gpo w2k8 for xp sp3

9 Jul 2009 10:24 AM

Sylvain Jeanneret

Hi,

Server : w2k8r2 fr
Client : xp pro sp3 fr

Deploying soft with gpo, for users and for computers works well, except
for adminpack.msi. For this package, deploying with gpo for computers
works but not for users. I tried 3 versions of adminpack and always fail.

Users and computers are in specific OUs.

Installing in command line with msiexec is OK.

In logs, I found that the privileges are not enough, This is very
strange while they are sufficient for other msi package.

What can i do ?

Thanks in advance.

--
Sylvain

9 Jul 2009 10:42 AM

Meinolf Weber [MVP-DS]

Hello Sylvain,

adminpak is not different from other .msi packages, so i suggest you compare
the GPO settings with another GPO where you install software for users with.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Show quoteHide quote

> Hi,
>
> Server : w2k8r2 fr
> Client : xp pro sp3 fr
> Deploying soft with gpo, for users and for computers works well,
> except for adminpack.msi. For this package, deploying with gpo for
> computers works but not for users. I tried 3 versions of adminpack and
> always fail.
>
> Users and computers are in specific OUs.
>
> Installing in command line with msiexec is OK.
>
> In logs, I found that the privileges are not enough, This is very
> strange while they are sufficient for other msi package.
>
> What can i do ?
>
> Thanks in advance.
>

9 Jul 2009 11:29 AM

Sylvain Jeanneret

Hi Meinolf,

I create all gpo the same way, admipack and others. I tried many times.
It is really surprising that special privileges are required for
adminpack and not for other packages.

Precision: in command line, i must be local administrator in order to
execute installation via msiexec.

Anyway thanks for your quick answer.

Regards,

--
Sylvain

Meinolf Weber [MVP-DS] a écrit :

Show quoteHide quote

> Hello Sylvain,
>
> adminpak is not different from other .msi packages, so i suggest you
> compare the GPO settings with another GPO where you install software for
> users with.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi,
>>
>> Server : w2k8r2 fr
>> Client : xp pro sp3 fr
>> Deploying soft with gpo, for users and for computers works well,
>> except for adminpack.msi. For this package, deploying with gpo for
>> computers works but not for users. I tried 3 versions of adminpack and
>> always fail.
>>
>> Users and computers are in specific OUs.
>>
>> Installing in command line with msiexec is OK.
>>
>> In logs, I found that the privileges are not enough, This is very
>> strange while they are sufficient for other msi package.
>>
>> What can i do ?
>>
>> Thanks in advance.
>>
>
>

9 Jul 2009 10:46 AM

Marcin

Sylvain,
use computer-based software installation GPO setting...

hth
Marcin

Show quoteHide quote

"Sylvain Jeanneret" <s.jeanne***@cifom.ch> wrote in message
news:ufCi09HAKHA.5068@TK2MSFTNGP03.phx.gbl...
> Hi,
>
> Server : w2k8r2 fr
> Client : xp pro sp3 fr
>
> Deploying soft with gpo, for users and for computers works well, except
> for adminpack.msi. For this package, deploying with gpo for computers
> works but not for users. I tried 3 versions of adminpack and always fail.
>
> Users and computers are in specific OUs.
>
> Installing in command line with msiexec is OK.
>
> In logs, I found that the privileges are not enough, This is very strange
> while they are sufficient for other msi package.
>
> What can i do ?
>
> Thanks in advance.
>
> --
> Sylvain

9 Jul 2009 11:18 AM

Sylvain Jeanneret

Marcin a écrit :

> Sylvain,
> use computer-based software installation GPO setting...
>
> hth
> Marcin

Thanks for your answer. I already tried this way and it is OK.
Maybe you mean computer-based installation while filtering the user ?
Or i miss understand you ...

I would only certains users to have this package.

--
Sylvain

9 Jul 2009 12:31 PM

Marcin

Just suggesting an easy way out... No - per user filtering is not an option
here - but you can control who has ability to run individual snap-ins via
user-based policies (Administrative Templates/Windows Components/Microsoft
Management Console settings).
Apps assigned or published via GPO-based installation run with elevated
privileges - so local system permissions should not be an issue. Have you
verified that users in question have access to the source files?

hth
Marcin

Show quoteHide quote

"Sylvain Jeanneret" <s.jeanne***@cifom.ch> wrote in message
news:OoOh8bIAKHA.1488@TK2MSFTNGP03.phx.gbl...
> Marcin a écrit :
>> Sylvain,
>> use computer-based software installation GPO setting...
>>
>> hth
>> Marcin
>
> Thanks for your answer. I already tried this way and it is OK.
> Maybe you mean computer-based installation while filtering the user ?
> Or i miss understand you ...
>
> I would only certains users to have this package.
>
>
> --
> Sylvain

9 Jul 2009 4:28 PM

Sylvain Jeanneret

Marcin a écrit :

> Just suggesting an easy way out... No - per user filtering is not an option
> here - but you can control who has ability to run individual snap-ins via
> user-based policies (Administrative Templates/Windows Components/Microsoft
> Management Console settings).

OK, i'll try this tomorrow.

> Apps assigned or published via GPO-based installation run with elevated
> privileges - so local system permissions should not be an issue. Have you

It was what i thougt until now ... ;-)

> verified that users in question have access to the source files?

Yes, they have.

>
> hth
> Marcin

    Thanks a lot.

    I will use your solution and this will be my last try,
    i don't have time enough.

    Regards,

--
Sylvain