GroupWise 6.5.7 distribution without local admin rights

I would like to distribute the GroupWise 6.5.6up1 (6.5.7) client
installation (from 6.5.1).
Im using the setup.cfg and setup.ini to have an unattended installation.
It is working great with local admin rights.
Now I would like to distribute this version with ZENworks. Im using the
workstation object (association) so the distribution will take place when
the workstation starts up.
But (as far as I can see) the registration of DLLs will not take place.
What kind of alternatives are there to distribute GroupWise without local
administrator rights?
Thanks.
Armand.

Thanks for the reply.
The .aot files give problems, dll files are missing (the known
vslwp7.dll) and I found a lot of bad experiences on the forums with the
viewer etc.
Armand.
> I've been using the AOTs included with the GW Client (Zen directory). =
> They import into Zenworks easily and have worked well for me the last 2 =
> upgrades.
>
> >>> <[email protected]> 10/11/2006 1:34:27 AM >>>
>
> I would like to distribute the GroupWise 6.5.6up1 (6.5.7) client
> installation (from 6.5.1).
> I=92m using the setup.cfg and setup.ini to have an unattended installation.=
>
> It is working great with local admin rights.
>
> Now I would like to distribute this version with ZENworks. I=92m using the
> workstation object (association) so the distribution will take place when
> the workstation starts up.
> But (as far as I can see) the registration of DLL=92s will not take place.
>
> What kind of alternatives are there to distribute GroupWise without local
> administrator rights?
>
> Thanks.
> Armand.
>
>

Similar Messages

Delay when starting accdb without local Admin rights.

Hi,
I have a problem with one application, the front end of the application is MS Access DB that's connects to our SQL Server over odbc driver If the user is in a local administrator group everything is working fast. When the same user is put in the user group
without Administrative rights I recive a delay for about 60 sec then the error pops up
After I hit ok a new SQL login pops up and I just press second time ok and the application starts without entering any user and pass. This is not happening if the user is in the built in Administrators Group.
Thanks for the help
fract

Hi fract,
as a Microsoft partner I have asked support for help.
Here is their answer:
Hi Partner,
Thanks for your reply.
Based on my research, the issue is identified as a compatibility issue that Access 2010 has with SQL Server 2008 R2. Access uses PERMISSIONS function to check the privileges. The PERMISSIONS function is deprecated in SQL Server 2008 R2. I haven’t found
any workaround for this issue currently.
You can check the more detail information at below link:
PERMISSIONS (Transact-SQL)
http://msdn.microsoft.com/en-us/library/ms186915(v=sql.105).aspx
I think you need to access SQL Server 2008R2 with local admin right.
If you have any further questions, please let me know.
Best Regards,

Running Desktop software without local admin rights

Is it possible to run Blackberry Desktop Software without the user having local admin rights? I have a number of users who have work BBs who need to use BDS, but I am in the process of correcting my predecessor's decision to give everyone local admin rights.

Hello gheatley,
Welcome to the Support Community!
The BlackBerry® Desktop Software will need to be installed in a Windows® user account with local admin rights, but it can be used from within other user accounts with more limited permissions.
Thanks.
-FS
Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.
Click Solution? for posts that have solved your issue(s)!

Update says another copy is running and does not update if user does not have local admin rights

An update message popped up when opening Firefox 9.1 Accepted the message to update. Got above error each time I open Firefox as a user without local admin rights.

Hi,
Please see [https://support.mozilla.org/en-US/kb/Updates%20reported%20when%20running%20newest%20version#w_delete-update-configuration-files this.]

Can individual Adobe Air apps be installed without local admin permission into a user-owned folder?

Is this a supported scenario?
Windows 7 PC.
Adobe Air runtime (latest; 4.0) has been installed by an administrator using a local admin account and the eulaAccepted file is present under the "All Users" profile.
User logs in using her own account which does not have local admin rights.
User downloads an Air app and tries to install it to C:\Users\<username> where she has full write permissions to the disk.
What I observe when acting as the User is that the Windows UAC (security escalation to local admin rights) dialog pops up. Can anyone clearly state what the Adobe Air installer is doing that requires the UAC escalation when installing an app to a user's folder? Thanks.

