iTunes
& Quicktime Installation using GPO
Deployment (2011 versions)
1.
Download iTunes
+ QuickTime from apple.
2. Using 7-zip open the archive and extract the MSI files for
AppleApplicationSupport.msi, iTunes.msi, AppleMobileDeviceSupport.msi,
Quicktime.msi, and Bonjour.msi.
3. Next you’re going to use an MSI editor to change settings for the
installation. Download and install
Orca.exe
which comes packaged with Microsoft
Windows SDK for Windows 7 and .NET Framework 3.5 SP1.
You’ll find the setup file Orca.msi in the folder
\Microsoft SDK\bin after you install the software.
4. In Orca open QuickTime.msi. Go to view -> summary information and
remove
all languages except 1033, and save your changes to the MSI.
5. Go to Transform -> New Transform
6. Make the following changes:
a. Go to LaunchCondition -> NOT
BNEWERPRODUCTISINSTALLED: Right
Click and Drop this Line
b. Property ->
SCHEDULE_ASUW: and change the value to 0
(Prevents quicktime from checking
for updates
c. Go to Registry ->
Sort by Component and go to QTTask.exe and Drop this line. This is like
iTunesHelper.exe which runs in the background and
decreases load times but takes up
resources.
d. Shortcuts -> Drop
the lines for Desktop, Uninstall and Readme
7. Transform->Generate Transform and save it as QuicktimeMOD.mst.
8. Open the iTunes.msi file in Orca.exe, and repeat steps 4 and 5 and
make the
following modifications:
a. Component -> iTunesDesktopShortcuts:
set DESKTOP_SHORTCUTS=0 in the
condition field
b. CustomAction
-> QuickTimeInstallFailed: Drop this
line
c. Property -> IAcceptLicense:
Yes
d. Property ->
SCHEDULE_ASUW: 0
e. Shortcut -> Drop
about shortcut
9. Open Bonjour.msi repeat steps 4 and 5, and make the following
modifications:
a. Property -> IAcceptLicense:
Yes
b. LaunchCondition
-> NOT BNEWERPRODUCTISINSTALLED: Drop this line
c. Shortcut -> Drop all
rows
10. Repeat step 10 for AppleMobileDeviceSupport.msi
a. Property -> IAcceptLicense: Yes
b. Launch
Condition -> NOT BNEWERPRODUCTISINSTALLED: Drop this line
11. Place these MSI and MST in a folder at your software distribution
point. Remember all computers should
have read permissions do the drive.
12. In Active Directory Create a Global Security Group Named Something like “iTunes & Quicktime”
13. Create a linked GPO at the top level of your domain computers and under Security Filtering Remove Authenticated Users and replace this with the name of your Security Group from Active Directory.
14. Edit the GPO and under Computer Configuration-> Policies-> Software Settings -> Software Installations:
a. Right Click-> New Package -> Choose your MSI-> Advanced-> Modifications (TAB)-> Add the corresponding MST file and click OK.
b. Repeat Step 14a for All of your MSI files.
QUICKTIME ONLY INSTALLATION: For installing just the Quicktime Player without itunes just create a GPO that installs the MSI files for Quicktime and AppleApplicationSupport only.