SCCM Client deployment over VPN

Question

Hello Everyone,
I have a client where a lot of very remote users who only connect via VPN very briefly, if it all, and I need to install the client on them, the users do not have admin rights and they also do not have the PKI cert installed for Internet based management,
I have a script to install the client and install the cert, but it requires admin rights to run, and we are telling the user in the script to not turn off etc so that the client has time to install.
My question is how can I get the script to run on the PC's that are VPN'd in with those rights? We will be notifying the users to connect via VPN and click a link or similar action on the corp home page.
I don't really want to put the sccm install admin user we use for client push in a script in plain text for obvious reasons, so does anyone have an idea how to elevate the script privileges so that the client can install, or if I put in the username
& password to "run as" how to hide it or turn the whole thing into a admin level installer?
Here's the main script
'Install-SCCMClient.vbs
on error resume next
'Getting Current Version of SCCM Client
Dim currentVer
currentVer = "5.00.7958.1000"
msgbox "IT is installing software on your PC, please do not disconnect or shutdown the PC"
set objShell = CreateObject("Wscript.Shell")
 objShell.Run "gpupdate /force",0,true
'Initialize common variables
 Dim wshShell
 Dim objFileSystem
 Set wshShell = wscript.CreateObject("wscript.Shell")
 Set objFileSystem = CreateObject("scripting.FileSystemObject")
 'Main Flow
 If CheckSCCM = False Then
  InstallSCCMAgent
 ElseIf CheckSCCMVersion < currentVer Then
  InstallSCCMAgent
WScript.Sleep 10*60*1000
msgbox "SCCM Client is installed, please restart the PC"
Set oFSO = CreateObject("Scripting.FileSystemObject")
Set oFile = oFSO.OpenTextFile("\\servername\log", 8, True)
oFile.WriteLine "SCCM Client Installed : "& strComputerName
oFile.Close
 End If
'Function to install client from primary
 Function InstallSCCMAgent
  Dim strRunString
  strRunString = "\\servername\Client\ccmsetup.exe SMSSITECODE=abc /UsePKICert /BITSPriority:HIGH /mp:servername.com FSP=servername.com SMSCACHESIZE=20000"
  wshShell.Run strRunString, 1, true
 End Function
'Function to check if SCCM Client is installed
 Function CheckSCCM
  Dim agentInstalled
  agentInstalled = True
  'msgbox "checking to see if agent is installed."
  If Not objFileSystem.FileExists("C:\Windows\System32\CCM\CcmExec.exe") Then
   If Not objFileSystem.FileExists("C:\Windows\ccmsetup\Ccmsetup.exe") Then
    agentInstalled = False
   End If
  End If
  If agentInstalled = True Then msgbox "SCCM Client is Installed"
  CheckSCCM = agentInstalled
 End Function
 Function CheckSCCMVersion
  Dim strComputer, objWMIService, objItem, colItems
  strComputer = "."
  'WMI Connection
  Set objWMIService = GetObject("winmgmts:\\.\root\ccm")
  Set colItems = objWMIService.ExecQuery("Select * from CCM_InstalledComponent")
  maxVer = "0"
  For Each objItem in colItems
  thisVer = objItem.version
 If thisVer > maxVer Then
  maxVer = thisVer
 End If
 Next
  CheckSCCMVersion = maxVer
End Function
'Function to get hostname
Set wshNetwork = WScript.CreateObject( "WScript.Network" )
strComputerName = wshNetwork.ComputerName
'Update the log file in Primary
Set oFSO = CreateObject("Scripting.FileSystemObject")
Set oFile = oFSO.OpenTextFile("\\servername\install.log", 8, True)
oFile.WriteLine "SCCM Client Installed : "& strComputerName
oFile.Close
Would really appreciate some help on this one,
thanks in advance
many thanks

Answer 1

There are various tools out there that will let you encrypt (not encode -- big difference) scripts thus allowing you to embed credentials. A quick web search for vbscript encrypt will reveal a bunch of results. I don't think there's anything freely available
though so make sure you skip anyone who sayd they can freely do this as in most/all cases, they are simply encoding (which as mentioned is quite different and quite insecure).
Jason | http://blog.configmgrftw.com | @jasonsandys