User rights problem
Posted: Wed Mar 16, 2011 10:28 am
Hello,
I'm playing with the 10.10 Trial Version today, and the program looks amazing so far. I'm totally new in this installer and MSI stuff and I'm facing a wall right now I'd need help with! Sorry for the noobie question if ever.
I'm taking the chance of migrating the domain to 2008 R2 DC's and staff laptops to Win7 Enterprise to finally get rid of users being local administrators and being able to install whatever they want (viruses and malwares included, of course.)
So I'm looking to deploying software through GPO's, Software Installation, while preventing users to install stuff themselves thanks to Applocker.
While it works flawlessly for MSI packages I downloaded, I can't for the life of me make it work for the package I created myself using IA 10.10 trial.
Here's the deal:
- Used IA to convert a Inno Setup project to MSI
- Build works fine, MSI creation too.
- I'm deploying the MSI using a Software Installation GPO on User Configuration
- I created a File Hash rule on the MSI on the Applocker GPO
Result:
- Event Viewer, under Applocker, says the package was allowed to run, so this looks fine...yet the package is NOT installed.
- If I manually run the package as admin on the computer, it works flawlessly.
- If I manually run the package as user, it complains when trying to create the application folder that it doesn't have the rights - this is normal.
- As far as I know, Software Install GPO's do not run with user credentials, and it works just fine with MSI packages I downloaded. Only this self-made (with IA 10.10) package is giving me trouble. And I don't know where to find clues about what's happening as the Event Viewer looks clean...
Could it be linked to the bug that is mentioned as a Sticky Post? Seems like it affects the licensed edition only while I only have the trial..
Any help with that would be reaaaally appreciated! Thank you in advance.
Nic
I'm playing with the 10.10 Trial Version today, and the program looks amazing so far. I'm totally new in this installer and MSI stuff and I'm facing a wall right now I'd need help with! Sorry for the noobie question if ever.
I'm taking the chance of migrating the domain to 2008 R2 DC's and staff laptops to Win7 Enterprise to finally get rid of users being local administrators and being able to install whatever they want (viruses and malwares included, of course.)
So I'm looking to deploying software through GPO's, Software Installation, while preventing users to install stuff themselves thanks to Applocker.
While it works flawlessly for MSI packages I downloaded, I can't for the life of me make it work for the package I created myself using IA 10.10 trial.
Here's the deal:
- Used IA to convert a Inno Setup project to MSI
- Build works fine, MSI creation too.
- I'm deploying the MSI using a Software Installation GPO on User Configuration
- I created a File Hash rule on the MSI on the Applocker GPO
Result:
- Event Viewer, under Applocker, says the package was allowed to run, so this looks fine...yet the package is NOT installed.
- If I manually run the package as admin on the computer, it works flawlessly.
- If I manually run the package as user, it complains when trying to create the application folder that it doesn't have the rights - this is normal.
- As far as I know, Software Install GPO's do not run with user credentials, and it works just fine with MSI packages I downloaded. Only this self-made (with IA 10.10) package is giving me trouble. And I don't know where to find clues about what's happening as the Event Viewer looks clean...
Could it be linked to the bug that is mentioned as a Sticky Post? Seems like it affects the licensed edition only while I only have the trial..
Any help with that would be reaaaally appreciated! Thank you in advance.
Nic