Solved

Silent Remote Installation and User Level Change

Posted on 2007-11-29
4
1,090 Views
Last Modified: 2012-06-21
Hey Experts!

This one might be a bit of a doozy, so I apologize in advance.  I have about 100 computers that I need to install some software on that are scattered all around the building.  I would prefer to do the install remotely and silently (ie, the user is unaware of anything going on).  Not trying to sound lazy, but there is only 1 of me and my boss would like this done by next week (in addition to several other projects).

On top of the install, I need to make the users on the PC administrators so they can properly run the software.  All of the users are domain accounts and should already be on the machine as Power Users.  Each machine has different users though.  So the second part of this would be to find out if there is a way to find all of the Power Users on a machine and change them to Administrators.  This would preferably also be done silently in the background.  If a user was currently logged in, it would either prompt them to log off and back on, or just make the change next time the login.

I hope this all makes sense and if not, please just let me know where I can clarify or expound.  Thanks in advance!!
0
Comment
Question by:parkridgelibrary
4 Comments
 
LVL 53

Expert Comment

by:McKnife
ID: 20378239
Could be easy, could be hard, depending on the software and if you have a domain running - do you?
First, the group problem should be very easy: to add a user to a group using a script, there is the command net localgroup /add. net help localgroup will show the syntax.
A domain startup script could make use of a batch like
if %computername%==xy net localgroup /add administrators xyuser
if %computername%==123 net localgroup /add administrators 123user
...
(of course an ugly solution but a solution ;)
You could of course use
net localgroup /add administrators domain-users
now everyone's admin everywhere (not on the servers of course)
very ugly...
What software would require admin rights to run? Ask the manufacturer for help, the admin thing is the worst that could happen to a managed environment :)

To deploy the software, you could see if the setup has an unattended switch ->documentation or ask the manufacturer how to deploy. If there is no such switch, use wininstall le to create an msi package and deploy it using either a startupscript or domain software deployment through GPOs.

0
 
LVL 63

Expert Comment

by:SysExpert
ID: 20379337
DO you plan to leave the users as ADmins or change them back ?


Giving Admin rights is not a good idea for the long term.

You can also export lists of users/ groups using hte Ad tools and WIndows resource kit tools, as well as some free tools via
sysinternals.com ( now owned by MS )


I hope this helps !
0
 

Author Comment

by:parkridgelibrary
ID: 20381310
Yes we are on a domain.  Unfortunately from my experience so far, you have to have admin rights for the software to run properly.  The software is a catalog-type software that is poorly written, but requires for us to function right now.  I can check to see if it will function as a power user, but my experience so far has been that it wants to be an admin.  
0
 
LVL 15

Accepted Solution

by:
veedar earned 500 total points
ID: 20389280
If your software is widely used you may find info on
how to to deploy it here...

http://www.appdeploy.com/

In any case if you can figure out how to install your
app from the command line then it's pretty easy to
install it on remote systems using psexec

http://www.microsoft.com/technet/sysinternals/utilities/psexec.mspx
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now