{"id":784,"date":"2015-04-19T22:52:28","date_gmt":"2015-04-19T20:52:28","guid":{"rendered":"http:\/\/www.netexpertise.eu\/en\/?p=784"},"modified":"2021-10-13T21:48:57","modified_gmt":"2021-10-13T19:48:57","slug":"ibm-client-access-deployment-gpo","status":"publish","type":"post","link":"http:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html","title":{"rendered":"Deploy IBM iSeries Client Access with Windows Group Policies"},"content":{"rendered":"\n

Client Access can be deployed by GPO<\/a> with the MSI file provided in the installation directory. However you will have to create a MST file containing custom parameters that will add up to the MSI.<\/p>\n\n\n\n


Create a Transform file<\/h3>\n\n\n\n

The transform file contains customized settings you may apply to the software you are going to deploy via group policy. The MSI does not need to be changed.
 
Download Instedit<\/a> to customize the MSI file.
Run Instedit and click on File -> Open and browse to image32\\cwbinstall.msi. The MST (Tranform file) will also apply to the 64 bit package in a next step.
In the top menu, click Transform -> New Transform
Create Tranform.mst in the same folder.
 
We will now modify the MST.
Click on the Property table, then on the right hand pane, right click -> Add row
Fill in Property and Value
Ex: CWBPrimaryLang\/MRI2928 for French as default language
Click Save in the File menu. All the changes will be saved in the new MST file. The MSI remains as is.

<\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n


A few things can be customized. A list of public properties is available at
http:\/\/pic.dhe.ibm.com\/infocenter\/iseries\/v7r1m0\/topic\/rzaij\/rzaijpblcprop.htm<\/a>
 
Some useful properties you can change in the Property table:
CWBInstallType: Complete\/Custom\/PC5250User (only valid on a first time installation)
CWBPrimaryLang: MRI2928
In the Feature table: Set level to 1 on features you want to install
The full list is available at
http:\/\/www-01.ibm.com\/support\/knowledgecenter\/ssw_ibm_i_71\/rzaij\/rzaijfeattree.htm<\/a>
 
Note: If iSeries Client Access is already installed on the computer you’re running the GPO on, it will not overwrite the list of installed features. It will just upgrade the software. What a pity!
2 workarounds:
– Uninstall Client Access and run a GPO with the new features listed in the MST file
– Run manually msiexec \/i cwbinstall.msi ADDLOCAL=feature (where feature is the requested feature such as dotnet or whatever)
 
Note: Setup will display in the default language as well as in “All Programs” menu as explained on IBM<\/a>. The language selection is only available when running setup.exe. However, the menu bar within applications will be installed as requested in CWBPrimaryLang.<\/p>\n\n\n\n


How do I use the MST?<\/h3>\n\n\n\n

You can run the transform on a test machine from the command line to make sure it does what you want:<\/p>\n\n\n\n

msiexec \/i cwbinstall.msi TRANSFORMS=Transform.mst<\/code><\/pre>\n\n\n\n

If everything’s alright, you can create a Group Policy Object
1. Create a new Software Installation Package in the Computer Settings node of Group Policy Object Editor.
2. Select the cwbinstall MSI file, and then click Advanced (This is the ONLY opportunity you will have to apply a transform to this Package).
3. For the 32-bit package, on the deployment tab, click Advanced, and untick “Make this 32-bit X86 application available to Win64 machines”
3. On the Modifications tab, click Add and select the MST file you created previously.
4. If you have both 32 and 64 bits operating systems on your network, add a second software within the same GPO, and select the 64-bit iSeries application.
The system will choose the right software when applying the GPO
 <\/p>\n\n\n\n
Service Packs and Prerequisites<\/h3>\n\n\n\n
For better stability, you should install the latest iSeries Client Access service pack on top of the original software.
Download Microsoft Visual C++ 2005 Redistributable SP1 Security update – This is a service pack requirement – vcredist_x86.EXE and vcredist_x64.EXE on Microsoft<\/a>.
Download the 32 and 64 bit latest service packs on IBM SP Download page<\/a>.
Extract vcredist_xXX.exe with 7zip or another software to get the MSI and CAB files.
 
Pre-install the service pack executable on a computer and choose to unpack the files in a permanent folder. Copy the folder content to your default installation image, overwriting older files.
As for the vcredist, create a new GPO with the 32 and 64-bit MSI (Don’t untick the 32-bit compatibility as 64-bit OS need both 32 and 64-bit Visual C++).

<\/p>\n\n\n\n
\"Sort<\/figure><\/div>\n\n\n\n

Change the GPO order so client Access runs after vcredist: Click on the OU; On the right pane, make sure Client Access has position number 1 (it’s in the reverse order, first line executes last!)
Redeploy the Client Access GPO with the built-in service pack<\/p>\n\n\n\n

