How to install using GPO only not installed programs?

Question

Active Directory

Good day,
There is a W2008 R2 server
There is a policy that installs 7zip, Chrome, Adobe software.
Such software as Chrome, Adobe themselves are updated.
With each user login, this software tries to install.
How to make it so that only uninstalled programs are installed.

Answer 1

installing software using gpo is a recommended thing only as a last resort.
Master software management using chocolatey or
windows package manager
The latter is available if you have Windows Management Framework 5 installed - by default in windows 10. The specified package must be installed in other OSes.
How to add the chocolatey package manager is written on the corresponding site.
Accordingly, the software installation looks like this:
chocolatey : choco install 7-zip,googlechrome,adobereader,k-litecodeckpackmega -y
package manager : '7-zip','googlechrome','adobereader','k-litecodeckpackmega' | foreach {install package $_ -force}
in fact, the same repository is used - chocolatey, it's just that in WMF5 Microsoft added it as one of the well-known package repositories.
You can shove scripts into the logon, for example.
If the software is installed - it will not be installed again.
there are options for updating the software.
chocolatey : choco upgrade all
for the package manager is a bit more complicated :D
If you want to fix on one version of the software, you can specify the desired version during installation (from those available in the repository)
Well, you can steer everyone from one control machine via WINRM (you will need to configure policies in the domain) .
If you are afraid that the necessary software will disappear from chocolatey, the chocolatey.org website has a description of how to raise your repository (including in the form of a simple shared folder), how to prepare packages for your repository, and so on and so forth.

Answer 2

Such software as Chrome, Adobe themselves are updated.

As I already wrote: you can change an already deployed administrative installation by directly editing the files in the folder. Change the MSI with Orca . For example, for Adobe Reader XI, you can disable self-updating by changing [Tables.Property].UPDATE_UI_MODE from 3 (&Install updates automatically (recommended)) to 0 (&Check for and install updates manually (not recommended))

I'm satisfied that the software itself is updated

I will continue with the example. Adobe Reader XI is automatically updated to Adobe Reader DC (rebranded Adobe Reader 2015). But Adobe Reader XI updates continue to be released (at least two: 015, 016) - they can only be installed manually.
Q: Why doesn't Adobe Reader DC fit in a corporate environment? You can talk a lot about the interface made under Win10, errors, etc. And everything is simple - Adobe Reader DC does not open PDF generated by the tax office - I think that's enough.