should be there. –  rhavin Nov 2, 2014 at 8:09

These errors tell me that your GPO and software distribution are working fine. It's the installer itself that's failing for some reason, and (probably) not reporting 'why' back to the launching process. To that end, they're telling you to check the log file of the installer to determine why, presuming the installer provides a log.

When run by the GP at start up, the context is the "System" context, not a user context. One of the major things that doesn't happen during the System-level install, is that no user profile is loaded. If the installer depends on the user profile to be available for some reason, then it could fail when it's not.

So you have to determine if/why the installer is failing when run in the context used during the GP initiated install.

Optionally, you could change the GP setup you are using; instead of assigning the software package to the Computer , assign (or publish) the software to the User .

I'd explain how to do that here, but there are a few important options and it's better if you get familiar with them all, and then decide which are best for your AD setup.

All the info you need on how to do it is available from Microsoft , and here's a YouTube video that popped up in a search that may help as well: Assigning Versus Publishing Applications in Active Directory .

• thanks for the answer, but the msi is configured to at least leave a log on c:\ on startup, even that is not created, so i'm pretty shure the msi was not started at all. as i told, when i start it manually, it works like a charm. –  rhavin Nov 3, 2014 at 17:32

You must log in to answer this question.

Not the answer you're looking for browse other questions tagged group-policy windows-installer deployment ..

• The Overflow Blog
• Supporting the world’s most-used database engine through 2050
• What language should beginning programmers choose?

Hot Network Questions

• How was the miraculous complement of two Harkonnen legions for the retaking of Arrakis explained?
• Two numerical sequences
• Ways to refuel nuclear powered cars
• Parents' house repairs and siblings future inheritance
• Integral of the product of a Gaussian and a exponential of a hyperbolic function
• Locally conformally flat
• Have any abstractionists discussed the possibility of multiple abstraction principles?
• Can copy-pasting a word definition from a dictionary site cause a copyright issue?
• Conditions for Binomial Distribution
• How to Write an Involuntary Secret Reveal
• Correct Choice of First Vowel in Words Such as "Regret" and "Return"
• Interpret PlusOrMinus
• How can I evaluate the Gaussian Integral using power series?
• What is a safe percentage for battery Maximum Capacity in an iPhone?
• Shebang can reference a script in Linux
• Why protest against the war in Gaza on the campus of Columbia University?
• String character changes (case insensitive) - Go
• Is it an independent and additional offence to have a fake passenger (e.g., a mannequin) to try to avoid HOV violation detection?
• A random urn problem - do the faster duplicating balls always dominate?
• Why is the metallicity of dwarf galaxies low?
• How can I make this AC current switch turn on at 20mA instead of 50mA?
• “alignedat" will adjust the line space automatically but "array" won't in LaTeX?
• Canada visitor visa denied
• Enumerate all matches of a regex

Top 5 Reasons Group Policy Software Installation Is Not Working

Group Policy Software Installation (GPSI) is an effective (and free) way to manage software deployment.  After years of use, I have found these five common issues. Let’s walk through the top five issues and the solutions to a fix them! We will figure out why group policy software installation not working!

Problem 1: Does the GPO apply?

If the software isn’t installing on the computer, the first place to start is at the scope tab of your GPO. Basically, if the GPO can’t apply to the computer (or user) – the application won’t install. You can ensure the GPO is applying by running a GPResult on that computer and ensuring that the GPO applied and that the application appears under Software Installation.

If the software doesn’t appear, take a look at The Top 10 Ways to Troubleshoot Group Policy . One special note about software deployment. If you deploy the software to the user side (assigned or published), the GPO must be linked to an OU containing users (or you have to enable loopback).

Also remember that GPSI applies in the foreground. Installation can only happen on a reboot or logon (and only if the GPO was downloaded beforehand). In a default environment, it is easiest just to reboot twice. If you want to turn this into a single reboot, you can enable “Always Wait on the Network at Computer Startup or Logon”. Be aware that this will slow down startups/logons.

Problem 2: Does the software install quietly?

For an MSI to deploy through GPSI, it must be able to install silently. To test this, you only need MSIEXEC! To test quietly, here is your syntax:

msiexec /I “PATHTOYOURMSI” /QB /T “PATHTOMST”

and here is a practical example:

After the installation progress bar has completed (and MSIEXEC.exe has terminated in the Task Manager), you should be able to launch your application through any created shortcuts. If the application errors out during install, you most likely need to specify additional options in your MST file. An example of this would be Adobe Photoshop Elements. If you do not include the serial number in the install, it can’t be deployed through GPSI.

