Page 1 of 1

User-based group policy deployment

Posted: Tue Mar 01, 2011 12:34 am
by christrengove
Testing Active Directory group policy deployment I can successfully deploy a machine-based software package. However, when I deploy the package to a particular user with non-administrator rights, the installation fails (due to insufficient rights). My understanding is that Active Directory deployment should allow a package to be assigned to a non-admin user, and it will install successfully (with elevated rights) when the user logs on. Indeed I have confirmed that with testing a non-InstallAware MSI file.

Has anyone managed to use Active Directory to deploy a user-based software package and have it install (with automatically elevated rights)? Or is this something that is not possible with InstallAware MSI files?

Chris Trengove

Re: User-based group policy deployment

Posted: Tue Mar 01, 2011 12:02 pm
by giaviv
Dear Chris,

In the Design tab under the Summary and UAC category, you will see a Request Elevation Level combobox.
This might be causing your problems - what is it set to?

Re: User-based group policy deployment

Posted: Tue Mar 01, 2011 5:11 pm
by christrengove
"Requested Elevation Level" is set to "Elevate Administrators Only (highest Available)", which I believe is the default. In any case the, the client I am testing with is Windows XP, so my understanding was that this UAC setting was irrelevant.

Chris Trengove

Re: User-based group policy deployment

Posted: Wed Mar 02, 2011 9:13 am
by giaviv
Dear Chris,

Even though UAC only exists on Vista & up, I would suggest playing with the Request Elevation Level variable and see if it works.