Deploying Central through Microsoft AD GPO - Admin Rights?

What work arounds are you all using to not have to rely on the insecure 'AlwaysInstallElevated' option to grant the permissions needed to deploy LogMeIn to users who have no local admin rights? thanks, Larry

yes, as I stated in option c), you always have the ability to script the install as a startup script. to go further with what AbqBill stated, I'd recommend checking for the CLSID in the registry as a valid identifier that it is installed. all
MSIs create them and it's how Microsoft prodcuts internally verify this (or at least SCCM, SCUP, etc.).
install it manually on a machine, find out what the CLSID is, and then in your custom startup script, check the registry for that specific CLSID to determine whether or not it's been applied.
if necessary, you can also build in pre-requisite rules as well, OS bit-ness if you have 32 and 64-bit workstations, operation system version, etc.

Similar Messages

Deployment Software on user with no admin rights

Hello,
We are using SCCM 2012 R2 and our environment machines are Windows 8.1 with no admin rights for all users.
We are trying to deploy some sprecific software but with no luck.
On the Deployment method we specify "Install for User" and what happens on User side is "Past due it will be retried".
If I modify my script and instead of /qn I use /qb I have the UAC control that pops up.
But from my understanding SCCM should install the software as system account.
How can we do to make it work?
Thank You,
Chris

Hello,
I have already bypass my problem using the "install for system".
Creating 2 deployment method. One for the application (msi) "Install for system" and the second for the settings (cmd) "Install for User" and it works like a charm.
But there is no way for SSCM to elevate the privileges when installing an application with "Install for user" set?
Chris

Want to configure a GPO "Stop (domain) users [having admin rights] from installing software"

Want to configure a GPO "Stop (domain) users [having admin rights for some particular users] from installing/uninstalling software"
Requirements :-
1. Domain user should not be allowed to install/uninstall any software's. Rest all the actions can be performed by the user like an administrator can do.
Please suggest if possible then how can I implement the same.

Hi Amar Chand,
You can do so by using certain Group Policy settings to control the behavior of the Windows Installer, prevent certain programs from running or restrict via the Registry Editor. The Windows Installer, msiexec.exe, previously known as Microsoft Installer,
is an engine for the installation, maintenance, and removal of software on modern Microsoft Windows systems.
You can try the following method to resolve this issue:
Method 1: Disable or restrict the use of Windows Installer via Group Policy
Open “GPMC”, create a GPO linked to the correct scope. You can refer to this article
Create a new Group Policy object.
Right-click it, click Edit, and then navigate to
Computer Configuration/Policies/Windows Components/Windows Installer.
In RHS pane double-click on Disable windows installer.
Click Enable and configure the option as required. "Always "option indicates that Windows Installer is disabled.
This setting affects Windows Installer only. It does not prevent users from using other methods to install and upgrade programs.
Click Apply to save this configuration.
Run gpupdate /force on the clients.
For your information, please refer to the following article to get more help:
Managing options for computers through Group Policy
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_wininstall_group_policy_computers.mspx?mfr=true
Method 2: Restrict Programs from being installed via Registry Editor
Open Registry Editor and navigate to the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun
Create String value with any name, like 1 and set its value to the program’s EXE file.
e.g., If you want to restrict msiexec, then create a String value
1 and set its value to msiexec.exe. If you want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program’s exe.
Note: You may have to restart your computer.
In addition, if you choose this method, you could deploy the registry configuration via GPO. Please refer to the following article:
Configure a Registry Item
http://technet.microsoft.com/en-us/library/cc753092.aspx
Regards,
Lany Zhnag

GPO - 2012 - Enforce Local Admin Right

Hello,
Just wondered if there was a way to deploy a GPO to enforce local admin rights for individual endpoints.
We need a way to control who has local admin rights to what, but in this case we need to say grant local admin rights to Users A, B and C on workstations D, E and F only.
Other than creating a GPO 'per workstation' I don't see a way. DFL / FFL will be 2012.
Anyone got any ideas?
Thanks
Stuart