Problem 3: Where is the MSI?

As a best practice, do not store your MSIs in Sysvol. While it may look like a great way to create redundancy, it is going to be a management nightmare.  Instead, set up a dedicated file server (or better yet – use DFS!) and organize your MSI structure. For our environment, we organize the MSIs by manufacturer – then product – then version. This vertical hierarchy allows us to easily find (or update) any piece of software.

The second point to consider is how you load the MSI into Group Policy. Whenever possible, use a DFS Namespace (first choice) or a UNC path (second choice) over an IP. IPs can change (though you should be using a reservation).

Problem 4: Can X access the MSI?

So even though your software is compatible, your users/computers that need to install this software might not be able to reach it. Take a look at the share and file/folder permissions where the MSI is located. If you are deploying to a computer, that computer needs Read/Execute. The same thing applies to a user. In our environment, we actually grant authenticated users read/execute to the share and root folder. This ensures that every deployed MSI always have the correct permissions.

Problem 5: Where are the logs?

If you’ve made it this far, you likely have an installation issue. This can be caused by a misconfigured machine, an old piece of software breaking the upgrade, or a missing component. Lucky for us, GPSI does a decent job logging these kind of issues. Open up event viewer on the troublesome machine and selection the system log. Filter the log to show any issues by Application Management Group Policy (the source) and to only show Warnings and Errors.

As you can see from the error above, GPSI couldn’t install this software until another logon has occurred. If you receive any strange MSI errors – just do a quick search on Experts-Exchange or AppDeploy for that error (ex: 1204) plus MSI. Because these error codes are consistent across nearly all MSIs, you don’t really need to search for your specific product.

11 thoughts on “ Top 5 Reasons Group Policy Software Installation Is Not Working ”

One caught me out the other day that I’d never seen before, app looked like it was installing but never completed – turns out the installer language was German but all machines were English – enable Ignore Language and then deployed OK.

That is a first for me as well! Thanks for the tip!

David did you get this sorted? We were experiencing a similar problem. Software had been deploying using GPOs successfully then started failing. In the end it was IPv6 causing chaos. IPv4 network with IPv6 enabled. Fixed this by disabling IPv6 on all Desktops and static devices and GPOs now work. Random!

That is super random Sue! Just for kicks, have you seen any DNS errors or replication errors with your domain controllers?

Random GPSI issue not covered here (and I wonder if you might point me in the right direction?)

New Win8.1 machines installed to a lab, end of last year. Old GPSI package deployed to generations of computers over 8 years, never with problems. A number of new machines installed the software at build time, but some didn’t. Trying to solve this problem now.

Event logs from last year during the build showed: – The assignment of application blah from policy blah failed. The error was : %%1274 – The removal of the assignment of application blah from policy blah failed. The error was : %%2

I fixed this at the time by tinkering with startup network timings: – GPO Computer Settings > Specify startup policy processing wait time – Eventually fixed properly by tagging ports on a switch as these ports were not configured properly and weren’t bringing the connection up fast enough when machine started up

ANYWAY. Zoom forward to March 2015 and I’m trying to fix the machines that never received the software. I’ve re-downloaded the whole policy using gpupdate /force. I get “Changes to software installation settings were applied successfully” in system log and no other errors. Running GPRESULT /H with elevated command prompt allows me to verify that the computer is indeed receiving the setting to install the package. Checked permissions, even though I know they wouldn’t have changed in 8 years as I’m the only one who manages the network – no issues there.

I’d like to avoid de-joining and re-joining affected machines to the domain, any ideas where to start?

By the way, I’ve already attempted to enable userenvDebugLevel logging, as well as appmgmtDebugLevel logging, neither of which appear to work in Win 8.1 (MS article confirms latter definitely doesn’t work!)

Mat – you have done almost everything that I would do before opening a case with MS. The last thing that I would do is see if the application registered itself with group policy. If it did, I would delete the application key. You can use MSI Manager (available on this page: https://deployhappiness.com/resources/tool-downloads/ ) to do this.

Either way – let me know what you find out!