Thanks for your reply, Chris. We're working around these problems by deploying the Air runtime + the application separately using an administration tool, which is fine for now.
I logged the question because I don't see any registry edits or privileged folder access taking place. I suspect that the UAC escalation has something to do with the "eulaAccepted" file; checking that it exists. I doubt that escalated permissions are really required for this. In the long term, it'd be good if this "use case" could be added to the test cycle of Air; perhaps the UAC dialog could be avoided, improving the flexibility of deployment options.
Ideally the test would start with an adminstrator-installed Air package *without* the EULA being accepted. The user should be able to install apps and approve the EULA without the UAC dialog popping up at all.

Local admin rights when Edit locally

Hello, all!
We have the same problem as in
Local Admin rights to "Edit Locally" ?
"The end users do not have administrator rights on their local PCs , they logon to the domain server with restricted rights. When it comes to portal, when trying to edit a document with "Edit locally" it is not possible to do is even if the user has all the rights for the document in the Portal KM configuration. When we make the user local admin, everything is OK"
We are on SPS14, Windows XP SP2. Domain users can run corresponding applications and can create dirs or files in a temp directory. We also utilize env. variable SAPKM_USER_TEMP but with no success.
Could yoã please suggest, how to find rights needed to execute Local Edit. Are there any way to trace this Docservice ActiveX?

Hello Roman,
here a note which describes a solution for a user account wuth restricted rights:
The Edit Locally activex will be installed based on following
installation steps:
The browser will recognize that the KM DocService activex has to be
started.
In case of the activex isn't installed on the the PC, it will be
downloaded from the KM server (...etc/docservice/docservice.cab)
The browser will extract two DLLs from the docservice.cab file
(docservice.dll and sapkmprogressplayer.dll) and register them on the
local PC. To see if the installation succeed you can open within the
browser following dialog: Tools/Internet Options/Settings/View Objects,
look for program file SAP KM DocService Control.
Registry keys in following areas will be created:
Area HKEY_CLASSES_ROOT:
HKCR\AppID\{5F8983A6-347C-46B9-BA7A-1B87E5DAE0BC}
HKCR\ProgressPlayerMod.ProgressPlayer
HKCR\ProgressPlayerMod.ProgressPlayer.1
HKCR\CLSID
HKCR\TypeLib
Area HKEY_LOCAL_MACHINE:
HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINNT/Down
Downloaded Program Files/DocService.dll
HKLM\Software\Microsoft\Code Store Database\Distribution Units\
When finishing these steps successfully the installed version can be
located within the browser dialog Tools/Internet Options/Settings/View
Objects SAP KM DocService Control and den KM DocService will
start loading the document content from the KM server and starting the
corresponding application for editing.
Installation with restricted user accounts:
With restricted user accounts e.g. no access rights to create registry keys in the area of HKCR or HKLM etc., which lets the described installation fail, following installation procedure leads to success:
Register the needed DLLs manually on the PC (e.g. via a shell command script) with a user account having enough access rights.
1.1 Create an installation folder (don't use /windows/system32) on the PC and copy the DLLs (docservice.dll and sapkmprogressplayer.dll) to it (extract them from docservice.cab with a tool e.g. winzip).
1.2 Open a command shell on this installation folder.
1.3 Unregister possible existing versions with the following command:
"regsvr32 docservice.dll /U " and "regsvr32 sapkmprogressplayer.dll /U "
1.4 Register the both DLLs with: "regsvr32 docservice.dll" and "regsvr32 sapkmprogressplayer.dll "
1.5 If the two registration steps fail check the permissions to write
into the system registry.
1.6 The installation folder do not need special permissions, the linkage to the DLLs will be done via the system registry.
1.7 Additionally the following setting is mandatory to succeed the installation:
Disable the "ActiveX Version Check" function within the KM Configuration
SystemAdministration->SystemConfig->KnowledgeManagement->
->Configuration->ContentManagement->Utilities->Editing->LocalEditing-> ActiveX Version Check (Uncheck the checkbox)
Setting a different TEMP directory:
In cases that it is problematic to use the standard %TEMP% directory, setting the environment variable SAPKM_USER_TEMP pinpointing to a corresponding directory path (e.g. X:\SHARES\USERS\xxx\CheckedOutDocuments) will be also supported. If the access to that directory fails the standard %TEMP% directory will be used as fallback.
Hope this helps,
Michael
Message was edited by: Michael Braun

