Group Policy Deployed software vs Chocolatey in a Domain
-
What's the Advantages to each?
Would need to deploy at least Flash, Chrome, Reader, Java, Filezilla.
We also have custom apps I'd like to deploy can this be done internally with choclatey? What about Microsoft office you think that would work with Chocolatey? We currently do it with GP.
-
Looks like it can do 2013 Home Premium and ProPlus. In addition to Flash, Chrome, Reader, Java, and FileZilla.
-
I tried deploying Chocolatey to a test machine via GP start up script it doesn't seem to work..
What did I do wrong?
@echo off SET FLAG=%HOMEDRIVE%\choco.txt IF EXIST %FLAG% GOTO END @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new-object net.webclient).DownloadString('https://chocolatey.org/install.ps1'))) >$null 2>&1" && SET PATH=%PATH%;%ALLUSERSPROFILE%\chocolatey\bin :END -
Powerscript exploded when I tried to run that.
PS U:\> @echo off At line:1 char:7 + @echo off + ~~~ Unexpected token 'off' in expression or statement. At line:1 char:1 + @echo off + ~~~~~ The splatting operator '@' cannot be used to reference variables in an expression. '@echo' can be used only as an argument to a command. To reference variables in an expression use '$echo'. + CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : UnexpectedToken PS U:\> PS U:\> PS U:\> PS U:\> SET FLAG=%HOMEDRIVE%\choco.txt PS U:\> PS U:\> PS U:\> PS U:\> IF EXIST %FLAG% GOTO END At line:1 char:3 + IF EXIST %FLAG% GOTO END + ~ Missing '(' after 'IF' in if statement. + CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : MissingOpenParenthesisInIfStatement PS U:\> PS U:\> PS U:\> PS U:\> @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new- object net.webclient).DownloadSt ring('https://chocolatey.org/install.ps1'))) >$null 2>&1" && SET PATH=%PATH%;%ALLUSERSPROFILE%\chocolatey\bin At line:1 char:13 + @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new-object ... + ~~~~~~~~~~ Unexpected token '-NoProfile' in expression or statement. At line:1 char:24 + @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new-object ... + ~~~~~~~~~~~~~~~~ Unexpected token '-ExecutionPolicy' in expression or statement. At line:1 char:171 + ... ) >$null 2>&1" && SET PATH=%PATH%;%ALLUSERSPROFILE%\chocolatey\bin + ~~ The token '&&' is not a valid statement separator in this version. At line:1 char:1 + @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new-object ... + ~~~~~~~~~~~ The splatting operator '@' cannot be used to reference variables in an expression. '@powershell' can be used only as an argument to a command. To reference variables in an expression use '$powershell'. + CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : UnexpectedToken PS U:\> PS U:\> :END -
@Dashrender said:
Powerscript exploded when I tried to run that.
PS U:\> @echo off At line:1 char:7 + @echo off + ~~~ Unexpected token 'off' in expression or statement. At line:1 char:1 + @echo off + ~~~~~ The splatting operator '@' cannot be used to reference variables in an expression. '@echo' can be used only as an argument to a command. To reference variables in an expression use '$echo'. + CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : UnexpectedToken PS U:\> PS U:\> PS U:\> PS U:\> SET FLAG=%HOMEDRIVE%\choco.txt PS U:\> PS U:\> PS U:\> PS U:\> IF EXIST %FLAG% GOTO END At line:1 char:3 + IF EXIST %FLAG% GOTO END + ~ Missing '(' after 'IF' in if statement. + CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : MissingOpenParenthesisInIfStatement PS U:\> PS U:\> PS U:\> PS U:\> @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new- object net.webclient).DownloadSt ring('https://chocolatey.org/install.ps1'))) >$null 2>&1" && SET PATH=%PATH%;%ALLUSERSPROFILE%\chocolatey\bin At line:1 char:13 + @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new-object ... + ~~~~~~~~~~ Unexpected token '-NoProfile' in expression or statement. At line:1 char:24 + @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new-object ... + ~~~~~~~~~~~~~~~~ Unexpected token '-ExecutionPolicy' in expression or statement. At line:1 char:171 + ... ) >$null 2>&1" && SET PATH=%PATH%;%ALLUSERSPROFILE%\chocolatey\bin + ~~ The token '&&' is not a valid statement separator in this version. At line:1 char:1 + @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new-object ... + ~~~~~~~~~~~ The splatting operator '@' cannot be used to reference variables in an expression. '@powershell' can be used only as an argument to a command. To reference variables in an expression use '$powershell'. + CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : UnexpectedToken PS U:\> PS U:\> :ENDDid you save it as a batch file first? It's working for me now. It calls PS from the batch file. It's not a powershell script itself.
-
Are you able to make custom packages with this without uploaded them to the Chocolaty repos?
-
@thecreativeone91 said:
@Dashrender said:
Powerscript exploded when I tried to run that.
