Prevent GPO Uninstall

Posted on 2009-04-30
Last Modified: 2012-05-06
I pushed out a GPO installing an application called Omni Manager.  I checked the box "Uninstall this application when it falls out of the scope of management".  Our license ran out, so I removed the GPO the next day.  It turns out that when the license ran out, it uninstalled itself (it's a software as a service application).  I can't reinstall the application either since it checks the product key online in order to install.  So the problem is that every pc is trying to uninstall an application that can't be uninstalled (because it's not installed) every time the pc is restarted.  Every pc logs this event in the Event Viewer / Application:

Product: Omni Manager -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: Action1, location: C:\Program Files\Omni Manager\, command: c:\program files\omni manager\unwise.exe /s "c:\program files\omni manager\install.log"

So my question is -
How can I prevent the uninstall command (specifically "Action: Action1, location: C:\Program Files\Omni Manager\, command: c:\program files\omni manager\unwise.exe /s "c:\program files\omni manager\install.log"") from being issued to our pc's?

We have all Windows 2003 servers and mostly XP machines with a few 2000 and Vista also.

Thank you in advance for your help as I am extremely frustrated at this point!!
Question by:DelAir0
    LVL 66

    Expert Comment

    If you removed the GPO, have you run a gpupdate /force on one of the clients to test it? Might not have been updated locally.....

    Author Comment

    johnb6767 - Thanks for the response!
    All of our clients are running the GPO, the problem is that the GPO is trying to uninstall an application that can't be uninstalled, because it's already uninstalled.  So every time the pc's are started, the application tries to uninstall and fails.  I need Active Directory to stop telling the pc's to uninstall this application.
    LVL 76

    Expert Comment

    When you say you removed the GPO, did you mean you unlinked it.
    I think because you had the  "uninstall" directive check, this is why the removal process is hanging around.
    The auto-removal may have left residual registry entries.


    Author Comment

    arnold - Thanks for the response!
    Yes I unlinked it, I also tried deleting the link (not the GPO itself), both of which had the same result.
    To test the residual registry entries theory I disconnected the network cable on one of the pc's having the issue and restarted the pc.  The application did not try to automatically uninstall.  This leads me to believe that the "command: c:\program files\omni manager\unwise.exe /s "c:\program files\omni manager\install.log" command is coming from the server side.  Any ideas on where on the server this command is coming from?
    LVL 76

    Accepted Solution

    GPOs are cached and are not enforced when the Slow link speed detection mechanism indicates that the system is either offsite or is not within range of a DC.
    Search the registry for the command. You could then push a registry remove directive.

    Author Comment

    arnold - Thank You, you led me in the right direction
    Solution - arnold was right about the GPOs being cached locally.  Although the command to uninstall the application wasn't in the registry, I did a search in the registry for "Omni" and found this key
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt\{d5a1fedb-9f04-4f48-9a1d-44d4ce49100c}]
    I deleted this key and presto, no more trying to uninstall an application that was uninstallable.  I created a .bat file that deletes the registry key and applied that in a GPO.  

    Thanks for all the help!

    Author Closing Comment

    Look at the final post for the remainder of the solution

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    In a hurry?.. scroll down to "HERE's HOW TO DO IT" Section. Greetings All, I was going to post this as question/solution, but its seems more appropriate as an article considering its length.  I felt it important to illucidate all the details c…
    Have you ever had a hard drive that you can't boot into, but need to change the registry? Here is the solution! This article guides you through accessing and editing a registry of a non-primary drive. To read registry information on a non-prim…
    This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
    In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now