I searched the internet far and wide for the last couple days for the answer, I could not find one.
So here it goes. This will be a long one.
I am running Server 2008 R2 as my primary DC with Server 2003 as my backup DC (Hmm, perhaps this is an issue). The system I am trying to push the software to is a Win 7 x64 PRO machine.
I have created a GPO called "Chrome_Browser" which I want to be applied to computer objects in the domain. In Computer Configuration | Policies | Software Settings | Software Installation, I "Assigned" the Coogle Chrome MSI package v65.85. The Assigned options are default except I added "Uninstall the application when it falls out of scope of management" option. The Software is on a share that "Everyone" has read access to, and the software is added via UNC path.
I also created a "Chrome_65.85" Security Group with a Global Group Scope, and added a test computer as a member.
In the "Chrome_Browser" GPO I added the "Chrome_65.85" Security Group under the Scope tab in the Security FIltering section. In the GPO Delegation tab the Security Group has Read and Apply group policy "Allow" permissions.
The GPO sits in the root of the Domain "Highest Level", the Security Group sits in a Sofware OU. And the computer Object sits severl levels in an OU.
Security Group is in; Domain | Software OU.
Computer Object sitis in; Domain | Computers | Computer x64 | Computer Win7 x64.
GPO sits right under the Domain level. I even tried putting the GPO in the Software and Computer OUs.
When I do GPUPDATE /FORCE on the test machine it does feed me the line about a Software policy Which can only be installed at boot, I reboot and there still is no software. Also when I perform GPRESULT /R I can see that the "Chrome_Browser" GPO has been assigned at the Machine Level. So it seems that the Computer can see and is apply the policy. Something is not pushing the software though.
One other thing to note is that all the users on the domain have Local admin to their computers.
Any ideas or suggestions?