Old/Legacy application requires Local Admin Rights to open Reader

Hi,
I've got few users who has a very old application. The app generates certain report in PDF format and then it's supposed to open it up in Adobe Reader. Currently, the users are using Adobe Reader version 6.
I'm trying to get these users upgraded to latest version of Adobe Reader. After some testing, it seems that this old application works fine if the users are given Local Admin Rights to the computer. The application can successfully generate its reports and then open it up in Adobe Reader.
The users are running on Windows XP SP3. While testing, I gave users full access to "C:\Program Files\Adobe\" and the legacy application's installation folder, since I'm not sure why the Local Admin Rights allows Reader to open. However, this didn't seem to help.
Is there anything you can suggest in this case?

Chris Will wrote:
>
http://fpdownload.macromedia.com/get/shockwave/default/english/win95nt/latest/Shockwave_In staller_Full.exe%3E
>
> HTTP 404 Not Found.
What's with the %3E entity on the end of the URL you posted?
What
happens if you remove it ;-)
Here's a tinyurl that hopefully won't wrap (being the reason
I bracketed
the original in with <> characters)
http://tinyurl.com/2f2brm

Local Admin Rights - add / remove ?

Is there a way to add and remove local admin rights for users at logon / logoff in Server 2008?
Workstations are XP sp3 and Windows 7 Sp1. We have users who move from computer to computer and they need local admin access but we would prefer to not have Domain Users have local admin rights to all PCs.

Hi,
As far as I can see we can add user to local admin group at logon, but the user should relogon to get the membership, and if we also remove the user from local admin at logoff, then this equal to do nothing.
To add a domain user to a single computer as local administrator using GPO, I would like to suggest you go through the below similar threads:
Use GPO to add a single admin user to only one computer on the domain.
http://nerddrivel.wordpress.com/2013/05/24/use-gpo-to-add-a-single-admin-user-to-only-one-computer-on-the-domain/
How do I add a domain user to a single computer as local administrator using GPO
http://social.technet.microsoft.com/Forums/en-US/0a3eda5c-28ef-418e-a13d-f47fe0bf1bc3/how-do-i-add-a-domain-user-to-a-single-computer-as-local-administrator-using-gpo
Granting Local admin rights via Group Policy to a particular computer
http://social.technet.microsoft.com/Forums/windowsserver/en-US/4ceff330-0b72-4ed2-a55a-3089b504d2fc/granting-local-admin-rights-via-group-policy-to-a-particular-computer?forum=winserverGP
Hope this helps.
Regards, Yan Li

Installing SQL server with local Admin rights

Dear DB experts
I have a concern about installing SQL server 2000 on win 2003 with out local admin rights
I have delegated local admin rights to a Domain user. that user can install and configure SQL with out any issues or its is a must to install SQL using local administrator account pls advise.
Regards
Rabbani
RaSa

Hi Syed_R,
SQL Server 2000 was out of support in SQL Server Forums since April,2013. You can install SQL Server 2005 or later version and more experts will assist you.
As other post, the user that runs the SQL Server installer must have Admin rights on the server when installing. For local installations, you must run Setup as an administrator. If you install SQL Server from a remote share, you must use a domain account
that has read and execute permissions on the remote share.
In addition, in preparation for setting up Microsoft SQL Server on this system, you add the Setup account to the local administrators group, also the Setup account need to have certain user rights for avoiding SQL Server installation fails. Such as Local
Policy Object Display Name, Backup files and directories and so on.
For more information, you can review the following article.
http://support.microsoft.com/kb/2000257
Thanks,
Sofiya Li
Sofiya Li
TechNet Community Support