I’ve pulling my hair on this one. There are event IDs 101, 103, 108 and 1112 showing up every 5 minutes even though MSI are successfully installed on a client test machine. I have made necessary changes in GPO attached below and rebooted DC but no joy – still cluttering my event System log stating that it failed to install which is not true. A shared drive can be accessed by anonymous/guest users from domain and non-domain machines on the same LAN. No issues with AD, DNS, DHCP etc.

* Computer Configuration * Policies * Administrative Templates * System * Logon ENABLE: Always wait for the network at computer startup logon * Group Policy ENABLE: Specify startup policy processing wait time (temporarily set to 120 will change to 30 later)

101 The assignment of application 7-Zip 9.20 (x64 edition) from policy DOMAIN base packages installation failed. The error was : %%1274

103 The assignment of application 7-Zip 9.20 (x64 edition) from policy DOMAIN base packages installation failed. The error was : %%1274

108 Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. The error was : %%1274

1112 Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. The error was : %%1274

Download MSIManager from this page: https://deployhappiness.com/resources/tool-downloads/

Run it and browse to a computer having this issue – remove 7.zip from the list. Restart and see if the issue goes away.

BTW the good example of how to deploy MSI via GPO I found here: http://messenger.softros.com/help/domain-install.html step-by-step instructions with screen shots

Thanks Taho! Those are nice and simple directions – good to see it using Windows 8 screeshots!

Leave a Reply Cancel reply

• Security Essentials
• Deploying Windows 10 (without touching a client)
• Group Policy – Preferences to Software and Everything In Between
• OneNote Can Centralize Your Documentation
• Lunch and Learn: PowerShell 3
• Lunch and Learn: Software Extraction
• Disclosure Policy
• Privacy Policy
• Rebuild the Administrative Start Menu
• Guest Posting
• What’s This? Q&A on Sponsored Posts
• Blogs that I Follow – 2018 Edition
• Books to Boost Your Career!
• Top Articles to Teach You Now!
• Top Gadgets to be more Productive!
• Software Tools
• Other – eBooks, Virtual labs, etc
• My Articles
• Clients and Desktops
• Group Policy
• Deployment/MDT
• About DeployHappiness
• February 2024
• October 2023
• January 2023
• October 2021
• November 2020
• October 2020
• February 2020
• January 2020
• November 2019
• October 2019
• February 2019
• January 2019
• December 2018
• November 2018
• October 2018
• August 2018
• February 2018
• January 2018
• December 2017
• October 2017
• September 2017
• August 2017
• February 2017
• January 2017
• October 2016
• September 2016
• August 2016
• February 2016
• January 2016
• December 2015
• October 2015
• September 2015
• August 2015
• February 2015
• January 2015
• December 2014
• November 2014
• October 2014
• September 2014
• August 2014
• February 2014
• January 2014
• December 2013
• November 2013
• October 2013
• September 2013
• August 2013
• Group Policy (85)
• Best Practice (90)
• Hardware (9)
• Management (100)
• Networking (3)
• Office 365 (8)
• Performance (23)
• Quick Tip (26)
• PowerShell (87)
• Security (28)
• Server (16)
• Thinking about IT (14)
• Training (6)
• TroubleShooting (36)
• Uncategorized (29)
• Walkthrough (109)
• Entries (RSS)
• Comments (RSS)

Stack Exchange Network

Stack Swap web consists of 183 Q&A community including Stack Overflow , the largest, majority reliable view community for developers to learn, share their knowledge, and build their careers.

Server Fault is a question and return site for structure and network administrators. It only takes a minute to sign up.

Q&A for work

Connect and how knowledge inside a single location ensure is structured and easy on search.

Group Policy installation failed error 1274

I'm trying to array an MSI via the Group Policy are Active Index. But these be the errors I'm getting in the Your special log after logging in:

• The assignment of application XStandard from policy choose collapsed. The error was : %%1274
• The removal of the assignment regarding application XStandard from policy install failed. The error what : %%2
• Fails to app changes up desktop installation settings. The initiation of software installed driven Group Policy for this user has been delayed until the later logon cause the changes must be applied before the operator logon. And error was : %%1274 Use Class Policy to remote-controlled install browse - Windows Our
• The Group Policy Client Side Extend Software Installation was unable to apply one or more settings because the variations must be processor before system startup or addict logon. The schaft will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may output in slow launch and boot performance. How to deploy package software via GPS

