Group Policy Object (GPO) offers system administrators the ability to configure and manage applications, software operations, and user settings across an organization. This guide demonstrates how to utilize Group Policy to deploy the WorkDrive TrueSync application to client computers and users effectively.
Important:
- If you've set up a GPO-based installation for WorkDrive TrueSync on client computers and users, it will only install the application during the computer startup and will be available to all assigned users upon logon. The installation will only be completed when a user runs the program for the first time.
- If a user in your organization is restricted from using desktop TrueSync via the Admin Console, the app will still install, but they won't be able to log in and use it.
Prerequisites
- System requirements: Windows Server 2012 R2 or above.
- Supported Operating System: Windows 10 and Windows 11.
Note: Support for WorkDrive TrueSync on older Windows versions (7, 8, and 8.1) will soon be discontinued. Learn more about why we have discontinued app support for older Windows versions
- Group Policy Management Console (GPMC): This tool must be installed and accessible.
- Administrator rights: You must have administrative privileges in your Active Directory (AD) environment.
- Network type: Ensure that the network has a Domain-based setup and not a Workgroup setup. A domain-based setup allows network admins to control all assets within the domain, while a workgroup-based setup that uses LAN only enables you to share resources.
Step 1: Create a secure distribution point via network share for the TrueSync .msi installation file
The initial step is to establish a secure network share folder for the MSI installation file (ZohoWorkDriveTS.msi) to ensure accessibility for users and client computers. The MSI files do not get copied to computers; instead the installation will run from a network share. - Create a folder in a location where you want to store the TrueSync installation files and to share them via network share.
- Put the Windows Installer package (ZohoWorkDriveTS.msi file) that you want to distribute in the created shared network folder.
- Right-click the created folder and select Properties in the context menu. The Properties dialog box will appear.
- Select the Sharing tab and click the Advanced Sharing button.
- In the Advanced Sharing dialog box, mark the Share this folder checkbox.
- Provide the share name and click the Permissions button. The Share permission screen will appear; the network share option will be Everyone by default.
- If you want to share the folder with specific people, remove the Everyone option and add the specific users.
- Click Ok to get back to the Properties page.
- Click the Sharing tab and make a copy of the network path as shown below:
The network share folder configuration is now complete.
Step 2: Create a Group Policy Object (GPO) to deploy TrueSync application to domain computers or users
- Press the keyboard shortcut Windows + R to open the run command.
- Enter gpmc.msc and press the Enter key to open the Group Policy Management.
- Right-click on your domain in the console tree and select the Create a GPO policy in this domain, and Link it here... option.
- Enter a name for the new GPO, (e.g. Sync TS Agent). Once the new GPO is created, you can see it in the GPM console in the left navigation pane, under Group Policy Objects.
Note: This option is only available if you have a domain controller set up in your network. Workgroup wouldn't have this option.
By default, the GPO created will be applied to all the users of the particular domain. If the admin wants to apply it to specific computers/users, follow these steps: - Click Add under the Security Filtering tab.
- Add specific users/computers/group names and click Ok.
- Create a start-up task to execute the deployment and installation of the Windows Agent. To do this:
- Right-click the new GPO, then select Edit to open the Group Policy Management Editor.
- Navigate to Computer Configuration → Policies → Software Settings → Software Installation.
- Right-click on the Software installation, choose New → Package, and enter the full network path of the package file (Universal Naming Convention (UNC) path).
Note: You need to enter the full UNC path instead of using the Browse path option (e.g. \\shared_computer\shared_folder\ZohoWorkdriveTS.msi)
- Select Assigned and click Ok.
- Close the Group Policy Management Editor.
- The TrueSync application will be installed for selected domain users during their next startup.
Best practices to avoid installation breakage
- Confirm the endpoint has access to the share where the MSI files are stored.
- Enable the Always wait for the network at computer startup and logon option. To do this,
- Press the keyboard shortcut Windows + R to open the run command.
- Enter gpmc.msc and press the Enter key to open the Group Policy Management.
- Locate and right-click on the created GPO and choose Edit to open the Group Policy Management Editor.
- Navigate to Computer Settings → Policies→ Administrative Templates→ System→ Logon.
- Enable the Always wait for the network at computer startup and logon option.
These steps should help in ensuring a smoother installation process and reduce the chances of breakage.
To update the TrueSync package via GPO
In case, if you want to update to the latest version, please follow the steps provided below:
- Place the newer version package (.msi file) into a network shared folder.
- Press the keyboard shortcuts Windows + R to open the run command.
- Enter gpmc.msc and press Enter key to open the Group Policy Management.
- Locate and right-click on the existing GPO that you want to update and select Edit.
- Navigate to Computer Configuration → Policies → Software Settings → Software Installation.
- Right-click on the Software installation, choose New → Package, and enter the full network path of the newer version package.
Note: You need to enter the full UNC path instead of using the Browse path option (for e.g., \\shared_computer\shared_folder\ZohoWorkdriveTS.msi)
- Right-click the newly added package, select Properties, and go to the Upgrades tab.
- Select Add. The Add Upgrade Package dialog box will appear.
- In the Add Upgrade Package dialog box, select Choose a package from Current Group Policy Object (GPO).
- Review the list of packages under Package to upgrade, which lists all of the other packages that are assigned within the selected GPO.
- Click the package that you want to upgrade, and select Package can upgrade over the existing package.
- Click Ok. The newer version of the app will be installed on domain computers or for users upon their next startup.
To remove an existing group policy for the assigned TrueSync application
- Press the keyboard shortcut Windows + R to open the run command.
- Enter gpmc.msc and press Enter key to open the Group Policy Management.
- Locate and right-click on the existing GPO that you want to remove and select Edit.
- Expand the Software Settings container that contains the software installation item that you used to deploy the package.
- Click the software installation container that contains the package.
- In the right-pane of the Group Policy window, right-click the program, point to All Tasks, then click Remove.
- Perform one of the following actions:
- Click Immediately uninstall the software from users and computers, then click Ok.
- Click Allow users to continue to use the software but prevent new installations, then click Ok.
- Close the Group Policy Management Editor.
Troubleshooting
When troubleshooting Group Policy processing issues, it's important to identify whether the problem is localized to a single machine or if it's affecting multiple machines.
If only one machine is experiencing the issue, it's likely due to a malfunction or misconfiguration on that specific machine. In such cases, it's recommended to run a GP update. Follow the steps below on machines where the app is not installed after the group policy is applied:
- Right-click on the Start button.
- Select Command Prompt (Admin) to open the CMD window with administrative privileges.
- Enter the command gpupdate/force in the command prompt and press Enter. Allow it to process.
- Running this command ensures that any potential failures caused by temporary network issues are ruled out.
If the issue is more widespread with more computers, the problem may exist on a Domain Controller (DC) or in Active Directory (AD) itself.
For any questions or assistance during GPO deployment, please don't hesitate to reach out to WorkDrive support for further details and assistance.
WorkDrive support info:
- EU region: support@eu.zohoworkdrive.com
- All other regions: support@zohoworkdrive.com
Supportive GPO troubleshooting articles:
- Applying Group Policy troubleshooting guidance
- Use Group Policy to install software