Avatar of Raymond Norton
Raymond Norton
 asked on

Need assistance configuring GPO assigned script to run with admin privileges under normal domain user account

I am attempting to silently run an uninstall script via a GPO when a normal domain user logs into the device.
My understanding is that anything run at startup uses the system account and therefore the script should work fine but that is not my experience. The files copy over fine and the script runs but not with admin (install) privileges.

Any assistance to resolve this is appreciated

(See attached screenshots)

CMD file being executed:

@echo off
if not exist "C:\Programdata\install_wim_tweak.exe" xcopy "\\maccrayhs\msiapps\uninstall_edge\*.*" "C:\Programdata\"
echo Uninstalling Microsoft Edge...
cd /d "%~dp0"
echo Uninstalling Microsoft Edge...
CLS
C:\Programdata\install_wim_tweak.exe /o /l
C:\Programdata\install_wim_tweak.exe /o /c Microsoft-Windows-Internet-Browser-Package /r
C:\Programdata\install_wim_tweak.exe /h /o /l

Open in new window

Screenshot-from-2018-11-16-09-31-08.png
Screenshot-from-2018-11-16-09-31-35.png
Shell ScriptingActive Directory

Avatar of undefined
Last Comment
Raymond Norton

8/22/2022 - Mon
Mahesh

If user doesn't have admin rights on machine, then uninstall scripts at logon or logoff will not work

U need to add scripts to system start up script under computer configuration
Raymond Norton

ASKER
Correct, that is what my screenshots show. Do I need to do it differently than what is shown?
Shaun Vermaak

Run those EXEs as a Software Installation using Zap files
https://www.itninja.com/blog/view/use-zap-files-to-publish-non-msi-setups-via-gpo
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
Raymond Norton

ASKER
Links are broken and I am hoping to resolve the issue without installing third-party software. Maybe that is not realistic.
Shaun Vermaak

Software deployment GPO and zap files are not 3rd party
NVIT

How do you know the cmd script isn't running? To test, I'd put a line at the top that echo's text to a file. If the file exists, with the text, it works. e.g.

@echo off
ECHO It works>>c:\testscript.txt

if not exist "C:\Programdata\install_wim_tweak.exe" xcopy "\\maccrayhs\msiapps\uninstall_edge\*.*" "C:\Programdata\"
echo Uninstalling Microsoft Edge...
cd /d "%~dp0"
echo Uninstalling Microsoft Edge...
CLS
C:\Programdata\install_wim_tweak.exe /o /l
C:\Programdata\install_wim_tweak.exe /o /c Microsoft-Windows-Internet-Browser-Package /r
C:\Programdata\install_wim_tweak.exe /h /o /l

Open in new window

⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Raymond Norton

ASKER
It runs but does not execute the program properly. if I choose to run as administrator, it runs and executes properly. That will not work in our environment. I need it to run with elevated privs in startup.
Mahesh

have you tried disabling UAC on affected machine and executed script with startup GPO

may be you need to disable user access controls form gpedit.msc on machine instead of control panel
Raymond Norton

ASKER
Really don't want to do that . Tested a gpo, disabling UAC and user got a pop up saying UAC was disabled but needed a reboot.
Your help has saved me hundreds of hours of internet surfing.
fblack61
Raymond Norton

ASKER
Shaun Vermaak, do you have an example of how zap might work executing the .cmd  shown in the original post? I am not finding simple documentation explaining it.
serialband

Can that script be run under the computer configuration instead of the user?
Shaun Vermaak

Shaun Vermaak, do you have an example of how zap might work executing the .cmd  shown in the original post? I am not finding simple documentation explaining it.
In the article posted
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
ASKER CERTIFIED SOLUTION
Raymond Norton

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.