Deploying msi via group policy without administrative rights

We are having a problem with flash player not working without
Administrative right on the machine. We thought we could get around
this by using the flash_player_active_x.msi and installing through
group policy. The install during a computer reboot (if assigning to
a computer) or during a user sign on (if assigned to a user) seems
to work fine.
However, when you actually try to load a webpage with flash,
nothing. The component doesn't actually get installed into the
browser. As soon as you log on with a privilaged account, and
browse to a flash enabled page, the install finishes, the active x
control is loaded and now all users can see it.
However, I'd really prefer not to have to go around to each
computer and log on with the administrator account - kind of
defeats the purpose of group policy.
All computers are Win XP sp2 with IE 7. The active directory
server is a Win2k server.
Any thoughts would be appreciated.

I am having this issue also. Has anyone found a solution?
I found this reference on this website, but there is no
solution given:
I
have installed Adobe Flash Player but still don't see any Flash
content. What is wrong?
quote:
Restricted User accounts are unable to display Flash Player
content
After successful installation under the Windows Administrator
account, Restricted User accounts are unable to display Flash
Player content. This issue has been reported on Microsoft Windows
XP Service Pack 2 systems and occurs sporadically. It may also
affect other versions of Windows, such as Windows 2000.
If you installed Flash Player 8.0.24.0 prior to April 6,
2006, then you must remove it using the Flash Player uninstaller
released on May 11, 2006. Remove Flash Player using the
instructions in How to uninstall the Adobe Flash Player (TechNote
14157).

Similar Messages

Deploy Microsoft hotfix.msi via group policy

Hello,
I need to deploy a hotfix KB2967990 for correcting Time zone in Egypt, the hotfix file is in MSI format, but I cannot
perform a quiet installation neither via cmd nor group policy.
Please help me.
MCITP: Server Administrator 2008, MCP

Hi,
Have you checked the deploy log to find the reason of this problem? Or maybe there any something wrong during your deployment, such as the parameter /quiet.
Please refer to the link below to deploy hotfix for test.
http://technet.microsoft.com/en-us/library/bb457071.aspx
Roger Lu
TechNet Community Support

Deploying Contribute via Group Policy

I've been trying to deploy contribute via MS Win 2003 Group
Policy, but have had no luck. Has anyone been able to successfully
push out the software, if so, did you utilize the Software Install
or did you use a script? How did you deal with the input of the
Contribute serial number? Optimally, we'd like to generate a silent
install, but again, have had very little luck and there is very
little information available.
Any help is appreciated.

Someone in another post pointed me to this document.
http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=a4175402
The only downside is that you need to set a batch to copy your
ContributeConfiguration items to the install folder. I think Adobe
could do a better job on the deployment side.

Disable Reply All button via Group Policy without disabling keyboard shortcut

At my organization, we've used Group Policy to disable the Reply to All button in Outlook 2007 and Outlook 2010. When you use the setting in the ADM files for the respective versions of Office to disable a Command bar ID, the Reply to All button is disabled,
however they keyboard shortcut (Ctrl + Shift + R) is still active. This forces our users to think a bit more before using the Reply All function.
The keyboard shortcut continues to work, because there's a separate setting to disable the keyboard shortcuts. The same is true for Office 2013's GP templates, however, it does not function as expected.
When I use the Office 2013 admin templates and disable command bar ID 355 (Reply All), it disables the button as expected, however it also disables the keyboard shortcut for Reply All without actually setting it as disabled in the disable shortcut keys.
Has anyone had success disabling a command bar ID without disabling the associated shortcut keys? If so, how did you do it?

Hi,
This issue has been fixed by this hotfix:
Hotfix 2881040 for Outlook 2013 June 10, 2014 (Outlook-x-none.msp)
http://support.microsoft.com/kb/2881040
Thanks,
Steve Fan
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

Deploying Bookmarks via Group Policy

Hi,
I've been tasked with deploying Firefox bookmarks via GPO. The GPO add-on is installed.
Initially things are fine as I can deploy our centrally created places.sqlite file to the relevant Firefox directory.
However, if the user creates new bookmarks these are overwritten when our central places.sqlite file is redeployed. We have to update the file frequently as new favourites are added.
Is there any way of us being able to update each users places.sqlite without them losing their personally created bookmarks?
Cheers.