GPO - 2012 - Enforce Local Admin Right

Hello,
Just wondered if there was a way to deploy a GPO to enforce local admin rights for individual endpoints.
We need a way to control who has local admin rights to what, but in this case we need to say grant local admin rights to Users A, B and C on workstations D, E and F only.
Other than creating a GPO 'per workstation' I don't see a way. DFL / FFL will be 2012.
Anyone got any ideas?
Thanks
Stuart

Hello
Thank you for the reply. This issue is a little hard to grasp and to explain clearly. I understand what you have said, I am fairly proficient with Group Policy.
I want to be able to give one single user, access to one single PC and control it centrally. I think that is a better way of explaining it. So if I have 100 PCs and 100 users, and say 20 of those users needs to have admin rights on their own
PC only and not on other PCs.
That is what I am trying to accomplish. If I great a security group called 'Desktop Admins' then link a GPO to an OU where the 100 PCs are, then security filter by the security group, then everytime I add in a user, they will get local admin rights
to all 100 PCs. However I only wanted to grant them local admin rights on one PC. That being their PC.
I want to manage this centrally rather than remotely assigning local ACLs. I also like GPO because if a local admin user decides he/she wants to give their mate local admin rights on their PC, GPO will overwrite it.
Hope that makes sense
Much Appreciated

VS2010 Crystal 13 click-once deployment without user admin rights?

The only supported way of deploying our runtimes is to use one of our prepackaged msi's.
We do not have any documentation for manual deployment or anything that lists what specific dlls, registry settings, etc are needed to run specific configurations (ie web app vs windows apps).
Jason

As well as what Jason posted CR MUST have local PC Admin rights because we need to get past DEP/UAC etc. as well as be able to register the COM components, insert all of the registry keys required and the usual folder creation and file copying. Without it CR simply won't install properly and your app will never run. As noted in those other posts if you write a .NET app you have no choice but to use/set the native permissions and file distribution. If it's a WEB based app the you deploy it on each WEB server, users get a Viewer and Printer control through a browser download. But for Windows, it's a must.
IT departments have the ability to push out Special permissions for users to install software, not a CR configuration so check with your IT group or Microsoft and search on Profiles. So the each users doesn't need to be granted Admin rights to use it but they need it to install, assuming when installed it's set for All users. Other option is a local network Admin install on each PC. Not the nice way of doing things though.
Bottom line is because it's a Native .NET windows app you have no choice but to distribute all of CR's runtime and dependencies.
Don

Why would a JNLP require local admin rights?

I'm working as a technical support contact for a user working on a third-party company's web app, which is a JNLP. (I.e.: this is a JNLP I have no control over and no idea how to use, but the goal is simply to get it to launch.)
When I am a local admin, I am able to run the JNLP without issue. If I am not a local admin, the application starts to load... the Web Start appears with the application's logo, name, and a few JARs being loaded. Then, nothing. It closes without any errors, and I'm unsure of where I could find any logs with a trace.
Now, here's the plot twist: the same conditions apply to the Java Console itself. That is, if I am not a local admin, and I try to run the console, Internet Explorer closes. No error, nothing in the event log.
And, another twist: as I tried this across multiple workstations (Terminal servers, actually, running Server 2003 SP2) I discovered one has a different Java build. The problem occurs across several servers running Java 1.6.0_03. The one that's running 1.5.0_09 does NOT have this problem - the JNLP runs fine, and the console runs fine. IE is the same build (5730.11) on all.
I'm not even sure where to begin. I don't know where the find relevant log files, I can't run the console, and there is no obvious way to get general support for a Java issue (technically it has nothing to do with this vendor's JNLP if even the console won't run!) except this jumble of forums. Any and all advice is appreciated.

for troubleshooting failure on particular machines, look at the FAQ:
http://java.sun.com/javase/6/docs/technotes/guides/javaws/developersguide/faq.html#602
But it seems like your problems are sooner than would result in any trace file output.
If the browser cannot show the java console, then it fails to initialize the java plug-in, so I would suggest trying stand alone java applications.
1.) can you launch from a command line "java -version"
2.) if you can, can you launch "java java.awt.Frame" it should reply NoSuchMethodError: "main" .
3.) if that works, try downloading the JDK and run a stand alone demo application from the demos directory such as SeingSet2.
(cd into C:\Program Files\Java\jdk1.6.0_04\demo\jfc\SwingSet2 , and run "java -jar SwingSet2.jar"
If you can't do all of that, then java install is messed up, and so you would have no chance of running applets or jnlp applications.
by the way, what os and hardware are you running on, and what version(s) of java are installed.
/Andy

Is it possible to set up ADFS without domain admin rights in Windows 2012 R2?

