Solved

Any way to allow non-admin end-users to update certain software

Posted on 2012-03-18
3
751 Views
Last Modified: 2013-03-11
In a default Windows domain, non-admin users cannot update Adobe Flash or Reader.  Is there an easy way to work around this?  I currently push out the software via GPO, but I would prefer that each user be prompted for the update and be allowed to install it, just like it happens on standalone and admin computers.

Doable?
0
Comment
Question by:murryc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 7

Expert Comment

by:waleeda
ID: 37736344
if you have somthing like SCCM System Center Configuration Manager, you can push the update as well as do silent installation in the backgroud without giving the user local admin priviledge...
0
 
LVL 7

Accepted Solution

by:
ashutoshsapre earned 500 total points
ID: 37736594
Currently it is not possible, users must have admin privileges to install the Adobe Flash Player updates.

In such case a work around would be to create a script which would run the installer with admin credentials. For this you can use CPAU. So if the installer and script is available for the user then they just have to launch the script to install the software.

In Adobe Flash Player usually update is run using a Adobe installer utility, it may be difficult for an user to even try the above work around. So, the best option is wait for the version 11.2. This version of Adobe Flash Player once installed will not require any user intervention for update installation. I am not sure when it will be available. Current version available is 11.1.102.63
0
 
LVL 1

Expert Comment

by:ev89pimp
ID: 38975362
To automate flash player, I created a Policy and added the following:
 
Under Computer Config, Prefrences, Windows Setting, Files I created a new File Item.
 
I set Action = Replace, Created a Source File named mms.cfg* (more below) and have the destination file as systemroot%\System32\Macromed\Flash\mms.cfg (or %systemroot%\SysWOW64\Macromed\Flash\mms.cfg for x64)
 
*I used notepad to edit the mms.cfg, and used the following in the body:
 
AutoUpdateDisable=0
 SilentAutoUpdateEnable=1
 AutoUpdateInterval=0
 

My non-admin users now update flash in the background silently and automatically.  I'm currently investigating Reader and Java myself at this point so let me know if you find a method
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn how to PXE Boot both BIOS & UEFI machines with DHCP Policies and Custom Vendor Classes
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question