RSOP<\/h3>\n\n\n\n
You can check the deployment went ok with the usual Microsoft tools such as rsop.msc or gpresult.<\/p>\n","protected":false},"excerpt":{"rendered":"
Client Access can be deployed by GPO with the MSI file provided in the installation directory. However you will have to create a MST file containing custom parameters that will add up to the MSI. Create a Transform file The transform file contains customized settings you may apply to the software you are going to […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[210],"tags":[396,357,215,405,230,391],"yoast_head":"\nNetexpertise - Deploy IBM iSeries Client Access with Windows Group Policies<\/title>\n<meta name=\"description\" content=\"D\u00e9ploy IBM iSeries Client Access by GPO and customize language and setup with the MSI and a MST transform file\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Netexpertise - Deploy IBM iSeries Client Access with Windows Group Policies\" \/>\n<meta property=\"og:description\" content=\"D\u00e9ploy IBM iSeries Client Access by GPO and customize language and setup with the MSI and a MST transform file\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html\" \/>\n<meta property=\"og:site_name\" content=\"Netexpertise\" \/>\n<meta property=\"article:published_time\" content=\"2015-04-19T20:52:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-10-13T19:48:57+00:00\" \/>\n<meta name=\"author\" content=\"dave\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@netexpertise\" \/>\n<meta name=\"twitter:site\" content=\"@netexpertise\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html\",\"url\":\"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html\",\"name\":\"Netexpertise - Deploy IBM iSeries Client Access with Windows Group Policies\",\"isPartOf\":{\"@id\":\"http:\/\/www.netexpertise.eu\/en\/#website\"},\"datePublished\":\"2015-04-19T20:52:28+00:00\",\"dateModified\":\"2021-10-13T19:48:57+00:00\",\"author\":{\"@id\":\"http:\/\/www.netexpertise.eu\/en\/#\/schema\/person\/cb4cd666549d22e9070ec1cfc1a496fa\"},\"description\":\"D\u00e9ploy IBM iSeries Client Access by GPO and customize language and setup with the MSI and a MST transform file\",\"breadcrumb\":{\"@id\":\"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"http:\/\/www.netexpertise.eu\/en\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Deploy IBM iSeries Client Access with Windows Group Policies\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/www.netexpertise.eu\/en\/#website\",\"url\":\"http:\/\/www.netexpertise.eu\/en\/\",\"name\":\"Netexpertise\",\"description\":\"Systems \/ Networks \/ DevOps\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/www.netexpertise.eu\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"http:\/\/www.netexpertise.eu\/en\/#\/schema\/person\/cb4cd666549d22e9070ec1cfc1a496fa\",\"name\":\"dave\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"http:\/\/www.netexpertise.eu\/en\/#\/schema\/person\/image\/\",\"url\":\"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g\",\"contentUrl\":\"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g\",\"caption\":\"dave\"},\"sameAs\":[\"http:\/\/www.netexpertise.eu\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Netexpertise - Deploy IBM iSeries Client Access with Windows Group Policies","description":"D\u00e9ploy IBM iSeries Client Access by GPO and customize language and setup with the MSI and a MST transform file","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html","og_locale":"en_US","og_type":"article","og_title":"Netexpertise - Deploy IBM iSeries Client Access with Windows Group Policies","og_description":"D\u00e9ploy IBM iSeries Client Access by GPO and customize language and setup with the MSI and a MST transform file","og_url":"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html","og_site_name":"Netexpertise","article_published_time":"2015-04-19T20:52:28+00:00","article_modified_time":"2021-10-13T19:48:57+00:00","author":"dave","twitter_card":"summary_large_image","twitter_creator":"@netexpertise","twitter_site":"@netexpertise","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html","url":"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html","name":"Netexpertise - Deploy IBM iSeries Client Access with Windows Group Policies","isPartOf":{"@id":"http:\/\/www.netexpertise.eu\/en\/#website"},"datePublished":"2015-04-19T20:52:28+00:00","dateModified":"2021-10-13T19:48:57+00:00","author":{"@id":"http:\/\/www.netexpertise.eu\/en\/#\/schema\/person\/cb4cd666549d22e9070ec1cfc1a496fa"},"description":"D\u00e9ploy IBM iSeries Client Access by GPO and customize language and setup with the MSI and a MST transform file","breadcrumb":{"@id":"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.netexpertise.eu\/en\/systems\/as400\/ibm-client-access-deployment-gpo.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"http:\/\/www.netexpertise.eu\/en"},{"@type":"ListItem","position":2,"name":"Deploy IBM iSeries Client Access with Windows Group Policies"}]},{"@type":"WebSite","@id":"http:\/\/www.netexpertise.eu\/en\/#website","url":"http:\/\/www.netexpertise.eu\/en\/","name":"Netexpertise","description":"Systems \/ Networks \/ DevOps","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/www.netexpertise.eu\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"http:\/\/www.netexpertise.eu\/en\/#\/schema\/person\/cb4cd666549d22e9070ec1cfc1a496fa","name":"dave","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"http:\/\/www.netexpertise.eu\/en\/#\/schema\/person\/image\/","url":"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g","contentUrl":"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g","caption":"dave"},"sameAs":["http:\/\/www.netexpertise.eu"]}]}},"_links":{"self":[{"href":"http:\/\/www.netexpertise.eu\/en\/wp-json\/wp\/v2\/posts\/784"}],"collection":[{"href":"http:\/\/www.netexpertise.eu\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.netexpertise.eu\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.netexpertise.eu\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.netexpertise.eu\/en\/wp-json\/wp\/v2\/comments?post=784"}],"version-history":[{"count":0,"href":"http:\/\/www.netexpertise.eu\/en\/wp-json\/wp\/v2\/posts\/784\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.netexpertise.eu\/en\/wp-json\/wp\/v2\/media?parent=784"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.netexpertise.eu\/en\/wp-json\/wp\/v2\/categories?post=784"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.netexpertise.eu\/en\/wp-json\/wp\/v2\/tags?post=784"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}