I've set up Windows 2012 R2 on my development box and want to enable the ADFS feature to test claims based authN. In ADFS 2.0, you could opt to install standalone and local admin privileges would be enough to install ADFS and authenticate against the domain
AD.
However, with the new ADFS, after installing the feature it asks to enter the credentials for an account that is a domain admin. Is it still possible to configure ADFS without domain admin privileges?

Hi,
According to my research, if you want to set up AD FS in Windows server 2012 R2, each computer
that functions as a federation server must be joined to an Active Directory domain.
Besides, AD FS requires a certificate for SSL server authentication on each federation server in your federation server farm. Furthermore, you need a membership in
Administrators on the local computer to install the AD FS role service.
For more detailed information, please refer to the links below:
How to deploy AD FS in Windows Server 2012 R2
http://technet.microsoft.com/en-us/library/dn303423.aspx
Best regards,
Susie

Stuck on how to improve very slow query without any admin rights

Hello All,
I am using the code below to query a very large data table (RH) and a few other joined tables. I am trying to improve the query but I do not have any admin rights and have no idea how to get diagnostic info on how the query is being executed. Apologies for the system specific and probably not easy to read code but I do not have a generic version that anyone could run, and no admin rights so I can not create tables.
The main part of the code below (subquery R) takes about 10 minutes to run (3 minutes without the date parameters) and the full code (with the two analytic functions on top) below takes an eye watering 30 minutes to run and this is only a subquery of a much larger query so I really need to get this running more quickly. All I want to do is place a cap on the dates, get partitioned row numbers and a lead row value on one of the fields. I really am stuck on how to get this query more efficient. Am I counting things multiple times unnecessarily? How can I make this quicker? Am I committing some cardinal programming sin in using analytic functions on subqueries?
Apologies for the vaugueness of this code and my questions but I am totally clueless about diagnostics and basically have very limited system access so I'm stuck as to where to go or to look.
Very grateful for any advice,
Jon
SELECT R.*
, ROW_NUMBER( ) OVER( PARTITION BY R.RTBLE_ID ORDER BY R.EFF_DT DESC, R.CHG_DT DESC ) RN
, LEAD(R.RTNG_CD,1,0) OVER( PARTITION BY R.RTBLE_ID ORDER BY R.EFF_DT DESC, R.CHG_DT DESC ) RTNG_CD_PREV
FROM ( SELECT RH.RTNG_ID
, RH.RTBLE_ID
, RA.RTNG_ACTN_DESC
, TYP.RTNG_TYP_DESC
, RH.RTNG_CD_ID
, RC.RTNG_CD
, RH.EFF_DT
, RH.CHG_DT
, RAL.RTNG_ALRT_TYP_ID
, RAL.EFF_DT ALRT_EFF_DT
, RAL.CHG_DT ALRT_CHG_DT
, RH.PRV_FLG
FROM FTCH_RTNG.RTNG_HIST RH
, FTCH_RTNG.RTNG_ALRT_HIST RAL
, FII_CORE.RTNG_ACTN RA
, FTCH_RTNG.RTNG_TYP TYP
, FII_CORE.RTNG_CD RC
WHERE RH.RTNG_ACTN_ID = RA.RTNG_ACTN_ID
AND RH.RTNG_TYP_ID = TYP.RTNG_TYP_ID
AND RH.RTNG_TYP_ID = RC.RTNG_TYP_ID
AND RH.RTNG_CD_ID = RC.RTNG_CD_ID
AND RH.RTNG_ID = RAL.RTNG_ID (+)
AND RH.DELETE_FLG = 'N'
AND RH.EFF_DT < TRUNC(CURRENT_DATE,'MM')
AND RAL.EFF_DT < TRUNC(CURRENT_DATE,'MM')
)R
-----