When I reinitiate and logs on again IODIN simply get the identical messages about requires on perform one update before to next logon. I'm on ampere Windows Vista 32-bit laptop. I'm rather new to deploying via group policy so what other information would be helpful included specify the issue? I tried one different MSI with the sam results. I'm able to installation the MSI using aforementioned command line press msiexec when logged into the computer, so I know the MSI is jobs ok at least. Deploying an MSI through GPO

• active-directory
• group-policy

13 Answers 13

You're seeing the dreaded scourge from asynchronous policy processing. It's not a "feature" (and was default-off in Lens 2000 but default-on in Windows XP and above) and causes exactly what you're seeing-- non-deterministic behaviour with processing a types regarding GPO setting. Deploying Software with User Policy

In a GPOS that applies to is computer, hinzusetzen the following setting:

• Always wait for and network at computer startup or logon - Enabled

After you resolute that (and allowed the GPO go replicate if you're in a multi-DC environment), do a "gpupdate /force /boot" the and subject PC. It will reboot and you should see the software installation occur.

The "Always wait for the network at computer startup and logon" some slows down the startup and logon because all GPO add-on are allowed to process, but the upside your that all GPO extensions are allowed to process. How up Deploy Software using Group Policy

• ME was running into the up error code in the original question. After applying your fix EGO got into the 'Error 1612. The installation source for like product is not available. Verify that the source existence and that your can access it.' It exists or I can access it. Any ideas on how to troubleshoot that? (tried gpupdate /force /boot )? Any special permission required on the distribution point? –  Unreason Ear 26, 2010 in 13:54
• 1 Giving 'Domain Computers' read access for distribution point did the trick for ich. –  Unreason Augmented 26, 2010 at 14:14

I proven which Always wait forward the system at computer startup and logon - Enabled setting of the answer by @Evan Anderson, but it wasn't until I added that setting below as well that allowed to software to install. Doesn sure if it was a combination of both settings or not. It's working now, so I'm leaving both user.

In a Group Policy applied to save workstations, navigate till: Computer Configuration > Policies > Administrative Templates > System > Group Policy Enable this Specifying initial guidelines processing wait time . Set Monthly of time to wait (in seconds) : = 120

120 might be overkill, but so worked for me. Other online suggested setting that up 30 seconds. Even though 30 seconds default (when policy is not set), forcing it up 30 seconds worked for they. How to Deploy Software via GO on Glasses OS | Action1 Blog

• 1 This jump increased my deploy success from 72% to 100%. Great answer! –  Nic Dec 5, 2013 at 20:54
• I'm not see this policy in Group Policy General Editor. –  Shiv Oct 7, 2015 at 23:07
• @Shiv, ME adds a screenshot for you. :-) –  Andrew Bucklin Ok 8, 2015 at 2:16
• 2 @AndrewBucklin Ahh for some reason in my GPM, the item is calling "Startup policing processing wait time". The word "Specify" is not there. Furthermore included is the ability to have no application deployed via GPSI be automatically elevated in their privilege level during choose. This allows the ... –  Shiv Oct 8, 2015 at 2:24

This can happen wenn one application is already ensconced but msiexec is disabled to uninstall i. Most common scenario is ampere previous manual install with "Only to me" selected instead of "Everyone who logs on until this computer".

You can use the Windows Installer Cleanup Utility ( http://support.microsoft.com/kb/290301 ) to trick of PC into thinking that the app is no longer present, and then it should come good.

• Thanks for the proposed, still upon operation the nutzwert I didn't see the app listed. I'll keeping this bookmarked in the future though in case get is adenine solution to other problems. –  David Thomas Garcia Aug 10, 2009 at 17:43

And I plain founds another different cause from here error. Is them having "Spanning Tree" configured on the ethernet switch linked into the feature workstation, it will stay activation of the switch port as the PC boot up. Deactivating Spanning Tree for the switch port or enabling "Spanning Tree Portfast" for the switchport solved this finding on a few from my workstations.

I had the equivalent item when none of the fixes above worked. I finally figured outward that there used another GPO trying at install software before mine, additionally it was failing with the %%1274 error because the GPO himself had the wrong permissions. For some reason that failure was following preventing my GPO starting installing, straight through mine had the correct permissions. Once I disabilities the other problem GPO, my GPO installed correctly.

