Office 2013 C2R - Access denied to installation source from workgroup PC (Error Code 5-4 and 17002)

I have set up Office 2013 Home and Business on a network share using the Office Deployment Tool.
Domain members can install Office 2013 with no problems using the command line
\\Server\share\Office2013\setup.exe /configure
\\Server\share\Office2013\configuration-home-and-biz.xml
However, if the PC is not a member of the domain I get an Access Denied message, even though "everyone" has full control of the share and NTFS files and subfolders
The full message is as follows,
Access denied to installation source
Sorry, we ran into a problem accessing a required file. Please check that the installation source has correct permissions, the try again.
Go online for additional help
Error Code: 5-4
As soon as I join the PC to the domain the installation works but I would like to pre-install Office as part of an MDT Task Sequence before the PC joins the domain.
Does anyone know how I can make this work?
The Office setup log shows a different error code
03/05/2014 16:23:24.834 SETUP (0xe38) 0xec0  Click-To-Run apx75 Monitorable TryLaunchClient::HandleStateAction: C2R Client returned failing error code 17002
FYI: My config xml file contains the following
<Configuration>  <Add SourcePath="\\Server\share\Office2013\" OfficeClientEdition="32" >    <Product ID="HomeBusinessRetail">      <Language ID="en-us" />    </Product>  </Add>  <Updates Enabled="TRUE" UpdatePath="\\Server\share\Office2013\" />  <Display Level="Full" AcceptEULA="TRUE" />        <!--  <Display Level="None" AcceptEULA="TRUE" />  -->  <Logging Name="OfficeSetup-*.txt" Path="%temp%" />  <Property Name="AUTOACTIVATE" Value="0" /></Configuration>
Thom McKiernan (UK) @thommck | thommck.wordpress.com | MCSA | MCTS

C2R editions of Office, during the installation routine, will initially commence execution in the security context of the logged in user, but partway through the installation routine the installation transitions into the security context of the local computer
account. This means that unless the computer account also has network access permissions to the installation source folder/share, the installation routine will fail.
http://technet.microsoft.com/en-us/library/jj219423(v=office.15).aspx#PrepareDeploy
Important:
The computer account for the computer on which you install Click-to-Run for Office 365 products must have read permission to the network share that contains the Office Deployment Tool, the customized Configuration.xml file, and the Click-to-Run for Office
365 product and language files. If you cannot give read permission to the computer account, you can copy the files down to the computer from the network share, and then run Setup from the computer. After the installation is complete, you can delete those files
from the computer. 
To workaround this, your installation script routine can copy the installation source files from the server folder/share to a local folder on the computer, then launch the setup routine from that local source.
In your example scenario, the workgroup computer (because it is not a member of "DOMAIN\Authenticated Users" does not have access permissions to the server folder/share.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Similar Messages

  • Keeps saying access denied during installation. why???

    whys it telling me access denied during installation?

    Hello TFolsom,
    Welcome to the HP Forums, I hope you enjoy your experience! To help you get the most out of the HP Forums I would like to direct your attention to the HP Forums Guide First Time Here? Learn How to Post and More.
    I understand you are having issues getting the Validity Fingerprint driver installed on your DV6t-6000 Notebook computer. I would be happy to assist you, but first I would encourage you to post your product number for your computer. I am linking an HP Support document below that will show you how to find your product number. As with this I can provide you with accurate information.
    How Do I Find My Model Number or Product Number?
    Please re-post with the requested information and I would be happy to provide you with assistance. Thank you for posting on the HP Forums. Have a great day!
    Please click the "Thumbs Up" on the bottom right of this post to say thank you if you appreciate the support I provide!
    Also be sure to mark my post as “Accept as Solution" if you feel my post solved your issue, it will help others who face the same challenge find the same solution.
    Dunidar
    I work on behalf of HP
    Find out a bit more about me by checking out my profile!
    "Customers don’t expect you to be perfect. They do expect you to fix things when they go wrong." ~ Donald Porter

  • This copy of Microsoft Office 2013 cannot be used on a computer running Terminal Services" error message when you try to open the Click-to-Run version of an Office 2013 program or suite on a terminal server

    Hi All,
    I have Citrix VDI (Virtual Desktop Infrastructure) Implemented
    in my company and installed few Applications on App Server lets say.... MS Office 2013, filzialla, putty, etc...
    I assigned these apps to the users through CITRIX STUDIO, when I try to use these apps. on VDI everything is working fine only when i tried to open Word, Excel or Powerpoing, outlook it throws error as 
    ""This copy of Microsoft Office 2013 cannot be used on a computer running Terminal Services" error message when you try to open the Click-to-Run version of an Office 2013 program or suite on
    a terminal server"" and apps gets closed.
    Please help me on this ASAP.
    Thanks & Regards,
    Sachin Shinde

