Link to home
Start Free TrialLog in
Avatar of naifyboy123
naifyboy123Flag for Afghanistan

asked on

Cannot run silent MSIs with Windows 8 and UAC

Hi - i have created a batch file containing the following to install a package silently:

msiexec /i MyPackage.msi /qn

When I run this it stops after a second or so and there is an error in the event log telling me I do not have permission to install:-

"Product: MyPackage -- Error 1925. You do not have sufficient privileges to complete this installation for all users of the machine.  Log on as administrator and retry this installation."

even though I am domain admin and in the loal admin group on the pc.

I have noticed that if I change the msi swich to /passive it works fine. It also works fine - with no prompts, if I run the MSI manually.
It's only the silent switch that fails.

If I completely disable UAC via the registry HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System - EnableUA = 0
It works fine but I need to have UAC on for the Metro apps to work.

I have played around with UAC settings in Group Policy and just cannot get it working.
I have also taken our Windows 7 Group Policy settings for UAC and applied them to the W8 pc and still it's not working.

I have Googled this to death and cannot find any information pointing me to a viable solution.

I have tried multiple different MSIs and get the same problem with all of them.

Please help....

Thanks
Avatar of John
John
Flag of Canada image

I am not certain there is a problem. I have Windows 8 Pro and *every* install of *every* kind will cause UAC to pop up. I do not disable UAC and do not recommend disabling UAC.

So I think you have to install within the given limits of UAC.  

... Thinkpads_User
Avatar of naifyboy123

ASKER

@thinkpads_user - thanks

There must be ways round this otherwise how can you use an OS in the Enterprise with which you cannot push out silent installations
ASKER CERTIFIED SOLUTION
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
> To reiterate: to deploy any MSI silently it needs /qn and then run as system
No, not as system. But elevated.
I stand corrected :).

Also
"The actual name of the account is NT AUTHORITY\System.

The Local System account does not have any rights to access the network. When network access is necessary, Local System uses the account Domain\computername$. "