I have a couple of Advertisements such as 1. Shutdown the computers 2. Gpupdate /force 3. Autologin locally I never know which advertisement option to choose 1. Always Rerun the program - If I understand this correctly it will try to re-run the program until the TS has a status of succeeded? 2.Never re-run advertised program - If I understand this correctly it will run the advertisement on a collection, and succeed or failure it will not be able to be re-run on the same collection again? 3. Re-run if failed previous attempt - this one is self explanatory. 4. Re-run if succeeded on previous attempt - If the advertisement comes back with a status of succeeded would it just not re-run over and over the same advertisement on the same collection?. I know I am not understanding this one. Given the above advertisements I laid out above which advertisement option is best. Thanks as always as I am trying to understand the concept of each of these options.

It depends upon your goal for each. Here's a blog post I did a while back describing each of these options and their behavior: http://blog.configmgrftw.com/?p=111 For 1 & 2 I would say always rerun. Don't know what you use 3 for.Jason | http://blog.configmgrftw.com | Twitter @JasonSandys

I see that you have created these advertisements so that every time you make changes in GPO or assign a new Group policy , you run them in a sequence for applying the change. As they are repeatable actions. I say all three should have "Always Rerun" option selected.

Can you let us know what you use each of these advertisements for?

Shutdown the computers -it's obvious what this one does. Gpupdate /force updates a policy after our network administrator makes changes to the policies. We are a college so we run a program called Deep Freeze which freezes the computer in a pristine state so any changes the students make on a reboot are gone and the computer goes back to the way we set it up. The problem with running deep freeze any updates to any policies do not take until we "Thaw" the machines and do a gpupdate /force that is why I created this sccm TS. Autologin locally- Many of the installations we do after we do after the OS has been laid down do not have unattended or silent installation switches so we use autoit to accomplish the installation, we have found that autoit only works properly when login to the desktop. The Autologin TS basically logs in as the local administrator so autoit can run properly. Here what is does, imports a few regkeys and reboots and then logs in locally as Administrator.

It depends upon your goal for each. Here's a blog post I did a while back describing each of these options and their behavior: http://blog.configmgrftw.com/?p=111 For 1 & 2 I would say always rerun. Don't know what you use 3 for. Jason | http://blog.configmgrftw.com | Twitter @JasonSandys Thanks Jason, as always you and everyone else have been really helpful in my understanding of Sccm, I read your blog, it's very well done. I do have a question, if I choose always rerun a program and it comes back with a status of "Succeeded" it should not re-run again on the same collection over and over again?, correct?, or do I have disable the advertisement right away after a status of "Succeeded" so it does not re-run over and over. PS:All my TS are mandatory.

If you have a mandatory assignment for an advertisement thats set to 'Always Re-Run' and if it was successful OR unsuccessful on a computer, then it will not run on that computer again unless you change the mandatory assignment time. So you don tneed to disable the advertisement right away.

Gpupdate /force updates a policy after our network administrator makes changes to the policies. We are a college so we run a program called Deep Freeze which freezes the computer in a pristine state so any changes the students make on a reboot are gone and the computer goes back to the way we set it up. The problem with running deep freeze any updates to any policies do not take until we "Thaw" the machines and do a gpupdate /force that is why I created this sccm TS. Correct me if I am wrong. Depending on your settings GPO will refresh every 90 minutes on clients. I am a bit ignorant when it comes to GPO but wont GPO update the machine policy during boot, before user login, and user policy will update as the user logs in?

Yes, that is correct. Machine/Computer policy will be applied during the boot, and User policy will be applied when the user logs in. Also, as you mentioned, GPOs get refreshed/re-applied at the interval of every 90 minutes or the time you have set. But some GPOs may need a reboot for the changes to take effect, if they are changed when the computer is running.