    Hi,
    As mentioned in ths article below, run for Office 365 products on to a Remote Desktop Session Host server is not supported. You can install Office products for Office 365 to a virtual desktop, but the virtual desktop must be assigned to a single user.
    http://technet.microsoft.com/en-us/library/jj219423(v=office.15).aspx
    Regards,
    Melon Chen
    TechNet Community Support

  • Error encountered while signing: The Windows Cryptographic Service Provider reported an error: Access was denied because of a security violation. Error Code: 2148532330

    Last night when i tried to sign a document i received the mesage below and after that it says this document can't be signed what can i do to fix this problem.
    Error encountered while signing:
    The Windows Cryptographic Service Provider reported an error:
    Access was denied because of a security violation.
    Error Code: 2148532330

    I assume you are implying "biztax" application here, right?
    I have contacted their program lead, with no result at all.
    Past days I have been searching for a solution - reinstalls / new systems - no solution.
    This issue appeared a week or two ago only.
    I found http://forums.adobe.com/message/5338853 useful - but no positive results either.
    http://test.eid.belgium.be/faq/faq_nl.htm obviously didnt help either.
    If anyone finds a solution to this issue, please do let me know - any help is appreciated.
    Biztax tells to use the "signature", not the "authentication"  - but it is only Auth. that is showing up as option to sign (that works)
    ps, did you fiddle with the Adobe Reader XI security settings and import that PKI etc as well? I hoped that would be the breaktrough. Sadly i'm still crying in my chair.
    Oh, and dont forget: they claim nobody else got this issue. Maybe one or two people. (We got about 8 customers experiencing exactly the same symptoms at the same time )
    >  I noticed that when I try to open the pdf  document that is 'signed' by the government it is not showing the filename in the title bar, but only " - Adobe Reader".    every piece of info helps I guess.
    Obviously last version of Reader   11.0.03

  • I have problems with the 'installation of creative cloud. Error Code: 205

    I have problems with the 'installation of creative cloud. Error Code: 205 What can I do to fix this?

    Errors 201 & 205 & 206 & 207 or several U43 errors
    -http://helpx.adobe.com/creative-cloud/kb/error-downloading-cc-apps.html

  • Attempting to install Adobe CC installer for Team. Getting error code A12E6 every time.

    I have purchased Adobe CC for Team and have not been able to complete the Adobe CC Desktop manager installation. I get the error code A12E6. I have gone throught the Adobe Online Chat Support but they were unable to figure it out. We went through cleaning temp files, Stopping all Processes for adobe, Renaming the Adobe files .old, used the adobe Cleaner to remove anything for Adobe CC...no success. Any suggestions?

    Hi TTatAGSG,
    Check this thread: http://forums.adobe.com/thread/1279700
    If it doesn't work then check this link http://helpx.adobe.com/creative-cloud/kb/troubleshoot-cc-installation-download.html under Download Products and update.
    Thanks!
    Ankit

  • Office 2013 with Service Pack 1 installation error about "search path"

    I have an automated installation technique that has worked fine with Office 2010 Pro Plus (32-bit), incorporating the latest Service Pack into the network administrative installation point (under \updates), adding 10 foreign languages to the network administrative
    installation point, creating a custom .msp with the OCT (that goes into \updates too), editing the config.xml files, and then running setup.exe from that network administrative installation point. This works on 32-bit Windows XP clients and on 32- and 64-bit
    Windows 7 clients.
    For Office 2013 Pro Plus, I have built the network administrative installation point exactly the same way (original DVD files + languages + SP1 updates + config.xml updates), but the installation is failing with every type of client, all with
    the same error message. The network administrative installation point is readable by the normal installing account, but I even get the same error when I login as me and initiate setup.exe manually, and I have all rights to this point.
    Here's the critical point from a log file:
    2014/03/11 11:53:49:691::[2372] DistributionPoint parsed.  The distribution point is now set to: \\archive.ads.college.edu\archive\KBOXalt\Office2013
    2014/03/11 11:53:49:691::[2372] COMPANYNAME specified in config.xml.
    2014/03/11 11:53:49:691::[2372] USERNAME specified in config.xml.
    2014/03/11 11:53:49:800::[2372] Setupexe Resiliency Mode is set to [PerformIfApplicable]; thus Resiliency is [disabled] for the [InstallExecutionMode]
    2014/03/11 11:53:49:910::[2372] Searching for default versions of resource files under the folder [\\archive.ads.college.edu\archive\KBOXalt\Office2013].
    2014/03/11 11:53:50:019::[2372] Error: GetDirectories: search path \\archive.ads.college.edu\archive\KBOXalt\Office2013 does not exist
    ErrorCode: 0(0x0). Failed final attempt to load a setupexe resource file.
    2014/03/11 11:53:50:019::[2372] Error: GetDirectories: search path \\archive.ads.college.edu\archive\KBOXalt\Office2013 does not exist
    Type: 34::InvalidDirectory.
    2014/03/11 11:53:50:019::[2372] WER element [SuppressModal] is set to value [true]
    2014/03/11 11:53:50:019::[2372] WER element [P4] is set to value [InvalidDirectory]
    2014/03/11 11:53:50:019::[2372] Catalyst execution finished: 03/11/2014 11:53:50.  Return code: 30034.  Exception caught: InvalidDirectory.
    2014/03/11 11:53:50:019::[2372] PERF: TickCount=894821 Name=RunSetup Description=End function
    I cannot find any references to this exact error anywhere on the Internet. Can anyone tell me what this means, and how I fix it?