Hello
Thank you for the reply. This issue is a little hard to grasp and to explain clearly. I understand what you have said, I am fairly proficient with Group Policy.
I want to be able to give one single user, access to one single PC and control it centrally. I think that is a better way of explaining it. So if I have 100 PCs and 100 users, and say 20 of those users needs to have admin rights on their own
PC only and not on other PCs.
That is what I am trying to accomplish. If I great a security group called 'Desktop Admins' then link a GPO to an OU where the 100 PCs are, then security filter by the security group, then everytime I add in a user, they will get local admin rights
to all 100 PCs. However I only wanted to grant them local admin rights on one PC. That being their PC.
I want to manage this centrally rather than remotely assigning local ACLs. I also like GPO because if a local admin user decides he/she wants to give their mate local admin rights on their PC, GPO will overwrite it.
Hope that makes sense
Much Appreciated

VS2010 Crystal 13 click-once deployment without user admin rights?

The only supported way of deploying our runtimes is to use one of our prepackaged msi's.
We do not have any documentation for manual deployment or anything that lists what specific dlls, registry settings, etc are needed to run specific configurations (ie web app vs windows apps).
Jason

As well as what Jason posted CR MUST have local PC Admin rights because we need to get past DEP/UAC etc. as well as be able to register the COM components, insert all of the registry keys required and the usual folder creation and file copying. Without it CR simply won't install properly and your app will never run. As noted in those other posts if you write a .NET app you have no choice but to use/set the native permissions and file distribution. If it's a WEB based app the you deploy it on each WEB server, users get a Viewer and Printer control through a browser download. But for Windows, it's a must.
IT departments have the ability to push out Special permissions for users to install software, not a CR configuration so check with your IT group or Microsoft and search on Profiles. So the each users doesn't need to be granted Admin rights to use it but they need it to install, assuming when installed it's set for All users. Other option is a local network Admin install on each PC. Not the nice way of doing things though.
Bottom line is because it's a Native .NET windows app you have no choice but to distribute all of CR's runtime and dependencies.
Don

User with admin rights can't access files through the command prompt

I have a strange situation where I have 2 users both setup exactly the same with admin rights on a 2003 (32 bit) server through an AD group membership, but one can do everything as expected but the other can't.
The one that can't is trying to execute a program is a command prompt and keeps getting access denied or invalid directory when trying to cd into the folder. I double and tripled check the permissions and they are correct, this person should have
full admin. In fact I did a effective permissions through explorer and it states full rights. Along those lines this person can also access the folder in question through explorer just not a command prompt.
Has anyone seen this before ? and if so what can be done about it.
Thanks

Hi,
Can the user execute the program through explorer? In Windows Server 2003, the Users group does not have Read and Execute permissions to the command processor (Cmd.exe).
You could refer to the article below to resolve the issue:
"Access is denied" error message when you run a batch job on a Windows Server 2003-based computer
http://support.microsoft.com/kb/867466
Best Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Need to execute bat file by GPO with admin rights

Hi all
I created a specific bat file that run regini.exe with specific parameters to set a specific permission in a specific registry key.
I can execute this bat file from GPO but I need that this bat runs with domain admins rights otherwise script not set the permission in user's registry key.
Have you any ideas?
Thanks
Chris

> Yes I tested this solution but it's not possible set permission to the
> key :-(
Which key are we talking about?
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Does java require admin rights for deployment?

Just like the subject says, if I'm running in a limited user account can I deploy java packages or do I have to have admin rights in order to deploy programs?

Installing Java on a Windows 2k or XP machine requires Windows administrative privileges - see the appropriate Java Installation Instructions from Sun. If your use of "deployment" means anything else, that's all controlled by the privileges that your administrators give you; there are no requirements or rules other than what they set, as DrClap said. If you're not sure, have them set you up like the other people.