Thanks so much for replying blueforg, and for pointing out the code markup.
Our server is in the US and we run our code from London, so it is the local time I am interested in, CURRENT_DATE is merely there to get that and as you suggest is not a column. I want my cap to the first of whatever month I run the code on so I'm happy with that bit of the code (so 1 Oct if I run it today). I'm just surprised at how slow my code becomes when I try and restrict the dates and get the row numbers and next row values.
This code is actually a subquery used in a much bigger query that I am trying to tidy up and make more efficient. The RN is important as I will eventually be filtering for RN = 1. I didn't post the full query as it is huge,badly written (by me) and and particular to our databases so I'm tackling bits one at a time to cut down on confusion. I'll repost with the RN=1 and the code markup ;)
I also restricting the RH table directly (SELECT * FROM FTCH_RTNG.RTNG_HIST RH WHERE RH.EFF_DT < TRUNC(CURRENT_DATE,'MM')) and moving the analytic functions into the R subquery but that is very slow as well. I heard that temporary tables are efficient? I'm assuming that with my rubbish priveleges I will not be able to do that. I don't want to take any chances of messing anything up either!
Jon
SELECT RT.* FROM
( SELECT R.*
          , ROW_NUMBER( ) OVER( PARTITION BY R.RTBLE_ID ORDER BY R.EFF_DT DESC, R.CHG_DT DESC ) RN
          , LEAD(R.RTNG_CD,1,0) OVER( PARTITION BY R.RTBLE_ID ORDER BY R.EFF_DT DESC, R.CHG_DT DESC ) RTNG_CD_PREV
    FROM ( SELECT RH.RTNG_ID
                  , RH.RTBLE_ID
                  , RA.RTNG_ACTN_DESC
                  , TYP.RTNG_TYP_DESC
                  , RH.RTNG_CD_ID
                  , RC.RTNG_CD
                  , RH.EFF_DT
                  , RH.CHG_DT
                  , RAL.RTNG_ALRT_TYP_ID
                  , RAL.EFF_DT ALRT_EFF_DT
                  , RAL.CHG_DT ALRT_CHG_DT
                  , RH.PRV_FLG
            FROM    FTCH_RTNG.RTNG_HIST RH
                  , FTCH_RTNG.RTNG_ALRT_HIST RAL
                  , FII_CORE.RTNG_ACTN RA
                  , FTCH_RTNG.RTNG_TYP TYP
                  , FII_CORE.RTNG_CD RC
            WHERE RH.RTNG_ACTN_ID = RA.RTNG_ACTN_ID
            AND RH.RTNG_TYP_ID = TYP.RTNG_TYP_ID
            AND RH.RTNG_TYP_ID = RC.RTNG_TYP_ID
            AND RH.RTNG_CD_ID = RC.RTNG_CD_ID
            AND RH.RTNG_ID = RAL.RTNG_ID (+)
            AND RH.DELETE_FLG = 'N'
            AND RH.EFF_DT < TRUNC(CURRENT_DATE,'MM')
            AND RAL.EFF_DT < TRUNC(CURRENT_DATE,'MM')
                                                      )R )RT
WHERE RT.RN = 1-----

Giving an OD Network User/Group local admin rights.

Is there a way to manage workstation admin rights from the server?
I ran into a problem with Lightroom that requires admin privileges to change the program preferences. We have alot of graphic art students with roaming profiles, spread out across 5 labs, that need to make this change. I would like to be able to add a group or all network users to the local admin group, for a few days, so the students can make the changes.

This works on 10.5, not sure about 10.6.
As root on the client.
Upgrading legacy group for local admin group - this is from 10.4 days, not sure if you still need to do it.
dseditgroup -o edit -f n -t group -n /Local/Default admin
Nest OD group in local admin group
dseditgroup -o edit -a DirectoryAdminGroup -t group -n /Local/Default admin
Gen

GroupWise 6.5.7 distribution without local admin rights

Similar Messages

Maybe you are looking for