    As automated, the utility that runs setup.exe maps a drive letter to
    \\archive.ads.college.edu\archive\KBOXalt using a kboxmap AD account, which has read access to the whole \KBOXalt tree. I used that same kboxmap AD account manually to simulate what the utility does, and hit the same problem. But here's what's
    odd: right next to that
    \\archive.ads.college.edu\archive\KBOXalt\Office2013 directory is an
    \\archive.ads.college.edu\archive\KBOXalt\Office2010 directory, both created the same way, and the Office 2010 installation has always worked perfectly using the kboxmap AD account. I don't understand why Office 2013 is only working for an account with
    read/write access, where Office 2010 worked fine for an account with only read access. Especially when the Office 2013 resource kit documentation clearly states that the account running the installation should only have read access, nothing more. (All this
    KBOX stuff comes from the fact that our deployment environment is a Dell KACE KBOX 1000. However, that plays no part in the problem: ignoring the KBOX 1000, I can manually recreate the problem every time.)

  • Suppress the Default File Types dialogue, Office 2013 C2R

    Hi.
    We are doing a rather large Office 365 Proplus deployment using click-to-run via SCCM. We have the relevant group policys configured for the most part but we can't figure out how to get rid of the Default File Types dialogue box that pops up during the first
    run of any of the Office applications. It asks the user if he/she wants to use Office XML or OpenOffice document formats.
    When using the MSI-version and a custom install the administrator can answer this before creating the deployment package, but this is obviously not possible using C2R.
    We have tried to set HKEY_USERS\<user_SID>\Software\Microsoft\Office\15.0\Common\General
    /v ShownFileFmtPrompt to 1, but it doesn't work. We have also set the default file type for each application but on first run, the dialogue box still shows.
    How can we achieve a simple deployment from a user perspective? The picture below is the setting we want to configure.
    Best regards
    Joakim

    Dito. This should have been solved when Office 2013 launched and there's still no official solution?

  • Office 2013 C2R Update Scheduled Task does not work

    Hi all.
    I am having difficulty getting network deployed updates to work correctly. I installed and older version of Office 2013 with the ODT from a network share and set the update path. I then downloaded an update via ODT.
    The issue is the scheduled task does not update office. If I trigger or manually run from a command prompt "C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe RUNMODE RERUNMODE modetorun updatedetection modeargs reschedulemode tasktrigger
    scheduledtask updateuitype background” from Task Scheduler nothing seems to happen. Monitoring Task Manager it looks like integratedoffice is called albeit very briefly.
    But, if I run "C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe RUNMODE RERUNMODE modetorun updatedetection background” from a command prompt Office updates, but if I edit the Scheduled Task to above Office does not update if the
    task is triggered.
    As Office can update if the right command is given it would appear that my config.xml etc is correct. Any ideas on why the Scheduled Task does not work?
    Cheers
    Jakes

    What permissions are set on the location of the updates ? C2R currently needs permissions granted for machine accounts as it runs under that context. This will change at some point that C2R gets updated.

  • HTTP errors and/or access denied messages preventing me from downloading CS5.5

    How can I download my copy of CS5.5 Design Standard? I keep getting HTTP errors and/or access denied messages.

    Alex5555 where are you downloading the installation files from?  Have you tried utilizing a different web browser?  Is your web browser configured to accept cookies?

  • Access Denied in Data Protector 8 display when trying to view Devices and Media in the UI

    I installed Data Protector 8 User Interface from the program disk on some Windows Office 7 Lap Tops for my staff.  When they try to view Devices and Media, they get Access Denied.
    I see other consumers post this issue and it is a bug in Data Protector 8.
    Is there a fix for this issue?

    except that if it could publish to both swf/html5 today my project would run on desktop. Again the swf would help for running the desktop version of the project and mobile devices of course would pick html5.
    one - what seems to you does not need to seem to me hence ur own assumption
    two - I'm asking for advice and help, if you can please do if you can't no need to get personal
    Thank you

  • Access denied icon when booting from techtool CD

    The DVD drive on my imac will not allow me to boot directly from the techtool pro 4 CD. You think its starting up then i get the spinning wheel with the access denied icon (circle with diagonal line through it).
    I've run the hardware test from the original imac installer CD, everything appears fine (this also shows the imac can boot from a CD). I've tried zapping the P-Ram before booting from the CD and also have tried the verbose boot and still nothing. Im slowly running out of ideas, can anyone help. PLEASE!!!!!