Try https://mike.kaply.com/2012/03/26/customizing-firefox-distribution-ini/

Is there a way to deploy Adobe Air package via Group Policy or SCCM?

Is there a way to deploy Adobe Air package via Group Policy or SCCM?

hi,
I guess you can try the following options
Remove the all the entry from the TOC of your project or create a new blank TOC and select that while AIR file generation
Remove the all the entry from the index of your project or create a new blank index and select that while AIR file generation
Remove the all the entry from the glossary of your project or create a new blank glossary file and select that while AIR file generation
THis will ensure that TOC/Index/Glossary page is not shown,
There is no way to hide Favorite or RSS from the AIR Help. Again, you can try looking at the Unipane Template provided in the AIR SSL Dialog.
Hope this helps
-Praful Jain

Can Adobe Air 3.1 be deployed via Group Policy?

I am looking for a definitive answer as to whether or not Adobe Air 3.1 can be deployed via Group Policy? I've found material on the web that is very contradictory. Can it be done and if so how? I can't find any solid instructions on how to deploy this application and need to have it installed on about 60 desktops.
We are trying to deploy the Salesforce.com Desktop Chatter application. Any helpful info is greatly appreciated.
Thanks!

Hi Kevin,
I replied via email yesterday, but in case anyone else is following along here's what I said:
For GPO deployment, we don't officially "support" it (ie. we don't test for it internally), however I did run across this recent post where an admin had success.
http://www.appdeploy.com/packages/detail.asp?id=2339
Hope this helps,
Chris

How to deploy a file on all users C drive via group policy

I'm trying to deploy a file on all users C drive via group policy but its not working. logon script is already kept in place but nothing is happening. If I run the same command from my pc it's working fine. Does any one have good script to copy & deploy
the file. Pls help

Hi,
You can use Group Policy Preferences to deploy this and Item-level-Targetting to filter by OUs/groups, wmi filters ,etc.
Computer Configuration / User Configuration - Preferences - Windows Settings - Files
More on this here.
http://technet.microsoft.com/en-us/library/cc772536.aspx
Hope this helps.
Regards,
Calin

Enable auto update while deploying Reader 11 via group policy

I would like to push the latest adobe reader 11 out via group policy. I have tried using the adobe customization wizard but I am unable to set the installs to auto update. They default to download the update and prompt the user. I do'nt want the user to be prompted at all. I just want it to automatically update. Is there an easy way to deploy this?
I would like it to be like flash. You can deploy the mms.cfg file and it configured flash to auto update.
Thanks,
Justin

I would like to push the latest adobe reader 11 out via group policy. I have tried using the adobe customization wizard but I am unable to set the installs to auto update. They default to download the update and prompt the user. I do'nt want the user to be prompted at all. I just want it to automatically update. Is there an easy way to deploy this?
I would like it to be like flash. You can deploy the mms.cfg file and it configured flash to auto update.
Thanks,
Justin

How do we track client deployment via group policy by referring log files globally

How do we track client deployment via group policy by referring log file centrally?

need answer from both CM07/CM012 by using GPO
There is NO Centralized tracking for GPOs.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

How to set up Group Policy without any server installed

How to set up Group Policy on Win8 without any server installed?
I have set up 50 users on LAN and want to push softwares via one common point. From google I found to deploy Software using Group Policy. But then Group Policy occurs in Servers and I don't have any server set up.