Deploy wsp through Power Shell- start stop SP admin service and run execadmsvcjobs command using power shell

Hi,
Can anyone pls point me any link/ src code for deplyoing wsp using power shell. I know I can deploy it through Add-spsolution and install-spsolution, the issue is that, it will give "status - stuck in deploying scheduled..."
and i need to restart the sharepoint services - services.msc --> SP administration and timer services - and then i need to run the exceadmsvcjobs command to deploy / update the wsp successfully in solution store.
i mean, whats the power shell equivalent of these tasks. or anyone has already scripted these.
if i elaborate little bit, would like to know how to automatically Retract, Remove, Add and Deploy SharePoint 2010 WSP Solution Files with PowerShell

ok, i have found the same :
here its : hope this will help someone.
function wait4timer($solutionName)
$solutionName ="TestingWSP.wsp"
$solution = Get-SPSolution | where-object {$_.Name -eq $solutionName}
if ($solution -ne $null)
Write-Host "Waiting to finish soultion timer job" -ForegroundColor Green
while ($solution.JobExists -eq $true )
Write-Host "Please wait...Either a Retraction/Deployment is happening" -ForegroundColor DarkYellow
sleep 5
Write-Host "Finished the solution timer job" -ForegroundColor Green
try
# Get the WebApplicationURL
$MyWebApplicationUrl = "http://srvr:21778/";
# Get the Solution Name
$MywspName = "TestingWSP.wsp"
# Get the Path of the Solution
$MywspFullPath = "D:\myWorkspace\TestingWSP.wsp"
# Try to get the Installed Solutions on the Farm.
$MyInstalledSolution = Get-SPSolution | Where-Object Name -eq $MywspName
# Verify whether the Solution is installed on the Target Web Application
if($MyInstalledSolution -ne $null)
if($MyInstalledSolution.DeployedWebApplications.Count -gt 0)
wait4timer($MywspName)
# Solution is installed in atleast one WebApplication. Hence, uninstall from all the web applications.
# We need to unInstall from all the WebApplicaiton. If not, it will throw error while Removing the solution
Uninstall-SPSolution $MywspName -AllWebApplications:$true -confirm:$false
# Wait till the Timer jobs to Complete
wait4timer($MywspName)
Write-Host "Remove the Solution from the Farm" -ForegroundColor Green
# Remove the Solution from the Farm
Remove-SPSolution $MywspName -Confirm:$false
sleep 5
else
wait4timer($MywspName)
# Solution not deployed on any of the Web Application. Go ahead and Remove the Solution from the Farm
Remove-SPSolution $MywspName -Confirm:$false
sleep 3
wait4timer($MywspName)
# Add Solution to the Farm
Add-SPSolution -LiteralPath "$MywspFullPath"
# Install Solution to the WebApplication
#Install-SPSolution -Identity <SolutionName> -WebApplication <URLName> [-GACDeployment] [-CASPolicies]
install-spsolution -Identity $MywspName -WebApplication $MyWebApplicationUrl -GACDeployment #-FullTrustBinDeployment:$true -GACDeployment:$false -Force:$true
# Let the Timer Jobs get finishes
wait4timer($MywspName)
Write-Host "Successfully Deployed to the WebApplication" -ForegroundColor Green
catch
Write-Host "Exception Occuerd on DeployWSP : " $Error[0].Exception.Message -ForegroundColor Red
ref :
http://www.sharepointpals.com/post/How-to-Deploy-a-SharePoint-2013-Solution-(WSP)-in-the-Farm-using-PowerShell

Win7/Base Wim/Office 2010 Patches/ Hangs deployment/Admin rights lost

Hi All, sorry for the sort of confusing title.
My issue is as follows. I have a task sequence set up to build a Base Wim for Win7EntX64 which will include office 2010x86 and run ZTIWindowsUpdate for patches. I'm having issues with the task sequence not continuing once Office installs and
ZTIWindowsUpdate runs. At this stage I notice that admin rights are lost. So my task sequence breaks down as follows:
1. Win7SP1 applies, (including large protion of patches in Packages)
2. Boot into OS, ZTIWindowsUpdate runs to patch OS
3. Office 2010 SP2 x86 is installed
4. ZTIWindowsUpdate runs to patch Office and any stragglers
5. "Imaging" portion of the task sequence runs, Prep, sysprep,capture
I've included the tail end of some of my log files.
smsts.log
bdd.log
I don't see any major issues with the logs but I'm not an expert at reading them.
Any help anyone can provide will be greatly appreciated.
Thank you
***Edit***
Almost forgot, I'm running my image build/capture in Win8 hyper-v. Using MDT 2012 U1 and ADK 8.

