How do I turn off a software install policy and not have it uninstall the software.

I used GP to install Adobe 9.1 and of course Adobe is now at 9.3.2. GP will still come up at start up installing 9.1 and I want to stop it from doing that.
Whenever I would try to remove 9.1 from the GPO or disable the GPO it removes Adobe, even a newer version. I haven't tried doing anything for a while, (since we upgraded to 9.3), but I need to get this cleaned up.
I appreciate and thank you for any help you can give.
saline_countyAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ThatSharepointGuyCommented:
Group Policy wasn't create to uninstall software.  You can create software packages to be pushed, but there is no native support for the uninstallation of software via GPO.  

NOTE: Playing with the Registry can be very bad if you don't know what you're doing.  Be very careful, or don't mess with it at all :)  Be sure to create a backup of your registry by going to START > RUN > REGEDT32 > FILE > EXPORT and export your registry settings to a folder that is not on your primary hard drive, or to a floppy/usb drive/cd.


You could script it.  I went looking through the registry and found out where the uninstall entry is located. "HKLM" stands for the "HKey_Local_Machine" entry under the root of the Registry.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

And just looking at what I have installed here, it looks like these are the entries for Adobe Acrobat (and one for Flash):
{AF36CE1D-FD2C-4BA0-93FA-1196785DD610}
{AC76BA86-1033-0000-7760-000000000004}{AC76BA86-1033-0000-7760-000000000004}

What i would do, is use Regedt32 or Regedit to browse to that Uninstall directory, and start selecting each of those entries...in the right-hand pane, you should be able to look at the description and see what is what.

After you find out what it is, you can use
MSIEXEC /UNINSTALL {AC76BA86-7AD7-1033-7B44-A80000000002} REBOOT=SUPRESS

Just use the key that is for the version you want to try.  Put this in a batch file on your desktop to ensure that it does what you want it to do.

I'm attaching some "code", but the code is just the switches from the Windows Installer.  You can get the same thing by going to START > RUN > and type in msiexec /?



Windows ® Installer. V 4.5.6002.18005 

msiexec /Option <Required Parameter> [Optional Parameter]

Install Options
	</package | /i> <Product.msi>
		Installs or configures a product
	/a <Product.msi>
		Administrative install - Installs a product on the network
	/j<u|m> <Product.msi> [/t <Transform List>] [/g <Language ID>]
		Advertises a product - m to all users, u to current user
	</uninstall | /x> <Product.msi | ProductCode>
		Uninstalls the product
Display Options
	/quiet
		Quiet mode, no user interaction
	/passive
		Unattended mode - progress bar only
	/q[n|b|r|f]
		Sets user interface level
		n - No UI
		b - Basic UI
		r - Reduced UI
		f - Full UI (default)
	/help
		Help information
Restart Options
	/norestart
		Do not restart after the installation is complete
	/promptrestart
		Prompts the user for restart if necessary
	/forcerestart
		Always restart the computer after installation
Logging Options
	/l[i|w|e|a|r|u|c|m|o|p|v|x|+|!|*] <LogFile>
		i - Status messages
		w - Nonfatal warnings
		e - All error messages
		a - Start up of actions
		r - Action-specific records
		u - User requests
		c - Initial UI parameters
		m - Out-of-memory or fatal exit information
		o - Out-of-disk-space messages
		p - Terminal properties
		v - Verbose output
		x - Extra debugging information
		+ - Append to existing log file
		! - Flush each line to the log
		* - Log all information, except for v and x options
	/log <LogFile>
		Equivalent of /l* <LogFile>
Update Options
	/update <Update1.msp>[;Update2.msp]
		Applies update(s)
	/uninstall <PatchCodeGuid>[;Update2.msp] /package <Product.msi | ProductCode>
		Remove update(s) for a product
Repair Options
	/f[p|e|c|m|s|o|d|a|u|v] <Product.msi | ProductCode>
		Repairs a product
		p - only if file is missing
		o - if file is missing or an older version is installed (default)
		e - if file is missing or an equal or older version is installed
		d - if file is missing or a different version is installed
		c - if file is missing or checksum does not match the calculated value
		a - forces all files to be reinstalled
		u - all required user-specific registry entries (default)
		m - all required computer-specific registry entries (default)
		s - all existing shortcuts (default)
		v - runs from source and recaches local package
Setting Public Properties
	[PROPERTY=PropertyValue]

Consult the Windows ® Installer SDK for additional documentation on the
command line syntax.

Copyright © Microsoft Corporation. All rights reserved.
Portions of this software are based in part on the work of the Independent JPEG Group.

Open in new window

0
saline_countyAuthor Commented:
Just to clarify I do not want to uninstall the program. I want to shut off the GPO that installed it in the first place but when I do it uninstalls the program, even newer versions. I believe that it falls under this command in the GPO:
"Uninstall this application when it falls out of the scope of management"
I need some pointers on taking the GPO out so that it will quit trying to install the program without it uninstalling the program.
Thank You for your prompt answer though.
0
ThatSharepointGuyCommented:
Saline,

Gotcha.  I was typing something up, but then got a call and had to take that (it is, after all, the job that pays me!).  