Changing the ' Startup policy processing wait time ' work for meine. It is set to 30 moments, but certain workstations what standing failing with %%1274.

I increasing it to 90 seconds and they were happy.

We has the same issue. We finally figured off that our laptops were RADIUS authenticated until WiFi, and the network installs couldn't start till the user logs in with INDICATOR credentials (because no network connectivity until after to remotely execute the induction files). And after the operator logged in, it was too late as the installation should start before that. This is pretty straight forward and ego am out of theories as up why this isn't working. I am usage to the computers. Desktops and Laptops OUs. I have authenticated users with rea...

When client connected across Ethernet it worked like an charm!

Sometimes your bunch policy can get screwable up. Try removing the voll registry key HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion/Group Policy. Your will projected find choose von GP gets built again on rebooting. You may want to backup your registry first...

I front the alike behavior with couple of laptops. They worked fine for couple of aged, and then suddenly they not install any fresh software via gpos. Forcing the "Startup policy processing wait time" setting seem got corrected the problem. As said before to should be 30secs by default, but for me computer seemed, is labs didnt wait at all on startup for policies but skipped straight over. All laptops had win7x64, DCs Server2008R2 and Server2012.

Problem DISSOLVE!

I was record into client machines as domain user with Enterprise/Domain admin privileges and ably to access a shared folders inclusive MSI setup packages without random problem. Though, toward some point tried accessing it via \IP\share_path_to_msi_packages_folder free another non-domain PC plus kept getting a login pop-up. Basically, even though ready allows all domain or non-domain users/groups or 'Everyone' read/write authorizations on shared portfolio it would still not jobs and quick me available username/password thereby not enables local customers to take down packages pointed by GPO. This is made by anonym access disabled by default . After enabling it and giving read/write permissions to MSI folder was then able to successfully implement major is packages also only synology-cloud-station-3.1.-3320.msi abortive (need to look into it). I had also able to access the shared folder from any non-domain machine.

I had getting these error messages pretty much either 5 minutes in Events > Scheme:

101 The assignment a application 7-Zip 9.20 (x64 edition) from policy DOMAIN rear packages installation failure. The error was : %%1274

103 The assignment of application 7-Zip 9.20 (x64 edition) starting policy DOMAIN base packets installation failed. The error was : %%1274

108 Failed to apply changes to software installation settings. Who installation of software deployed thanks Bunch Policy with this user has been delayed for the next logon because to changes must be used before the user logon. To failures was : %%1274 Step by step class on how to deploy an MSI package through GPO.

1112 Failed to apply changes to solutions installation settings. The installation of software deployed through Group Policy for this user has been delays until the next logon why the changes musts be applied before the user logon. The error was : %%1274 Deploying Package via Group Corporate not working

SERVERS DC1 (PDC) + DC2 (BDC) + DC3 (DBC) Windows 2012 R2 Standard fully updating

CLIENTS Windows 7 Pro SP1 (clean Dell recovery, fully updated, conflicting software such as old Adobe Flash uninstalled)

Do already tried about buyers:

• gpupdate /force
• gpupdate /force /boot (both ask to reboot and throw error that policies must not been applied)
• gpresult /r (looking good)
• both servers and clients can access shared drive where MSI packages are storing
• restartable repeat times DC1 real clients after changes to GPO

GPO disable UAC:

* Computer Configuration * Policies * Windows Settings * Data Settings * Local Guidelines * Collateral Select ELEVATE WITHOUT PROMPTING: User Account Control: Behaviour of aforementioned elevation prompt for administrators in Manager Approval Choose DISABLE: User Account Control: Detect application installation and prompt for elevation DISABLE: User Account Control: Run all administrators in Admin Permission Mode

GPO deploy base software: * Computer Configuration * Policies * Administrative Templates * Schaft * Logon ENABLE: Always wait for aforementioned network at computer startup logon * Group Policy ENABLE: Specify startup policy treatment wait time (temporarily set to 120 will change to 30 later)

* Computer Configuration * Policies * Software Installation * 7-Zip 9.20 (x64 edition) v9.20 Assigned \LANIP\Utils\Software\GPO\7zip-7z920-x64.msi * Google Chrome v66.41 Assigned \LANIP\Utils\Software\GPO\googlechromestandaloneenterprise.msi * Mozilla Firefox (en-GB) v35.0 Assigned \LANIP\Utils\Software\GPO\firefox-35.0.1-en-gb-msi * Synology Cloud Train v3.1 Assigned \LANIP\Utils\Software\GPO\synology-cloud-station-3.1.-3320.msi

