Removing Applications Deployed With Group Policy

By Author: fiona
Total Articles: 190
Comment this article

At some point, users might no longer require an application, so you might need to remove it. In 70-686 exam, you learned to terminate the effects of a GPO by unlinking or deleting the GPO. However, if you delete a GPO that deploys a software application, the application cannot be uninstalled with Group Policy. If the application cannot be uninstalled with Group Policy, you (or the users) must manually uninstall the application from each client computer. To avoid this hazard, you must remove applications deployed with Group Policy in three steps:
1.Choose the software removal method you want to implement.
2.Allow the software removal to be processed.
3.Delete the GPO.
Because a great number of users and their computers can be affected by the removal of applications deployed with Group Policy, you should carefully consider the effects of removing these applications.
Software Removal Methods
There are two options for removing software deployed with Group Policy. You can immediately uninstall the software from users and computers (known as a forced removal), ...
... or you can allow users to continue to use the software, but prevent new installations (known as an optional removal).
You should choose a forced removal if a software application is no longer used. After the software is deleted, users will not be able to install or run the software. Although you specify that you want to "immediately" uninstall the software in this option, the software is actually deleted in the following fashion:
Software assigned to computers is automatically deleted from the computer the next time Windows 7 certificate the computer is rebooted or turned on.
Software assigned to computers that are not attached to the network is automatically deleted the next time the computer is connected to the network and
rebooted or turned on when the computer account logs on to Active Directory.
Software assigned or published to users is automatically deleted from the computer the next time the user logs on.
Software assigned or published to users on computers that are not attached to the network is automatically deleted the next time the user logs on to Active Directory.
Because the software is not "immediately" deleted, do not delete the GPO until there has been sufficient time for the software removal to be processed.
You should choose an optional removal if a version of a software application is no longer supported. The software is removed from deployment without forcing the (physical) removal of the software from the computers of users who are still using the software. Users can continue to use the software until they remove it themselves. How?ever, no user is able to install the mcse training software (from the Start menu, from Add Or Remove Programs in Control Panel, or by document invocation).