Unfortunately, I'm at the office and don't want to fiddle here, so i can't get you the exact step by step guide at home like I would, but as far as Microsoft is concerned, read up on http://support.microsoft.com/kb/816102.  Specifically, pay interest to the "Remove a Package" section.  It has two options listed:
- Click Immediately uninstall the software  from                                users and computers, and then click OK.
- Click Allow  users to continue to use the                                software but prevent new installations, and then click                                OK.

Choose that second option. It should allow you to continue to use the product, but not install the software anymore.

For future use, what i would do, is create a script that runs in your GPO...the   script will do a number of things:
 
 1 - Check to see if Adobe  is installed.
 2 - If Adobe is not installed, install version xxx.
  3 - If Adobe is installed but version is lower than current version,   install new version
 
 This way, if you ever have to update it,  you can just update the script  and it will force it.  Have the GPO run  at machine startup.
 
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Redefine Your Security with AI & Machine Learning

The implications of AI and machine learning in cyber security are massive and constantly growing, creating both efficiencies and new challenges across the board. Check out our on-demand webinar to learn more about how AI can help your organization!

saline_countyAuthor Commented:
Thank you so much for your help. I think I was trying to remove the GPO rather than just the task.
I am not sure I like using Group Policy for this since some programs update very often and others have extra set up for users to do nadyou need to make sure they all set it up the same way, which isn't always easy.
Anyway I will quit rambling, and again your help was greatly appreciated.
0
ThatSharepointGuyCommented:
You're welcome!

---------
I am not sure I like using Group Policy for this since some programs  update very often and others have extra set up for users to do nadyou  need to make sure they all set it up the same way, which isn't always  easy.
---------

This is why I like to use scripts to install software, rather than letting the GPO do it - because I can control everything that the script does.  If the GPO is pushed, the machines will get it.  The rest is out of the realm of the GPO and now in the realm of my abilities (or, lack of abilities in some cases, lol) to effectively script things to happen when certain conditions are met.  

If you need any help setting up a script to do that, let me know and I'd be more than willing to help ya out!


0
saline_countyAuthor Commented:
That would be great. I am not good at writing scripts but I can revamp an existing one to meet my needs, usually.
0
ThatSharepointGuyCommented:
I don't know how to send messages to other users (or even if it's possible), so we'll post it here.

http://technet.microsoft.com/en-us/library/cc179134.aspx

Good read, if a bit "tech-heavy".  Main thing to pay attention to is this:

The Group Policy Object Editor snap-in includes two extensions for  script deployment:  

Scripts (Startup/Shutdown). Administrators use this  extension to specify scripts that run when the computer starts up or  shuts down. These scripts run as Local System. Scripts  (Startup/Shutdown) is located under the Computer  Configuration\Windows Settings node of Group Policy Object  Editor.
 
Scripts (Logon/Logoff). Administrators use this  extension to specify scripts that run when the user logs on or logs off  the computer. These scripts run as User, not as Administrator. Scripts  (Logon/Logoff) is located under the User  Configuration\Windows Settings node of Group Policy Object  Editor.  

.....

Automatic product reinstall after a user-initiated uninstall does not  work in the same way as when Group Policy Software Installation is used.  With Group Policy Software Installation, if a user removes a  user-assigned application by using Add or Remove Programs  in Control Panel, the Group Policy Software installation extension  automatically reapplies the advertisement information after the user  logs on or the computer restarts. The software is reinstalled the next  time the user selects it or tries to open a file with an associated file  name extension.

And they give you a very nice sample script at the bottom of the page:

setlocal

REM *********************************************************************
REM Environment customization begins here. Modify variables below.
REM *********************************************************************

REM Get ProductName from the Office product's core Setup.xml file.
set ProductName=Enterprise

REM Set DeployServer to a network-accessible location containing the Office source files.
set DeployServer=\\server\share\Office12

REM Set ConfigFile to the configuration file to be used for deployment REM (required)
set ConfigFile=\\server\share\Office12\Enterprise.WW\config.xml

REM Set LogLocation to a central directory to collect log files.
set LogLocation=\\server\share\Office12Logs

REM *********************************************************************
REM Deployment code begins here. Do not modify anything below this line.
REM *********************************************************************

IF NOT "%ProgramFiles(x86)%"=="" SET WOW6432NODE=WOW6432NODE\

reg query HKEY_LOCAL_MACHINE\SOFTWARE\%WOW6432NODE%Microsoft\Windows\CurrentVersion\Uninstall\%ProductName%
if %errorlevel%==1 (goto DeployOffice) else (goto End)

REM If 1 returned, the product was not found. Run setup here.
:DeployOffice
start /wait %DeployServer%\setup.exe /config %ConfigFile%
echo %date% %time% Setup ended with error code %errorlevel%. >> %LogLocation%\%computername%.txt

REM If 0 or other was returned, the product was found or another error occurred. Do nothing.
:End

Endlocal

Open in new window

0
saline_countyAuthor Commented:
I could have posted my email but I wouldn't everyone who reads this thread to have it, so this works well.
Thank you again and I know this will give me a good start. It has been good working with you.
0
ThatSharepointGuyCommented:
You too, mate.
And that's why I didn't post my email as well...
besides, it's a silly one and people would laugh!  
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Management

From novice to tech pro — start learning today.