Originally Posted By: Shawn
So if you wanted to hit just a single machine
That is handled with a "Global Security Group" containing the computer accounts that should have the software installed. Change the security for the GPO on the OU. Withdraw at least the "Apply Group Policy" for the "Authenticated users" and give "Read" and "Apply Group Policy" for your own Global Security Group. If you want to install the package to only one computer, the group should only contain that computer account.
The net mask is to define the network where the software installation is allowed. If I am at home, working via VPN, I would not want that the software package starts installing. Just a matter of bandwith.
If you only have the network 192.168.1.0/24 at work, you would want that your computer has an address in that network before installing the software. But are you sure that the computer you want to install the software to always has address 192.168.1.36? Don't you use DHCP?
NetworkID in the INI-file refers to "Network Addresses" and the masks of the networks where you want to allow the installation.
 Originally Posted By: apronk
Why not stick the GPO to the OU the computer is in and be done with it
Because the OU can contain more accounts than only that computer.