Hello,
a Domain requires at least one Windows server OS machine which has Active Directory installed.
As previous already mentioned from SenneVL this also requires that computers are added to the domain and that you create user accounts in Active Directory users and computers which stores the account information in the Active directory database.
In your case with single computers each machine has its own database(SAM) which stores passwords etc. this is different in a domain.
Each computer has a local policy which will be overwritten from centrally managed policies from the domain.
"The common point would be my PC (Admin PC) ."
This machine can not be used for your needs with software installation for 50 computers.
"How To Use the Group Policy Editor to Manage Local Computer Policy."
This is about the local machine and you cannot manage them for other computers from your Admin PC.
"DOMAIN part: By default Microsoft takes everyone on Workgroup. Is that not a default DOMAIN? or should I make one lets say "ABC" on every PC ?"
NO, this is NOT a domain.
http://windows.microsoft.com/en-us/windows7/what-is-the-difference-between-a-domain-a-workgroup-and-a-homegroup
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Updating Existing Install and adding extensions via Group Policy

We have recently installed StarOffice 8 due a full planned move away from Microsoft Office 2003, we have deployed the CD install via group policy to test the functionality of StarOffice in a school environment. Due to a problem cropping images in Writer (cropooo 0.2.1 extension needed) we are having to update to the latest patch ver10 (300+pc's). Is there a way to automate this via GPO? We only have the standard version of staroffice 8 and not the enterprise CD so we can not make a custom transform file. Also can extensions be deployed via Group Policy? We are runnning a Windows 2k3 server with XP clients.

Network Deployment of Adobe Flash Player
I found this link http://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_guide.html
It is a good idea to extract the msi the deployment data point using msiexec /a {filename} (this creates an administrative installer)
Use the extracted MSI to deploy flash. (either assigned or published)
Please make sure that the user can read from the data point you place the files.

How to control IE10's "Compatibility View settings" via Group Policy

First
of all thanks for taking the time to read this. I must let you know that I have limited experience with Group Policy so here it goes...
Domain Controllers are 2008 R2 Datacenter and client computers are Win7 Pro with IE10
I need to add several sites to the "Compatibility View settings" in IE10 and have these pushed out via Group Policy.
I followed this to enable the "Use Policy List of Internet Explorer 7 sites:"
Use
Policy List of Internet Explorer 7 sites
I even added the settings to both User Configuration as well as Computer Configuration. However the computers on the domain wouldn't show these sites in
IE even after forcing a GP update (gpupdate /force)
Yes I did use top level domain names.
Next I installed the Administrative Templates for Windows Internet Explorer 10 on the DC:
Administrative Templates for Windows Internet Explorer 10
this gave me an Inetres.adm file while I put in the same location as my other .adm files that Group Policy Manager sees (located at C:\Windows\SYSVOL\domain\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm)
I do see a bunch of .ADMX files located at C:\Windows\PolicyDefinitions
on the DC. I also see a lot of .ADML files located at C:\Windows\PolicyDefinitions\en-US.
Where is my Central Store located that my Group Policy references? How do I know what location GP is reading from?
Now I installed the Administrative Templates (ADMX) for Windows Server 2008 R2 and Windows 7 from here:
Administrative Templates (ADMX) for Windows Server 2008 R2 and
Windows 7
This gave me a "Win7-2008R2-admx.msi" package that I installed. I took the defaults and extracted contents to:
C:\Windows\PolicyDefinitions\Server 2008 Win7\PolicyDefinitions
Are all of these .ADMX files supposed to be placed into my Central Store?
If I mouse-over "Administrative Templates" in Group Policy Manager is says that the policy definitions are retrieved from the local machine.
I then right-clicked on top of "Administrative
Templates" in Group Policy Manager and highlighted Inetres and selected Delete.
While in Add/Remove Templates I click on Add and it defaults to looking for "Policy Templates" and will not let me select and .ADM/.ADML/.ADMX files.
What am I doing wrong here?
How do I know that I'm using the most recent Inetres file?
How do I know which file Group Policy Manager is using to manage the IE settings that are in:
User Configuration->Administrative Templates->Windows Components->Internet Explorer->Compatibility View->Use Policy List of Internet
Explorer 7 sites
or
Computer Configuration->Administrative Templates->Windows Components->Internet Explorer->Compatibility View->Use Policy List of
Internet Explorer 7 sites.
Is there anything else you can suggest?
Many, many thanks in advance for any response