PS U:\> @echo off At line:1 char:7 + @echo off + ~~~ Unexpected token 'off' in expression or statement. At line:1 char:1 + @echo off + ~~~~~ The splatting operator '@' cannot be used to reference variables in an expression. '@echo' can be used only as an argument to a command. To reference variables in an expression use '$echo'. + CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : UnexpectedToken PS U:\> PS U:\> PS U:\> PS U:\> SET FLAG=%HOMEDRIVE%\choco.txt PS U:\> PS U:\> PS U:\> PS U:\> IF EXIST %FLAG% GOTO END At line:1 char:3 + IF EXIST %FLAG% GOTO END + ~ Missing '(' after 'IF' in if statement. + CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : MissingOpenParenthesisInIfStatement PS U:\> PS U:\> PS U:\> PS U:\> @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new- object net.webclient).DownloadSt ring('https://chocolatey.org/install.ps1'))) >$null 2>&1" && SET PATH=%PATH%;%ALLUSERSPROFILE%\chocolatey\bin At line:1 char:13 + @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new-object ... + ~~~~~~~~~~ Unexpected token '-NoProfile' in expression or statement. At line:1 char:24 + @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new-object ... + ~~~~~~~~~~~~~~~~ Unexpected token '-ExecutionPolicy' in expression or statement. At line:1 char:171 + ... ) >$null 2>&1" && SET PATH=%PATH%;%ALLUSERSPROFILE%\chocolatey\bin + ~~ The token '&&' is not a valid statement separator in this version. At line:1 char:1 + @powershell -NoProfile -ExecutionPolicy unrestricted -Command "(iex ((new-object ... + ~~~~~~~~~~~ The splatting operator '@' cannot be used to reference variables in an expression. '@powershell' can be used only as an argument to a command. To reference variables in an expression use '$powershell'. + CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : UnexpectedToken PS U:\> PS U:\> :ENDDid you save it as a batch file first? It's working for me now. It calls PS from the batch file. It's not a powershell script itself.
Nope - suppose I should do that - lol.
I just pasted the whole thing in Powershell. That explains most of the puke.
-
@coliver said:
Are you able to make custom packages with this without uploaded them to the Chocolaty repos?
You just make your own repo. https://mbrownnyc.wordpress.com/2013/09/06/create-your-own-nuget-server-to-serve-packages/
-
@thecreativeone91 said:
@coliver said:
Are you able to make custom packages with this without uploaded them to the Chocolaty repos?
You just make your own repo. https://mbrownnyc.wordpress.com/2013/09/06/create-your-own-nuget-server-to-serve-packages/
Thanks.
-
Chocolatey is nice because it mimics how Linux and Mac handle updates. It is a "pull" from the client which is ideal if you have non-domain machines, home machines or machines that are in the field. It's perfect when you don't want to be using AD or don't want to be pushing updates or whatever. For everyone? Heck no. But a very useful tool and the perfect one in a lot of cases. Especially when you start making your own repos to control every aspect of what is being deployed.
Chocolatey is especially good if you want to democratize software deployments and push that duty out to end users.
GP is really good when you have users on the LAN and want to be a bit more in control.
-
Do the end users have to have local admin rights to use Chocolatey?
If so, that would kill it for me in a business where I manage the machines.
In a BOYD that could be awesome.
-
@Dashrender said:
Do the end users have to have local admin rights to use Chocolatey?
Depends what you are deploying and how you want to deploy it. You can script Chocolatey and automate it so that you could do a lot of fancy things with it if you wanted.
-
@Dashrender said:
If so, that would kill it for me in a business where I manage the machines.
You can give them access to single install commands rather than to just anything. Or give them access only to your repo so that you don't care if they are installing willy nilly (e.g. anyone can install Notepad++ as the administrator, but nothing else.)
Giving users access to Chocolatey would mean that they could run updates anytime that they wanted.
-
So you script Chocolately itself to somehow have local admin rights, while the user doesn't?
-
@Dashrender said:
So you script Chocolately itself to somehow have local admin rights, while the user doesn't?
Yup, this is a pretty common way of handling tasks of this nature.
-
@scottalanmiller said:
GP is really good when you have users on the LAN and want to be a bit more in control.
We could do it all with GP the major issues is handling updates and sometimes the break and slow down logins. I might not use chocolatey but it is very interesting.
I ran the script via task scheduler (push from GP) and run it in the System account.
-
There have been other tools talked about here and SW, and of course I can't think of their names - for the more normal things that people deploy to end users.
-
@Dashrender said:
There have been other tools talked about here and SW, and of course I can't think of their names - for the more normal things that people deploy to end users.
Yes, there are several. Ninite is popular.
Chocolatey's big benefits are open source, free and that you can run your own repo. That it is easy to automate does not make it unique, but is a big deal.
-
With Chocolatey a nice thing to do is make a scheduled task that does a full package update at some specific time (middle of the night, lunch time, whatever.) This works even when the machines are off network (but online.)
-
Ninite costs and is even more limiting than GP assigned software. I'd love SCCM seems to be the best but we aren't looking at SCCM right now. Chocolatey is more powerful than GP. Problem is I still haven't found the best way to script the initial install of programs and chocolatety.