Get-WinEvents Powershell bypass admin rights

Hi Scripting Guys,
I have wrote some code which takes the details regarding boot times from the event logs and outputs them into a table in htm.
BUT - I'm having trouble with my powershell sript, it runs fine when I am running powershell as admin, but when I try to run it as a standard user it doesn't work.
I get the Message -
Get-WinEvent : No events were found that match the specified selection criteria.
I know this is because the event log that I am trying to get details for is requiring admin rights - but I want to deploy this to users without admin rights. HELP! is this possible? I am not trying to break UAC to get it working, I just want to know if there
is another option to get the detail or this method can be used some other way.
My script -
$events = Get-WinEvent -FilterHashtable @{logname="Microsoft-Windows-Diagnostics-Performance/Operational"; id=100}
# get the first event raw XML
$event = [xml]$events[0].ToXml()
# display its content
$event.Event.EventData.Data
$a = "<style>"
$a = $a + "BODY{background-color:White;}"
$a = $a + "TABLE{border-width: 1px;border-style: solid;border-color: black;border-collapse: collapse;}"
$a = $a + "TH{border-width: 1px;padding: 0px;border-style: solid;border-color: black;background-color:thistle}"
$a = $a + "TD{border-width: 1px;padding: 0px;border-style: solid;border-color: black;background-color:PaleGoldenrod}"
$a = $a + "</style>"
#Get-Service | Select-Object Status, Name, DisplayName |
$event.Event.EventData.Data | select-object name, "#text" |
ConvertTo-HTML -head $a -body "<H2>Boot Infomation for $env:computername</H2>"|
Out-File C:\Scripts\Bootinfo.htm
#Invoke-Expression C:\Scripts\Bootinfo.htm
The script does the following, gets the last winevent for boot time - converts it to XML to get the detail - outputs it to a htm file - also displaying the PC name.
It does exactly what I want (for now) later I want to extract details into an SQL server - but one thing at a time.
Thank you in advance
Joe
PowerShell experience - 5 weeks in counting!

Hi Jrv,
Thank you for your response and suggestion. I did give it a go - but couldnt get it to work due to our limitations here.
I did get it all working though through another method which works quite well..
I set it up as a sch task running as SYSTEM-
Steps for anyone interested
Start the “Basic Task” wizard.
“Create a Basic Task” – (“Boot reports”)
“Trigger” – Set to to run at login
“Action” – Set to Start a Program. Program/Script to “PowerShell”. Add argument for your script (“C:\scripts\event.ps1”)
set it to run with highest privileges and as NT AUTHORITY\SYSTEM
close and run
My finished code looks like this if you are interested -
#JOEs_SG Powershell script for boot times using Windows Events#
#Get the event
$events = Get-WinEvent -FilterHashtable @{logname = "Microsoft-Windows-Diagnostics-Performance/Operational"; id=100}
# get the first event raw XML
$event = [xml]$events[0].ToXml()
# display its content
$event.Event.EventData.Data
#set up the HTML page
$a = "<style>"
$a = $a + "BODY{background-color:White;}"
$a = $a + "TABLE{border-width: 1px;border-style: solid;border-color: black;border-collapse: collapse;}"
$a = $a + "TH{border-width: 1px;padding: 0px;border-style: solid;border-color: black;background-color:thistle}"
$a = $a + "TD{border-width: 1px;padding: 0px;border-style: solid;border-color: black;background-color:PaleGoldenrod}"
$a = $a + "</style>"
#Output the data into the HTML page
$event.Event.EventData.Data | select-object name, "#text" |
ConvertTo-HTML -head $a -body "<H2>Boot Information for $env:computername $(Get-Date -Format 'dd/MM/yyy HH:mm tt')</H2>"|
#Output file
Out-File C:\Scripts\"Startup_($env:computername)_$(Get-Date -Format 'dd_MM_yyy HH_mm tt') .html"
#if you want to launch the html file after use the following
#Invoke-Expression C:\Scripts\Bootinfo.html
#To just get one line of code user the following
#$event.SelectSingleNode("//*[@Name='BootStartTime']")."#text"
Thanks again
Joe

Local Admin Rights - add / remove ?

