Avatar of Techrunner
Techrunner
 asked on

Deploy exe update using GPO

Hello Experts,
I want to deploy an exe update file to all our domain users. In this regard, I created a batch file and GPO. But when the user logs on to the pc,the error message appears

" You do have privilege in install on this machine. This installation cannot be completed correctly unless you are an administrator"

More Details
We have widnows 2008 domain
I created the shared folder, under this folder i copied the setup file and then I created a batch file

@echo off
\\servername\CertificateUpdate\Setup.exe

Then I create GPO
user configuration >  policies> Windows Settings > Logon Scripts

\\servername\CertificateUpdate\BatchFile.bat

Even I have tried computer configuration but the same problem

Any advise.

Thanks
Windows Server 2003Active DirectoryWindows Server 2008

Avatar of undefined
Last Comment
Techrunner

8/22/2022 - Mon
Nagendra Pratap Singh

Put it under computer area and not user area.

That way it would run as a local admin.

computer configuration >  policies> Windows Settings > startup script etc.
myousufali

Techrunner

ASKER
I have tried that but didn't work
Put it under computer area and not user area.

That way it would run as a local admin.

computer configuration >  policies> Windows Settings > startup script etc.

There is no way to deploy exe file for non admin users
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
Techrunner

ASKER
I have tried to run the file locally on the client pc and the user does not have admin privilege. And it give me the same error

" You do have privilege in install on this machine. This installation cannot be completed correctly unless you are an administrator"


Any help would be greatly appreciated.

Thanks
Nagendra Pratap Singh

Login script work for all people not sure why it is not working for you.


Just try that and it will work. Make sure that the share for the files is accessible by everyone.

http://technet.microsoft.com/en-in/library/ff602181%28v=office.14%29.aspx

Deploy Office 2010 to users who are not administrators

http://technet.microsoft.com/en-in/library/cc178988%28v=office.14%29.aspx
Techrunner

ASKER
Hi,
The script is working when the normal user logs in but then i recieve the error relating to privileges and it will not install unless the user is administrator.

I went to client pc, logged in by the normal user and then i tried to run the setup file manually then also it give same privilege error

How to install this setup file for non admin users.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Nagendra Pratap Singh

The script should not be placed in the user logon scripts but in computer startup script. The computer account is a admin account and will install it.

This will be done even before the user logs in.

If the computer startup scripts don't work then it seems that something is wrong with your AD.
Techrunner

ASKER
What is that computer account ? can you name that account so i can troubleshoot.

Thanks
Nagendra Pratap Singh

Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
Brian Pierce

Why not convert the EXE file to an MSI file, then use GPSI to deploy it - an MSI does not require the user to have admin rights if its deployed this way

You can get a free tool to do this here http://download.cnet.com/Exe-to-Msi-Converter-Free/3000-2216_4-10969236.html
CSI-Windows_com

Logon scripts do not gain admin rights just by being triggered via GP.

GP software distribution is done by special settings in GP, however, GP Software distribution very, very tied to Windows Installer (.MSI) files.  

Here is a how to on deploying MSI using GPO: http://www.advancedinstaller.com/user-guide/tutorial-gpo.html

There is one very low function way to deliver .EXE via something called .ZAP files, however, .ZAP files: a) Do not get admin rights, b) must be kicked off from a special tab in add/remove programs.

Here is information about ZAP files and their limitations:http://technet.microsoft.com/en-us/library/cc784175(v=ws.10).aspx

If the software you are installing has a downloadable .MSI, use it instead.

Sometimes EXEs have MSIs inside them that can be found in the temp folder once the EXE is started.  Test this type of MSI first, as some of them cannot be run without the EXE they are compressed inside of.

A final resort is to use an .MSI that simply calls the EXE.  This MSI can be scheduled in group policy.
Nagendra Pratap Singh

Not sure why people say that startup script cannot be used

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/0ea9886d-053a-4672-8b33-af75273f9900/

==============================
by: jhautaniPosted on 2004-08-11 at 12:33:06ID: 11770143

You could put the batch file to computer's startup script. Script is then run under local system account, so you don't have to worry about your users' privileges.
Startup scripts are configured in GPO: Computer Configuration->Windows Settings->Scripts (Startup/Shutdown)
Apply the policy to computers to which you want to install you software


https://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_21089219.html
++++++++=+++++++++++++++++++++++++++


I  used this method last week.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Techrunner

ASKER
thanks experts for the suggestions I have quick question in my mind The GPO will be applied on OU, but based on the computer account or user account
For test purpose I create a test OU, transferred the user to this ou and applied the GPO

Samir
Techrunner

ASKER
Hello Experts,
- I converted the exe file to msi
- I created a share folder and move the msi package to this folder
- I created a group policy and linked to gpo I followed this very informative link

http://www.trainsignal.com/blog/installing-software-using-gpos-on-windows-server-2008

But when i logs in by the user nothing happened ( means I didn't observed that any process occurred)

I tried installing locally on client machine it work.

This is what I want to deploy

http://www.microsoft.com/en-us/download/details.aspx?id=35945

Any advise ? Please its a bit urgent I appreciate your help.

Samir
Nagendra Pratap Singh

You went to the extent of recompiling the .exe to a .msi but did not try computer logon script.

Anyway, you may have AD errors if GPOs are not working.
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
Techrunner

ASKER
If I am using the computer script, I faced the priviege error Can you help me to resolve this ?

Also can you provide  a sample script.

Thanks
Nagendra Pratap Singh

Download some version of VLC. Let me find a step by step guide to install it.
Techrunner

ASKER
Ok
I have that.

Thanks
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER CERTIFIED SOLUTION
Nagendra Pratap Singh

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Techrunner

ASKER
Hi,
Its working. But my question can i use this folder path

\\ABC.COM\SOFTWARE

instead of ,

\\ABC.COM\SysVol\ABC.COM\Policies\{FBAE9E8F-8F8B-4373-9C0A-2AD8D12E966C}\Machine\Scripts\Startup

I appreciate your help.

Samir
Nagendra Pratap Singh

Good to see it working.

Please check and test as follows:

Try making \\ABC.COM\SOFTWARE share and folder readable to all. The try to access this share using a normal account.
Techrunner

ASKER
I guess it will not work moving the folder other than Domain Sysvol and script folder.

Thanks
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
Nagendra Pratap Singh

Why guessing again?

Testing this will take like 10 mins.
Techrunner

ASKER
I tested it not working.
One last thing, why does I have reboot/ logoff the client machine multiple times to take this policy where as the other policies are applied rapidly.

IThank

Samir
Nagendra Pratap Singh

Maybe you are running Windows 2000 level AD and your AD does not synchronize that fast.

This will work only on Computer logon event which happens when the PC contacts the DC.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Techrunner

ASKER
How it can be resolved ?  Any idea
Techrunner

ASKER
I would like deeply appreciate for your help