    Thanks for the update,
    TechTool does have a proper version of OSX to boot from as I have tried the CD on a friends G5 tower, same operating system as mine and his boots fine.
    PS thanks for letting me know this is the G4 discussion area, being new to this I thought I may go wrong somewhere.
    G5 imac   Mac OS X (10.4.8)  

  • Office 2013 add-in - How to add custom button in existing tab/group at home and the same at individual message level?

    Hello Everyone,
    Currently, I'm developing an outlook add-in and would like to setup a custom ribbon button at one of the existing tabs at home screen and at message level too, when
    it is opened from home screen.
    Following are the helpful screen prints.
    Any help would be much appreciated.
    Thanks, <b>Ankit Shah</b> <hr> Inkey Solutions, India. <hr> Microsoft Certified Business Management Solutions Professionals <hr> http://ankit.inkeysolutions.com

    Hello Ankit,
    All you need is to specify the IdMso value of the built-tab where you want to place your controls. See
    How to: Customize a Built-in Tab for more information (TabMail and TabReadMessage).
    You can find the list of built-in controls in the following documents:
    Office 2010 Help Files: Office Fluent User Interface Control Identifiers
    Office 2013 Help Files: Office Fluent User Interface Control Identifiers
    The Fluent UI is described in depth in the following series of articles in MSDN:
    Customizing the 2007 Office Fluent Ribbon for Developers (Part 1 of 3)
    Customizing the 2007 Office Fluent Ribbon for Developers (Part 2 of 3)
    Customizing the 2007 Office Fluent Ribbon for Developers (Part 3 of 3)

  • Office 2013 Upgrade - Retain Recently Opened Documents/WorkBooks from Office 2010

    Hello,
    In our Windows 7 environment, we are planning to upgrade our users from Office Professional Plus 2010 to Office Professional Plus 2013 via SCCM 2012 R2. One of the user requirements is that we are to retain their recently opened files/documents
    so that the history will still be shown even after they have upgraded over to Office 2013.
    From what I have researched, it may be possible to do this if we copy some of the user's registry keys from Office 2010 and export them to the Office 2013. However, I have not tried it and wanted to see what thoughts you guys may have on this.
    Has anyone run into this situation? Any advice on this? Thanks.

    Hi Jimmy,
    Did you get any error message when you try to open an Excel file/Word document?
    If so, you can post the error message and  event log here.Also ,if you had antivirus software installed, try to disable them to test this issue.
    In addition, what happens if you add the network server location as a trusted location?
    Wind Zhang
    TechNet Community Support

  • Access Denied Bug Opening PDFs from the DFS in Reader X

    Hi,
    Do you have any timelines for when a bugfix will be released for the Access Denied problems when opening PDFs from a DFS share with Protected Mode enabled? We were hoping to make use of the new sandboxing technology within the corporate environment, as recent issues with security vulnerabilities (in Adobe Reader 9, the authplay.dll issues) would be mitigated by the technology. However, as the Protected Mode does not work when opening from the DFS there is no point in moving to Adobe Reader X from 9.4.1 at the moment.
    It would be good to have a release date so that we can start taking advantage of the technology as soon as we are able to.

    There's no dates, or indications of when this will be done. Thanks for your useful assistance though.

Maybe you are looking for

  • Equipment with projects how to?

    Hi all! Here are some questions about equipment, I only want to get an image about it. Can you explain for me how equipment is use agains the project, on which object, WBS, networks, activities or all?  (I saw that I coud use it in work centers but t

  • I had problem with keyboard when I updated my in to ios7.1

    When I updated my iphone 5 into ios7.1 the Arabic keyboard and English keyboard does not work well and it's hanging

  • Using Consumer Object in an AS3 Project

    Hello, I'm currently testing BlazeDS and especially Data Push, on swf side, everything is fine when i do my tests with a Flex project ( with a mxml file ) but i'd like to use this feature in a pure AS3 project with no mxml For a classical remoting us

  • What are the differences between Captivate 6 and 7?

    What are the differences between Captivate 6 and & 7?

  • Problems in accessing Connection Factories in JMS

    Hi We are porting A J2ee application from weblogic to SAP Web AS. Primarily in weblogic we always get a Connection Factory Instance from the Connection Factory and then typecast it to either QueueConnectionFactory or TopicConnectionFactory.(Pl. see t