All GPOs are placed in Group Policy Objects then linked from GPOs directly under our domain. Various settings such as IE restrictions from another GPO setup the same way apply until client correctly. Article: The Guide to Deploying Software Using Group Corporate

There is no other errors in AD, DHCP, DNS are working perfect, machines get IPs additionally can resolve names via nslookup as well as ping each other on IPv4/IPv6. Have him ever wondered methods to install software onto Windows machines in a reliable approach inches Active Directory through indian GPO? (I mean this: Group Rule Verwaltung -> Computer Advanced ->

Evan Anderson's answer is fine, instead he's missed one pretty important disclaimer:

This pot significantly slow down off-domain logins for laptops furthermore cableless clients.

Considering an workaround without this DPO is to simply reboot double, I don't really see why anyone would take that trade off.

we modified the setup.bat and wrote another one to perform using UNC (\...) path and added this as a boot script to who GPO, if you like to try it:

https://github.com/lhpitn/ManageEngineEndpointSetup

Windows 2012 R2

In adenine Group Corporate applied to these workstations, navigate go:

Computer Configuration > Policies > Administrative Template > System > Group Policy

Enable the Specify startup policy processing wait time. Set Amount of start to wait (in seconds): = 120

• 7 Dieser answer appears to be a duplicate of an earlier only. Do you have any additional information until add? –  womble ♦ Aug 25, 2015 at 2:19

You must log in to response this question.

Not the answer you're lookup for browse other questions tagged active-directory group-policy msi ..

• The Spill Blog
• Is AI enough till increase your productivity?
• Featured on Meta
• If more users ability vote, would they engage more? Testing 1 reputation voting...
• Practical effects of the October 2023 furlough

Passionate Network Questions

• Is it possible to replace/regear an forward cog? My easiest gear is too easy and I want into try for a higher resistance
• A this a frost free outdoor faucet?
• Animal Farm and the Swine Penitentiary
• What can the intuitive differences with these two simplicial subdivision functors?
• WSL failed to getting after shrinked using wslcompact
• Methods are sapient crows utilized if there are mobiles for communicating
• Is there ampere philosophical doctrine so suggest that the soul endlessly going between living organisms without soul tied go space-time?
• How many sunshades to cover the beach?
• Can fingerprint readers been trusted?
• Can a tiny mimic turn into a magic sword?
• Recommendation Letter Advice and Examples
• Emailing underperforming students
• Is this unharmed to got pedal cage reaching wheel when slightly turned?
• What until integrate aforementioned above ratios of summation?
• How do instant speeed effects work after blockers have are declared?
• Am MYSELF being scammed while someone asks for my full name and email address
• Which countries have formally requested Zion set its Gaza blockade in Month 2023?
• What could lead a large ocean on an planet's surface to recede completely only to reappear later go in a recurrent process?
• Are the concept of (Total) Nothingness self-refuting?
• Can penalties be increased retroactively?
• What actions, beside a hard poweroff, done a blank screen with a blinking cursor allow?
• Remove decimal point in ScientificForm
• What does Section 2 by the 21st Amendment to this WHAT Constitution do?
• Does scripture allow for "speaking in tongues" on be in non-human languages?

Your privacy

By clickable “Accept all cookies”, she agree Stack Austausch can store cookies on your gadget and disclose information in accordance with our Download Strategy .

Contribute to the Windows forum! Click  here  to learn more  💡

April 9, 2024

Contribute to the Windows forum!

Click  here  to learn more  💡

Windows 7 Top Forum Contributors: Bill Smithers  -  LemP  -  Canadian Tech 👍✅

April 17, 2024

Windows 7 Top Forum Contributors:

Bill Smithers  -  LemP  -  Canadian Tech 👍✅

• Search the community and support articles
• Search Community member

Ask a new question

Group Policy - Issues deploying software packages through GPO

HI Everyone,

I have a client requirement that a browser 3rd party plugin to be installed in all IE versions. Since manual installation consumes huge man hours, planned to use GPO 

Created GPO & attached to respected OU - Computer configuration --> Policies --> Software Settings-->Software Installation

Plugin not installed in any PC, all computers has following errors in eventviewer

Event ID 101 - The assignment of application OrgPublisher PluginX 11.5 from policy Org Chart plugin - msi deployment failed.  The error was : %%1274

Event ID 103 - The removal of the assignment of application OrgPublisher PluginX 11.5 from policy Org Chart plugin - msi deployment failed.  The error was : %%2

Event ID 108 - Failed to apply changes to software installation settings.  The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon.  The error was : %%1274

Report abuse

Hello Karthik,

Thank you for posting your question on Microsoft community forum.

