Avatar of Ecompro
Ecompro
 asked on

Software Installed by GPO Available to Admins but NOT Users

We use GPO to distribute two software packages-- the Adobe Flash ActiveX version (used by IE), and the Plug-In version (used by Firefox).

The PCs are successfully getting the new GPO and installing the packages.  

Problem:  Flash works OK when an administrator uses a browser.  However, when users log in to the SAME machine and try to browse the web, their browsers act like Flash is not installed and they get prompted to install Flash.

Any ideas what to look for?
Active Directory

Avatar of undefined
Last Comment
Ecompro

8/22/2022 - Mon
Joseph Moody

Can you save a report of the GPO and upload it here?
Ecompro

ASKER
Which report are you looking for-- the gpresult on the PC showing if the GPO was applied?  Or something else?

Short answer is the GPO is being applied, and Flash is being installed, because any administrator who logs on to the PC can browse to Flash-enabled websites and it works.

It also shows up in Add/Remove Programs.

The only issue is -AFTER- it has been installed on a PC, only admins benefit from it.  If the admin logs off and a USER-level account logs in, the browser doesn't see Flash has been installed and the user gets prompted to install it when they hit a website with Flash in it.

Something I didn't mention, for what it's worth.  It's being installed via Computer policy (not user policy) and it's Assigned, not Published.
msifox

Did you use the MSI-files provided by Adobe (from the download link that you get after registering  with Adobe to get distribute-permission) ? Did you change any properties in these files?
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
Joseph Moody

I was interested in what side is was being applied to.

It seems like the addon isn't being activated for standard users. Can you run a GPResult on the PC with this issue? Run it as a standard user.
ASKER CERTIFIED SOLUTION
msifox

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Ecompro

ASKER
@msifox-- I did check for permissions on the sys32\macromed\flash directory and users had Read permissions.

However, in the time since my post, I unlinked the GPO, manually uninstalled via Add/Remove programs (all of this I had done several times already), but this time took the extra step to delete the entire Macromed\Flash directory.

Then I re-enabled the GPO, rebooted, Flash was installed (just like every other time).... but this time (unlike before) it's available for all users and not just admins.

I didn't see anything telling in the \Flash directory before (i.e., nothing that looked like a version conflict-- basically just log files remaining).  

But for whatever reason, it's all working now.  Thanks to all who contributed to this thread.
Ecompro

ASKER
Going to accept this solution, because deleting the \Flash directory seemed to be the key, even though permissions were correct before.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.