Solved

Pushing msi through GPO with UAC running on clients

Posted on 2014-11-11
2
1,102 Views
Last Modified: 2014-11-15
I have to push a an msi for installing a software audit. My plan is to push it via a Group Policy Startup Script. The problem I believe I'm going to have is that my users are not local admins on their computers and we have UAC enabled on all of them. Is there a way to add an exception to UAC for this application? Or is there a way to script disabling UAC during the install? Any other ideas or thoughts?
0
Comment
Question by:rsgdmn
2 Comments
 
LVL 53

Expert Comment

by:McKnife
ID: 40436327
UAC does not rule the system account. The startup script uses the system account.
That means: no problem for you.
0
 
LVL 6

Accepted Solution

by:
Asif Bacchus earned 500 total points
ID: 40436411
A computer startup script should not be an issue, McKnife is correct.

However, I would suggest deploying the software via a GPO using Computer Configuration > Policies > Software Settings > Assigned Applications.  This will allow you to install the MSI, apply any needed transforms, auto-install/un-install when the policy is un-applied and control how it shows up in add/remove programs.  Just like the startup script, this will run as the system account, so no UAC issues.  In addition, it utilizes the 'trusted installer' privileges so no worries about user admin rights.  As an added bonus, the GPO checks to see if the program is still installed and then cancels itself whereas a startup script would run every single time the system starts, slowing things down.  Just a suggestion though.

Cheers.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
While working, an annoying popup showing below will come and we cannot cancel or close it form the screen. The error message will come again and again.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now