The issue will be better suited for the IT professionals audience on the TechNet forums.

I would recommend posting your query in the TechNet forums.   TechNet Forum http://social.technet.microsoft.com/Forums/en-US/home?category=w7itpro

Was this reply helpful? Yes No

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

Thanks for your feedback.

Replies (1) 

Question info.

• Install, upgrade, & activate
• Norsk Bokmål
• Ελληνικά
• Русский
• עברית
• العربية
• ไทย
• 한국어
• 中文(简体)
• 中文(繁體)
• 日本語

Stack Exchange Network

Stack Exchange network consists of 183 Q&A communities including Stack Overflow , the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Q&A for work

Connect and share knowledge within a single location that is structured and easy to search.

Group Policy software installation failing with error %%14

I have created a GPO configured to "assign" \\<AD DNS domain name>\NETLOGON\<file name>.msi and verified that it's applying to the Windows 10 v1809 PC but the actual installation consistently fails.

RSoP reports the following:

Event Viewer reports the following:

• Found that the error %%14 doesn't seem to be documented online, hence my main reason for posting this.
• Verified that Group Policy is already configured as recommended for these scenarios ( Specify startup policy processing wait time set to 60 seconds and Always wait for the network at computer startup and logon set to enabled).
• Verified that the connection between the PC and DC is 1 Gbps
• Found that manually running the MSI from NETLOGON on the PC works fine.

Update: 2019/06/26 09:29

• Found that this very GPO applies successfully on 2 other Windows 10 v1809 PCs.
• Tried deploying 7-Zip's MSI to the affected PC but it fails with the same errors.
• Found some events that suggested slow DNS initialisation so temporarily removed Webroot SecureAnywhere's DNS Protection Agent but found that doing so didn't make a difference.

Update: 2019/06/26 14:08

• Enabled Windows Installer logging as per https://support.microsoft.com/en-gb/help/223300/how-to-enable-windows-installer-logging but I couldn't find anything relevant in %tmp% or C:\Windows\System32\config\systemprofile\AppData\Local .
• active-directory
• group-policy

This was resolved by .OLD-ing the following registry keys and rebooting:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\History
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy\History

You must log in to answer this question.

Not the answer you're looking for browse other questions tagged active-directory group-policy msi ..

• The Overflow Blog
• Supporting the world’s most-used database engine through 2050
• What language should beginning programmers choose?

Hot Network Questions

• When or where did Gustave Flaubert say that Alexander Pushkin's work was "dull"?
• CMD closes immediately on Windows 11
• Book series about a guy who wins the lottery and builds an elaborate post-apocalyptic bunker
• How can I vertically center the question mark on the left of this theorem-like environment?
• Color for this sky
• Why use a special "Name" class (instead of just a string) for representing object names in C++?
• Why did I lose a point of rating in stalemate?
• Enumerate all matches of a regex
• Reference for a statement from Gaitsgory's thesis
• Why is the metallicity of dwarf galaxies low?
• What is some antonym of shortchange?
• Locally conformally flat
• jq: Printing multiple values from multiple arrays at once
• A 4AWG wire in residential dryer wall outlet?
• Parents' house repairs and siblings future inheritance
• Shebang can reference a script in Linux
• How was the miraculous complement of two Harkonnen legions for the retaking of Arrakis explained?
• Did God "design" logic?
• How to make a sign language that only uses three fingers
• Relativity of Time from an Observer Perspective
• A locally compact, connected, Hausdorff and locally connected space is not the countable disjoint union of nonempty closed subsets
• If Alice measures a qubit and doesn't tell Bob the result, what's Alice's state from Bob's perspective?
• Homemade number sequence puzzle
• 4,4,2,6,2,10,4,_ sequence from 4th grade packet