Avatar of daCrusha
daCrusha asked on

Users logon script does not run with administrative privileges

I have recently created a script that installs Acrobat 8.0 standard at logon.  I have a VBS script that executes the MSIEXEC process.  I added this file to User Configuration - Windows Settings - Scripts(logon/logoff) - Logon.  I have placed the script in the SYSVOL folder and confirmed that it does execute.  If I add it to the machine startup it finishes successfully.  If I add it to the User logon I get this error in the msiexec log file:

Product: Adobe Acrobat  8 Standard -- You do not have sufficient privileges to run this installer.  Setup will now terminate.  

If the user account is given local admin rights the script runs successfully.  Any idea where I can look to make sure that I didn't configure something incorrectly.  I did notice that after the user account logs in the script is executed.  Is it a possibility that it is trying to run with the account credentials and not the SYSTEM?
Active DirectoryWindows Server 2003

Avatar of undefined
Last Comment
Serge Fournier

8/22/2022 - Mon
Serge Fournier

a network logon script (or any network script)
cannot execute a path that is situated on another network path
or else all virus would be FREE !

you have to copy your acrobat setup on the computer locally, then execute the setup from logon will work
Serge Fournier

be sure to chek if acrobat is already there before you install it

or else it will always install !
(btw, i got install string (vbs) for a lot of programs if you need)

I'm pretty sure what you are trying to do isn't working because you have to be logged on as Administrator to do this. I have a question: Why would you want Acrobat to try to install every time you log on?

Also, I found this:
Elevate privledges in user Logon Script in GPO
Your help has saved me hundreds of hours of internet surfing.

Why are you installing this way?

Why not use "Software Installation" in Group Policy.

Create a group of users that you want Adobe installed, filter the GPO by this group and link it to an OU that captures all the users.

Which ever machine these guys logon to will automatically pull down the install.

You can apply the same principle to Computers, but computers will install in computer startup rather than logon.

You can usually find and MSI package by installing Adobe and then checking in C:\Windows\Installer which will work or just copy all installation files including the MSI to your installation share.

Saves alot of hassle with vbscript.

The reason I am running via VBS is so that I can check if the installation has been run before.  If it has it bypasses the setup removes itself from the filtered group.  If it doesn't have acrobat installed it installs it using logging and can trap errors generated by msiexec.  It send me a report whether or not it installed correctly.  I have tried using the Software installation in group policy but it doesn't appear to be robust enough to report and I need to run this update to 50+ silently.  When I run the script based on Machine at startup it runs successfully.  I thought that logon scripts were not actually executed with the user's credentials.  Is that not the case?  

I would be interested in using the software Installation in group policy, do you know of a way to deploy silently?  I use the command line switches in msiexec to /qn.  If there are any prompts or dialogs that can be canceled you can count of all the users to cancel the job.  

Thanks a ton (I wish we had SMS!!)

Forgot to mention:  It works exactly the way I had scripted when deploying via machines.  This is only users.  
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Serge Fournier

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question