Is there a way to add and remove local admin rights for users at logon / logoff in Server 2008?
Workstations are XP sp3 and Windows 7 Sp1. We have users who move from computer to computer and they need local admin access but we would prefer to not have Domain Users have local admin rights to all PCs.

Hi,
As far as I can see we can add user to local admin group at logon, but the user should relogon to get the membership, and if we also remove the user from local admin at logoff, then this equal to do nothing.
To add a domain user to a single computer as local administrator using GPO, I would like to suggest you go through the below similar threads:
Use GPO to add a single admin user to only one computer on the domain.
http://nerddrivel.wordpress.com/2013/05/24/use-gpo-to-add-a-single-admin-user-to-only-one-computer-on-the-domain/
How do I add a domain user to a single computer as local administrator using GPO
http://social.technet.microsoft.com/Forums/en-US/0a3eda5c-28ef-418e-a13d-f47fe0bf1bc3/how-do-i-add-a-domain-user-to-a-single-computer-as-local-administrator-using-gpo
Granting Local admin rights via Group Policy to a particular computer
http://social.technet.microsoft.com/Forums/windowsserver/en-US/4ceff330-0b72-4ed2-a55a-3089b504d2fc/granting-local-admin-rights-via-group-policy-to-a-particular-computer?forum=winserverGP
Hope this helps.
Regards, Yan Li

Excel Plugin installation with out admin rights

Hi,
We have developed an excel plugin which is a combination of dll written in c# and VBA project(.xla file). We have created .msi to ship the plugin using Install Shield and the settings in it had Require admin privileges set to NO.
The installation seems to be seamless regardless of whether it was installed on a PC with admin rights or without admin rights.
However the plugin loads fine only on the PC where it was installed with admin rights.
When installed with user without admin rights, Opening excel comes up with an error "Compile error in hidden module: ". The same message appears when closing excel as well.
I have searched through internet and found couple of ways it can it can be resolved
1. By manually registering mscomctl.ocx but cannot be done as the user don't have admin rights
2. Deleting .exd files in USER_HOME\AppData\Roaming\Microsoft\Forms dir (Tried this but no success)
I ran out of ideas and couldn't find anything more on this. Can anyone please let me know what I should be doing to resolve this?
Additional Info:
The location where registry entries are written is HKEY_CURRENT_USER\Software\VB and VBA Program Settings
I am deploying all my files to C:\Program Files\<Project Name> dir
and Interop.Excel.dll is one of the files am shipping along with my dll and .xla file
So don't think any of the above needs admin rights. Please let me know if I am wrong?
Many thanks for your help!!!

Hi Kittu1201,
>>which is a combination of dll written in c# and VBA project(.xla file).
What do you mean by “a combination of dll written in c#”? Do you use VSTO? If yes, is it application level or document level?
>> We have created .msi to ship the plugin using Install Shield and the settings in it had Require admin privileges set to NO.
As far as I know, Install Shield is a third party product and I'm not very familiar with it. For questions about Install Shield, I will suggest you going to the Install Shield official site for help.
>> Opening excel comes up with an error "Compile error in hidden module: ".
I made a research about this error, it could be caused by a specific *.xla file and the KB below might be useful to you:
# You receive a "Compile error in hidden module" error message when you start Word or Excel
https://support.microsoft.com/en-us/kb/307410
If the issue keeps existing, can you share a us very simple sample to help us to reproduce this issue.
Best Regards,
Edward
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click HERE to participate the survey.

