asked on

Users logon script does not run with administrative privileges

I have recently created a script that installs Acrobat 8.0 standard at logon. I have a VBS script that executes the MSIEXEC process. I added this file to User Configuration - Windows Settings - Scripts(logon/logoff) - Logon. I have placed the script in the SYSVOL folder and confirmed that it does execute. If I add it to the machine startup it finishes successfully. If I add it to the User logon I get this error in the msiexec log file:

Product: Adobe Acrobat 8 Standard -- You do not have sufficient privileges to run this installer. Setup will now terminate.

If the user account is given local admin rights the script runs successfully. Any idea where I can look to make sure that I didn't configure something incorrectly. I did notice that after the user account logs in the script is executed. Is it a possibility that it is trying to run with the account credentials and not the SYSTEM?

Serge Fournier

a network logon script (or any network script)
cannot execute a path that is situated on another network path
or else all virus would be FREE !

you have to copy your acrobat setup on the computer locally, then execute the setup from logon will work

Serge Fournier

be sure to chek if acrobat is already there before you install it

or else it will always install !
(btw, i got install string (vbs) for a lot of programs if you need)

alikaz3

I'm pretty sure what you are trying to do isn't working because you have to be logged on as Administrator to do this. I have a question: Why would you want Acrobat to try to install every time you log on?

Also, I found this:
Elevate privledges in user Logon Script in GPO
https://www.experts-exchange.com/questions/23237957/Elevate-privledges-in-user-Logon-Script-in-GPO.html

geedoubleu

Why are you installing this way?

Why not use "Software Installation" in Group Policy.

Create a group of users that you want Adobe installed, filter the GPO by this group and link it to an OU that captures all the users.

Which ever machine these guys logon to will automatically pull down the install.

You can apply the same principle to Computers, but computers will install in computer startup rather than logon.

You can usually find and MSI package by installing Adobe and then checking in C:\Windows\Installer which will work or just copy all installation files including the MSI to your installation share.

Saves alot of hassle with vbscript.

daCrusha

ASKER

The reason I am running via VBS is so that I can check if the installation has been run before. If it has it bypasses the setup removes itself from the filtered group. If it doesn't have acrobat installed it installs it using logging and can trap errors generated by msiexec. It send me a report whether or not it installed correctly. I have tried using the Software installation in group policy but it doesn't appear to be robust enough to report and I need to run this update to 50+ silently. When I run the script based on Machine at startup it runs successfully. I thought that logon scripts were not actually executed with the user's credentials. Is that not the case?

I would be interested in using the software Installation in group policy, do you know of a way to deploy silently? I use the command line switches in msiexec to /qn. If there are any prompts or dialogs that can be canceled you can count of all the users to cancel the job.

Thanks a ton (I wish we had SMS!!)

daCrusha

ASKER

Forgot to mention: It works exactly the way I had scripted when deploying via machines. This is only users.

ASKER CERTIFIED SOLUTION

Serge Fournier

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial