iTunes & Quicktime Installation using Group Policy

iTunes & Quicktime Installation using GPO Deployment (2011 versions)

1. Download iTunes + QuickTime from apple.
2. Using 7-zip open the archive and extract the MSI files for AppleApplicationSupport.msi, iTunes.msi, AppleMobileDeviceSupport.msi, Quicktime.msi, and Bonjour.msi.
3. Next you’re going to use an MSI editor to change settings for the installation. Download and install Orca.exe which comes packaged with Microsoft Windows SDK for Windows 7 and .NET Framework 3.5 SP1. You’ll find the setup file Orca.msi in the folder \Microsoft SDK\bin after you install the software.
4. In Orca open QuickTime.msi. Go to view -> summary information and remove all languages except 1033, and save your changes to the MSI.

iTunes Language Summary

5. Go to Transform -> New Transform
6. Make the following changes:
a. Go to LaunchCondition -> NOT BNEWERPRODUCTISINSTALLED: Right Click and Drop this Line

                b. Property -> SCHEDULE_ASUW: and change the value to 0 (Prevents quicktime from checking                                               for updates
                c. Go to Registry -> Sort by Component and go to QTTask.exe and Drop this line. This is like                                        iTunesHelper.exe which runs in the background and decreases load times but takes up
                                              resources.

QTTask Removal

                d. Shortcuts -> Drop the lines for Desktop, Uninstall and Readme
7. Transform->Generate Transform and save it as QuicktimeMOD.mst.
8. Open the iTunes.msi file in Orca.exe, and repeat steps 4 and 5 and make the following modifications:
                a. Component -> iTunesDesktopShortcuts: set DESKTOP_SHORTCUTS=0 in the condition field
                b. CustomAction -> QuickTimeInstallFailed: Drop this line
                c. Property -> IAcceptLicense: Yes
                d. Property -> SCHEDULE_ASUW: 0
                e. Shortcut -> Drop about shortcut
9. Open Bonjour.msi repeat steps 4 and 5, and make the following modifications:
                a. Property -> IAcceptLicense: Yes
                b. LaunchCondition -> NOT BNEWERPRODUCTISINSTALLED: Drop this line
                c. Shortcut -> Drop all rows
10. Repeat step 10 for AppleMobileDeviceSupport.msi

a. Property -> IAcceptLicense: Yes

b. Launch Condition -> NOT BNEWERPRODUCTISINSTALLED: Drop this line
11. Place these MSI and MST in a folder at your software distribution point. Remember all computers should have read permissions do the drive.

12. In Active Directory Create a Global Security Group Named Something like “iTunes & Quicktime”

13. Create a linked GPO at the top level of your domain computers and under Security Filtering Remove Authenticated Users and replace this with the name of your Security Group from Active Directory.

14. Edit the GPO and under Computer Configuration-> Policies-> Software Settings -> Software Installations:

a. Right Click-> New Package -> Choose your MSI-> Advanced-> Modifications (TAB)-> Add the corresponding MST file and click OK.

b. Repeat Step 14a for All of your MSI files.

iTunes GPO complete

QUICKTIME ONLY INSTALLATION: For installing just the Quicktime Player without itunes just create a GPO that installs the MSI files for Quicktime and AppleApplicationSupport only.