Deploying Adobe Creative Cloud via GPO

A few months ago my long and lasting journey with Adobe CC started and I was pretty eager to deploy the software in our enterprise. As it comes out, with a little help from Adobe, that just made me crazy and a few pretty pointless and sensless tests I finally managed it somehow to get Adobe CC deployment via GPO. None of our users have local admin rights due to restrictive policy in our enterprise. All testing and configuration was made on Windows 7 Enterprise (x86 and x64) machines.
As we don't use SCCM in our environment it was critical to use "simple" GPO rollout for software. As there are MSI's with all the packages I started my journey...
To start it all of:
As it seems, you cannot buy licenses any more permanent and you can buy them via subscription. OK, that's one way to go and since we need all these products in future we went in evaluating it. Since we cannot buy licenses in a big order like adobe wants us to we were only left to buy the creative cloud for teams and not for enterprise. Still, this was fine to, since adobe offered the cloud packager and a lot of documentation, i thought at least.
To test and make sure that we can deploy all of the wanted features of creative cloud we bought 2 licenses for the IT-staff. During testing, late semptember/october 2014, with the cloud packager in version 1.6 I was able to deploy the packages and software as we wanted. Just as information, we wanted our users to have Bridge, Photoshop, InDesign, Illustrator, Dreamveawer, Prelude and the most important thing, we did NOT want the creative cloud desktop application due to company restrictions. Well as mentioned before everything worked as charm and I was just happy to start ordering the licenses for all of our users and get things done
Well, as a lot surely know, the process of ordering the licenses and getting things rolling in a enterprise sometimes takes a little (more) time. After about one or two months later everything was ready and set and I was feeling like this is going to be a piece of cake. Make new packages with the cloud packager, create the gpo's, test the deployment, invite the users and I'm the king of the jungle.
That was what I thought...
Adobe was so nice to release the newer and more improved version (I think 1.7 or 1.8) of the cloud packager, that suddenly hasn't been able to deactivate the creative cloud desktop application. Well, not a problem I thought to myself, I'll just uninstall it later on and it's fine. Since there are about 20 users that were getting the software it would be a not so nice job, but once done it's done and it shouldn't happen again.
Then i was hit by Adobe with a colossal fist right in the face! Why are you asking? Well as I mentioned above, the deployment via GPO worked fine and now? Not anymore, since the exception deployer couldn't install the applications it just broke everything and didn't even try to install the other applications that don't need the exception deployer. After a few e-mails and further testing, run as local admin, run installation after being copied to local, I lost fate that this is ever going to work.
Adobe gave me the best help they could and I even had a deployment expert in on a web session and he gave me a short commandlet (exception deployer) and said that it has to work this way but surprise, it didn't. As I was getting more and more frustrated by this situation and the exception deployer I started to shrink down the packages as much as possible so that there are no applications that needed to be deployed with the exception deployer. I run tests and guess what? It worked! Man, was I happy that after almost a month things started getting in the right shape. As I couldn't sleep because of this mess I started testing the applications that Adobe techs said needed the exception deployer. I created a new package just for Lightroom 5 (yeah, I know there is a newer version out now, but not at that moment) and saw that it landed in this exception folder that is made during packaging with the cloud packager. I was just curious to test it and made a new GPO for just Lightroom, as a MSI was also within the package I figured, why not give it a try? It worked again!?! I was pretty surprised due to the information that it shouldn't be working, as Adobe techs stated.
The simpler problem was the creative cloud desktop application. After having the Adobe techs in on a websession they stated, that it should work if I choose enterprise licensing to get rid of this software. But due to Adobe's updating policy of the creative cloud packager, there has been a newer version released (1.9) that opted out this feature to deactivate the installation of the creative cloud desktop application. I thought myself, why? Just please tell us why Adobe do we need this? But OK, there was also a solutions for this problem, the adobe creative cloud cleaning tool. If you create and XML file that is being read from the cleaning tool you can run this and "almost silently" uninstall the software via GPO. I gave it a shot and it works like a charm.
To be honest I thought, that Adobe due to it's status as THE software company when it comes to creating/editing multimedia content they would know about the problems some of their customers across the globe could be having. As it seems, they don't care enough or haven't ever had somebody with a similar problem(what I cannot believe, but all right) to share some more detailed information about a case like this.
I know, why have we bought it, if we don't need any cloud space? Well it's simple, Adobe creative products are needed and the CS6 products won't be here forever so it's better to start sooner than later with migration to a newer release. Still I was hoping to get more help from Adobe....
Just to share the packages with you:
"Complete 32Bit" package includes: Audition CS6+Updates, Bridge CC, Dreamweaver CC 2014.1, Edge Animate CC 2014, Fireworks CS6, Illustrator CC 2014, Incopy CC 2014, InDesign CC 2014, Photoshop CC 2014, Prelude CS6
"Complete 64Bit" package includes: Audition CS6+Updates, Bridge CC, Dreamweaver CC 2014.1, Edge Animate CC 2014, Fireworks CS6, Illustrator CC 2014, Incopy CC 2014, InDesign CC 2014, Photoshop CC 2014, Prelude CS6, Premiere Pro CC 2014, SpeedGrade CC 2014
"InDesign 32Bit" package includes: InDesign CC 2014
"InDesign 64Bit" package includes: InDesign CC 2014
"Lightroom 5 32Bit" package: Lightroom 5
"Lightroom 5 64Bit" package: Lightroom 5
None of these packages needed the exception deployer to be run. It was all tested on different (also different machine specs) 32bit and 64bit machines. The OS was always Windows 7 Enterprise.
To uninstall the creative cloud desktop application i wrote a batch file:
@ECHO OFF
IF EXIST C:\log_adobe_cc_cleaner\*.* EXIT ## checks if this folder is existent. If not it continues. If there is the folder it stops and won't run again ##
mkdir C:\temp_adobe_cc_cleaner ## creates a temp folder, as the uinstall tool can only be run locally ##
xcopy \\your_server\your_share$\adobecc\adobecc-cleaner\*.* C:\temp_adobe_cc_cleaner\*.* /Y ## copies the complete content of the folder to the newly created local folder ##
call "C:\temp_adobe_cc_cleaner\AdobeCreativeCloudCleanerTool.exe" --cleanupXML=C:\temp_adobe_cc_cleaner\cleanup_desktop_app.xml
xcopy "%Temp%\Adobe Creative Cloud Cleaner Tool.log" "C:\log_adobe_cc_cleaner\*.*" /Y ## copies the log file to folder, creates the folder itself ##
rmdir /q /s "C:\temp_adobe_cc_cleaner" ## removes the adobe creative cloud unintaller from local machine, leaves the log file folder for further check if the creative cloud uninstall tool needs to be rerun ##
The XML file has following written:
<?xml version="1.0" encoding="UTF-8"?>
<Products>
<Properties>
<Property name="eulaAccepted">1</Property>

