Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Automatic Update of Flash Player : GPO or LUP or ...

Posted on 2015-02-19
5
Medium Priority
?
80 Views
Last Modified: 2015-02-26
What is the most reliable method for automatic updating FlashPlayer (and Java, Acrobat Reader etc.): GPO or LUP or ...?

And as follower: Can you give me link(s) for complete decsription of respective procedue?

I tried  FlashPlayer via GPO but encounter infinite loops before login, errors 1714 on removing old versions. This might be due to missing knowledge of GPO settings for this purpose.

Many thanks
Michael
0
Comment
Question by:sg08234
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 53

Assisted Solution

by:Will Szymkowski
Will Szymkowski earned 450 total points
ID: 40619498
GPO's have never been very easy to work with when it comes to deploying software. That is why Microsoft has SCCM. This is much easier to deploy software (any vendor) to machines etc.

I have also used software called Desktop Authority, which basically extends your Group Policy. This allows you to lock machines down but you can white-list applications that you want the user to have access to e.g Flash Player, Java etc.

Desktop Authority was originally created by Script Logic, but has since been purchased by Dell.
http://software.dell.com/products/desktop-authority-management-suite/

Will.
0
 
LVL 30

Accepted Solution

by:
serialband earned 1050 total points
ID: 40619577
Long ago, I bypassed all that with scripts through psexec on a private networks.  This works whether or not you use AD as long as your account is in the local computer Administrators group.  Don't do this on open networks.  When the place you work for is budget constrained, you just go with the available free tools.

You used to just run it with the /S for silent install.
psexec \\computer1,computer2,computer3  install_flash_player_ax.exe /S

now it's just /install
psexec \\computer1,computer2,computer3  install_flash_player_%VERSION%_active_x.exe" /install

You'll have to stop IE first
psexec \\computer1,computer2,computer3  taskkill /F /IM iexplore.exe

You can write for loops too.
for /L %i in (1,1,25) do psexec \\computer%i install_flash_player_%VERSION%_active_x.exe" /install
0
 
LVL 2

Author Comment

by:sg08234
ID: 40620443
SSCM sounds well but it's not within the budget.

Solution with psexec: Theu users may not have local computer Administrator rights.

Many thanks so far, but: No Recommendations concerning GPO or LUP?

Michael
0
 
LVL 30

Expert Comment

by:serialband
ID: 40620495
You run the psexec with an account that has admin rights.  It's a remote command.  You don't run it as the local user.

You can run it with the remote admin account, but you'll have the supply the account name with the -u option and the password with the -p option.  It's better to use a local admin account that has the same password credentials as the remote admin or use a domain account that is in the Administrators group of the remote systems.  This is why I mentioned that you should only do this on a secure network.
0
 
LVL 2

Author Closing Comment

by:sg08234
ID: 40634800
I'll stay with GPO - Thanks
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Windows Server 2003 introduced persistent Volume Shadow Copies and made 2003 a must-do upgrade.  Since then, it's been a must-implement feature for all servers doing any kind of file sharing.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question