Hi,
Regarding your question, usually we create a Central Store for Administrative Templates (Both .admx and .adml files), and create a folder that is named PolicyDefinitions in the following location:
\\FQDN\SYSVOL\FQDN\policies. The .adml files on the Windows computer
are stored in a language-specific folder. For example, English (United States) .adml files are stored in a folder that is named "en-US." When you have copied all .admx and .adml files, the PolicyDefinitions folder on the domain controller should contain the
.admx files and one or more folders that contain language-specific .adml files.
Please refer to the following articles. You will get more helpful details about the Central Store for Group Policy Administrative Template files.
How to create the Central Store for Group Policy Administrative Template files in Windows Vista
http://support.microsoft.com/kb/929841
Windows 7, Windows Server 2008 R2 and the Group Policy Central Store
http://blogs.technet.com/b/askds/archive/2009/12/09/windows-7-windows-server-2008-r2-and-the-group-policy-central-store.aspx
Based on your description, I understand you enable the setting “Use Policy List of Internet Explorer 7 sites”. However, didn’t show any sites in IE in client even after forcing a GP update
(gpupdate /force). Please use command “gpresult” in clients to collect the GPOs, and then check whether the GPO contain the setting “Use Policy List of Internet Explorer 7 sites” was applied to clients or wasn’t.
In addition, you also can change the related setting by using registry directly.
Follow the path of the registry:
HKEY_CURRENT_USER->Software->Policies->Microsoft->Internet Explorer->BrowserEmulation->PolicyList. (Create registry folders
manually if not present)
Right Click
PolicyList ->New->String Value->Enter the name of the website. (Both under ‘Name’ and ‘Data’. For example,
Value name: example.com Value data: example.com)
There is a similar question, please read as a reference.
Add manually URL on Compatibility View List in IE10
http://social.msdn.microsoft.com/Forums/ie/en-US/5a15e861-d106-471e-a968-fdea15e31c45/add-manually-url-on-compatibility-view-list-in-ie10
Hope this helps.
Best regards,
Justin Gu

Disable Private Browsing via Group policy

We are a medium sized business using Firefox 27.0.1. I have been looking for a way to control private browsing via group policy for a while but there are no clear answers on how a system administrator can do this without a convoluted process of editing files that can't be found anywhere on a computer.
Our environment:
windows 2008 DC
using group policy
500 users, all windows
Do not use any proxy or L7 filtering
I've looked into using the adm file that is available from the link below. I've sifted through the code and followed instructions for the lockdown process for Computer and User configuration; however, nothing works.
http://4sysops.com/archives/group-policy-for-firefox-and-chrome/#download-the-adm-files
If someone can point me to a registry entry or a vbs file that can be used as a start up script, it would be greatly appreciated by myself and all the system administrators of the world that are trying to decrease private browsing in organizations.
Between the 3 major browsers we are using on our Windows platform (IE, Chrome Firefox); Firefox seems to be a challenge to control. I have been successful in controlling settings via group policy for the other two. I'm working on a cumulative step by step document for this and will share with the world when I am able to configure Firefox.

Thanks for those suggestions; however, they don't help sysadmins that already have the non-enterprise version in their environment. From what I gather, there really isn't a straightforward way of doing this via group policy in a Windows environment without first removing the app and then deploying it with customizations (using tools suggested).
I guess I'll go with the answer "No, there isn't a straighforward way of controlling Firefox through Group policy".

Install Flash player via group policy

How can I install flash player and shockwave via group policy
on a windows 2003 domain?

Network Deployment of Adobe Flash Player
I found this link http://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_guide.html
It is a good idea to extract the msi the deployment data point using msiexec /a {filename} (this creates an administrative installer)
Use the extracted MSI to deploy flash. (either assigned or published)
Please make sure that the user can read from the data point you place the files.

Deploying msi via group policy without administrative rights

Similar Messages

Maybe you are looking for