</Properties>
<CreativeCloud>
<Product productName="Adobe Creative Cloud" version="2.0"/>

</CreativeCloud>
<AdobeIdCredentials>

</AdobeIdCredentials>
</Products>
Updating of the Adobe products is done with Secunia CSI in our enterprise, but there is also the posibility to remotely run the updatemanager.exe or via logon/logoff script.
What I also found out, was the dependency of vcredist for adobe products. You need the 2010, 2012 of them and most importantly in the x86 and x64 version! In case you get a .DLL missing error.
I hope this here helps someone who has lost a lot of nerves and a lot of time due to the deployment of Adobe creative cloud applications. I stil hope that there is going to be a better and easier way to deploy this.
Excuse me for the bad english, good luck with your deployment and maybe we can get Adobe a bit smarter from our all experience to make us a good deployment method.
Toni

Slim.nl is an indirect seller of Adobe products whose policies are not known to us. In our server we do not see any purchase from Adobe.com.
Please try to purchase from https://store2.adobe.com/cfusion/store/html/index.cfm?store=OLS-NL&event=displayProduct&ca tegoryPath=/Applications/AcrobatProX
You do have an Adobe ID with the Email provided here.
Regards
Rajshree

Adobe air admin rights installation error

so i just bought town of salem on steam, and i need adobe air to run it.. but i cant seem to install cause it needs admin rights and i contacted windows to verify that i do have all the rights. any ideas/tips?

I'm sorry you're running into installation issues with AIR. Microsoft has a utility that can help resolve installation problems. Would you mind giving this a try and let us know how it works for you? When running the Fix it, go through the uninstall process and try to remove Adobe AIR from your system. Once finished, download the latest version of AIR and install again.
Microsoft Install and Uninstall Fix It
If you still encounter problems, we'll need to review the AIR installer log to better diagnose the issue. Please post back with the log contents. You can find instructions for finding these logs here:
AIR Installer Log Instructions
Thanks,
Chris

Deploying Central through Microsoft AD GPO - Admin Rights?

Similar Messages

Maybe you are looking for