I have a Windows Server 2008 machine as my DC. Earlier this year I created a Software Installation GPO to deploy Adobe Flash Player plugin MSI. I assigned the policy to the computers, about half run Windows XP x86 and the other half Windows 7 x64. That all works like clockwork.
When I created the Software Installation Policy, I disabled the Flash Player plugin's automatic update feature by editing the MSI in Orca. I did this because I wanted all of my machines to run the exact same version of the plugin.
Now, some time has passed and a newer version of the Flash Player plugin has been released. It is time for me to push out the updated version of the plugin. I already have the new MSI, but I am lost on what to do next.
I see the upgrades tab in the Software Installation GPO, but
everything there reads like that would be used for add-ons to a
larger master program and not for updates that are released over
time.
I have read that it is best to create a new Software Installation
policy with the new MSI, revoke the old GPO, and assign the new GPO.
I feel as though, over time, I will wind up with more revoked
policies than active ones.
I have also read that some people have had success by replacing the
old MSI with the new MSI and simply telling the GPO to redeploy.
This seems like a backdoor method that will only get me in to
trouble.
In short, what is the correct, best-practice, or preferred way to roll out the new version via Group Policy?
