Avatar of Techrunner
Techrunner

asked on 

Deploy exe update using GPO

Hello Experts,
I want to deploy an exe update file to all our domain users. In this regard, I created a batch file and GPO. But when the user logs on to the pc,the error message appears

" You do have privilege in install on this machine. This installation cannot be completed correctly unless you are an administrator"

More Details
We have widnows 2008 domain
I created the shared folder, under this folder i copied the setup file and then I created a batch file

@echo off
\\servername\CertificateUpdate\Setup.exe

Then I create GPO
user configuration >  policies> Windows Settings > Logon Scripts

\\servername\CertificateUpdate\BatchFile.bat

Even I have tried computer configuration but the same problem

Any advise.

Thanks
Windows Server 2003Active DirectoryWindows Server 2008

Avatar of undefined
Last Comment
Techrunner
Avatar of Nagendra Pratap Singh
Nagendra Pratap Singh
Flag of Australia image

Put it under computer area and not user area.

That way it would run as a local admin.

computer configuration >  policies> Windows Settings > startup script etc.
Avatar of Techrunner
Techrunner

ASKER

I have tried that but didn't work
Put it under computer area and not user area.

That way it would run as a local admin.

computer configuration >  policies> Windows Settings > startup script etc.

There is no way to deploy exe file for non admin users
Avatar of Techrunner
Techrunner

ASKER

I have tried to run the file locally on the client pc and the user does not have admin privilege. And it give me the same error

" You do have privilege in install on this machine. This installation cannot be completed correctly unless you are an administrator"


Any help would be greatly appreciated.

Thanks
Login script work for all people not sure why it is not working for you.


Just try that and it will work. Make sure that the share for the files is accessible by everyone.

http://technet.microsoft.com/en-in/library/ff602181%28v=office.14%29.aspx

Deploy Office 2010 to users who are not administrators

http://technet.microsoft.com/en-in/library/cc178988%28v=office.14%29.aspx
Avatar of Techrunner
Techrunner

ASKER

Hi,
The script is working when the normal user logs in but then i recieve the error relating to privileges and it will not install unless the user is administrator.

I went to client pc, logged in by the normal user and then i tried to run the setup file manually then also it give same privilege error

How to install this setup file for non admin users.
The script should not be placed in the user logon scripts but in computer startup script. The computer account is a admin account and will install it.

This will be done even before the user logs in.

If the computer startup scripts don't work then it seems that something is wrong with your AD.
Avatar of Techrunner
Techrunner

ASKER

What is that computer account ? can you name that account so i can troubleshoot.

Thanks
Avatar of Brian Pierce
Brian Pierce
Flag of United Kingdom of Great Britain and Northern Ireland image

Why not convert the EXE file to an MSI file, then use GPSI to deploy it - an MSI does not require the user to have admin rights if its deployed this way

You can get a free tool to do this here http://download.cnet.com/Exe-to-Msi-Converter-Free/3000-2216_4-10969236.html
Logon scripts do not gain admin rights just by being triggered via GP.

GP software distribution is done by special settings in GP, however, GP Software distribution very, very tied to Windows Installer (.MSI) files.  

Here is a how to on deploying MSI using GPO: http://www.advancedinstaller.com/user-guide/tutorial-gpo.html

There is one very low function way to deliver .EXE via something called .ZAP files, however, .ZAP files: a) Do not get admin rights, b) must be kicked off from a special tab in add/remove programs.

Here is information about ZAP files and their limitations:http://technet.microsoft.com/en-us/library/cc784175(v=ws.10).aspx

If the software you are installing has a downloadable .MSI, use it instead.

Sometimes EXEs have MSIs inside them that can be found in the temp folder once the EXE is started.  Test this type of MSI first, as some of them cannot be run without the EXE they are compressed inside of.

A final resort is to use an .MSI that simply calls the EXE.  This MSI can be scheduled in group policy.
Not sure why people say that startup script cannot be used

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/0ea9886d-053a-4672-8b33-af75273f9900/

==============================
by: jhautaniPosted on 2004-08-11 at 12:33:06ID: 11770143

You could put the batch file to computer's startup script. Script is then run under local system account, so you don't have to worry about your users' privileges.
Startup scripts are configured in GPO: Computer Configuration->Windows Settings->Scripts (Startup/Shutdown)
Apply the policy to computers to which you want to install you software


https://www.experts-exchange.com/questions/21089219/Want-to-push-exe-install-using-Group-Policy-Editor.html
++++++++=+++++++++++++++++++++++++++


I  used this method last week.
Avatar of Techrunner
Techrunner

ASKER

thanks experts for the suggestions I have quick question in my mind The GPO will be applied on OU, but based on the computer account or user account
For test purpose I create a test OU, transferred the user to this ou and applied the GPO

Samir
Avatar of Techrunner
Techrunner

ASKER

Hello Experts,
- I converted the exe file to msi
- I created a share folder and move the msi package to this folder
- I created a group policy and linked to gpo I followed this very informative link

http://www.trainsignal.com/blog/installing-software-using-gpos-on-windows-server-2008

But when i logs in by the user nothing happened ( means I didn't observed that any process occurred)

I tried installing locally on client machine it work.

This is what I want to deploy

http://www.microsoft.com/en-us/download/details.aspx?id=35945

Any advise ? Please its a bit urgent I appreciate your help.

Samir
You went to the extent of recompiling the .exe to a .msi but did not try computer logon script.

Anyway, you may have AD errors if GPOs are not working.
Avatar of Techrunner
Techrunner

ASKER

If I am using the computer script, I faced the priviege error Can you help me to resolve this ?

Also can you provide  a sample script.

Thanks
Download some version of VLC. Let me find a step by step guide to install it.
Avatar of Techrunner
Techrunner

ASKER

Ok
I have that.

Thanks
ASKER CERTIFIED SOLUTION
Avatar of Nagendra Pratap Singh
Nagendra Pratap Singh
Flag of Australia image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of Techrunner
Techrunner

ASKER

Hi,
Its working. But my question can i use this folder path

\\ABC.COM\SOFTWARE

instead of ,

\\ABC.COM\SysVol\ABC.COM\Policies\{FBAE9E8F-8F8B-4373-9C0A-2AD8D12E966C}\Machine\Scripts\Startup

I appreciate your help.

Samir
Good to see it working.

Please check and test as follows:

Try making \\ABC.COM\SOFTWARE share and folder readable to all. The try to access this share using a normal account.
Avatar of Techrunner
Techrunner

ASKER

I guess it will not work moving the folder other than Domain Sysvol and script folder.

Thanks
Why guessing again?

Testing this will take like 10 mins.
Avatar of Techrunner
Techrunner

ASKER

I tested it not working.
One last thing, why does I have reboot/ logoff the client machine multiple times to take this policy where as the other policies are applied rapidly.

IThank

Samir
Maybe you are running Windows 2000 level AD and your AD does not synchronize that fast.

This will work only on Computer logon event which happens when the PC contacts the DC.
Avatar of Techrunner
Techrunner

ASKER

How it can be resolved ?  Any idea
Avatar of Techrunner
Techrunner

ASKER

I would like deeply appreciate for your help
Windows Server 2003
Windows Server 2003

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

129K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo