How do you deploy Flash ActiveX + Flash Plugin at your School?

[Yeo695]

I'm currently having issue with the method I've been using for about 2 years now. I used a bat file upon start up to deploy both Flash Player for IE and Flash Player Plugin through GP that checked for older versions, if it was then it uninstalled them and then installed the newest version from my deploy server. However, I've only been able to get Flash for IE to deploy and the plugin version refuses to push out as of the last 4 weeks. In addition to this I've also started to run into issues with some 64bit machines are not getting the policy. I've been thinking of finally getting rid of the script and making 2 separate policies for ActiveX and the Plugin from the MSI files found here Adobe Flash Player Distribution | Adobe but I'm afraid to do this as I've never had luck with the Flash MSIs as I always end up finding it just adds another version and doesn't uninstall the previous version.

 

 

TLDR; I've been pushing out flash like an idiot for the last 2 years via unconventional startup script methods and it's finally breaking down and causing issues.

 

 

 

So I'm curious what you guys are doing to deploy Flash for IE and Flash Plugin?

[6Foot2]

We have SCCM. A batch file [usually called 'Assign.bat'] sits in the program folder on the SCCM server deploys the program to computers where we have sent it.

 

All quite easy (until Java change the way that they package their packages: I can't deploy Java that way I have been doing now as when I extract the files they don't decompress the way they used to)

 

However for the most part SCCM works well.

[Cache]

I've deployed using the MSI for the last 2/3 years now without any major issue.

 

there was a problem at the start where previous versions didn't get uninstalled correctly and that required a bit of messing around using the MSI Cleanup Tool and the Adobe Flash Player Uninstall Tool to clean it up and then it deployed ok after that.

 

I've never used the upgrade part of the GPO, I also tell it to immediately uninstall the old before adding the new MSI (and leave the MSI hagging around for a bit to make sure they all get done properly)

[Yeo695]

there was a problem at the start where previous versions didn't get uninstalled correctly and that required a bit of messing around using the MSI Cleanup Tool and the Adobe Flash Player Uninstall Tool to clean it up and then it deployed ok after that.

 

This seems to be the issue that I had. What MSI Cleanup tool are you referring to? Also are you pushing Adobe Flash Player Uninstall tool out via policy, if so how can you tell it not to uninstall the latest version?

[Yeo695]

Decided to apply for a Distribution license from adobe at Adobe Flash Player Distribution | Adobe

 

 

Supposedly this should roll everything into one MSI file and keep it updated including flash, air, reader and shockwave but requires you to apply for and and may take up to 3 days.

[localzuk]

I use the MSI via SCCM, but with the supercedence rule set to fully uninstall the previous versions before installing. Works pretty much perfectly now.

 

Decided to apply for a Distribution license from adobe at Adobe Flash Player Distribution | Adobe

 

 

Supposedly this should roll everything into one MSI file and keep it updated including flash, air, reader and shockwave but requires you to apply for and and may take up to 3 days.

 

That's not what the license does - it just makes it legal for you to distribute it in your enterprise. You still end up having to deploy each one individually.

Edited October 6, 2014 by localzuk

[Yeo695]

I use the MSI via SCCM, but with the supercedence rule set to fully uninstall the previous versions before installing. Works pretty much perfectly now.

 

 

 

That's not what the license does - it just makes it legal for you to distribute it in your enterprise. You still end up having to deploy each one individually.

 

 

 

Just found that out the hard way. Last time I listen to a suggestion posted on adobe support forums...

[3s-gtech]

I used to use Local Update Publisher which was ace, but I think I had issues come Server 2012 so I retired it. Now it's just MSI deployment, or rolled into updated images.

[localzuk]

I used to use Local Update Publisher which was ace, but I think I had issues come Server 2012 so I retired it. Now it's just MSI deployment, or rolled into updated images.

 

I tried that for 6 months, it was a nightmare. The number of machines which failed to update properly was over 60% each release.

[free780]

MSI in sccm. Make sure the option to perform deployment is set to when user is logged off otherwise Java doesn't install properly as ie is usually open when someone's logged in.

[computer_expert]

I used to use Local Update Publisher which was ace, but I think I had issues come Server 2012 so I retired it. Now it's just MSI deployment, or rolled into updated images.

 

Not sure if you are aware, but someone has created a similar program that works with WSUS on 2012/2012R2: https://wsuspackagepublisher.codeplex.com/

[localzuk]

Why would you need that, as SCUP still works as far as I'm aware. Its installed on my SCCM server (running Server 2012 and SCCM 2012 R2) at the moment.

[computer_expert]

Why would you need that, as SCUP still works as far as I'm aware. Its installed on my SCCM server (running Server 2012 and SCCM 2012 R2) at the moment.

 

I don't have SCCM.

[localzuk]

Ah, I forget that some people don't run it!

[3s-gtech]

Yup, no SCCM here. Noted about failed deployments though - our images are recent so I haven't pushed out many updates yet.

[nickbro]

You don't need SCCM to use SCUP

[Cache]

This seems to be the issue that I had. What MSI Cleanup tool are you referring to? Also are you pushing Adobe Flash Player Uninstall tool out via policy, if so how can you tell it not to uninstall the latest version?

 

No, when someone comes and says that Flash Player wasn't working on their machine, then I went and ran the Flash Player Uninstall Tool first, tried that and if it still didn't work ran this: Fix problems that programs cannot be installed or uninstalled

[computer_expert]

Yup, no SCCM here. Noted about failed deployments though - our images are recent so I haven't pushed out many updates yet.

 

You don't need SCCM to use SCUP

 

Thanks both!

 

I wasn't aware you didn't need SCCM to use SCUP (I assumed that it was part of SCCM due to the name ).

[Yeo695]

Same here, no SCCM I've revised my original script once more (the one that I first posted) and it seems to be working a little better now. If you're curious here it is. I run this as a .cmd file in GPO on computer > policies > Win Settings > Scripts > Startup. I've also added a few notes so you understand what needs to be changed. Whenever you see [sERVER-PATH-HERE] you replace that with you're server path where the files are located also remove the [ ]. You'll need the 15 plugin and activx along with the flash uninstaller. Make sure the file names are the same as they are in the script.

 

 

 

 

:: ----------------------------------------

:: Adobe flash giving "installax" errors when updating from GPO

:: This batch file will remove those errors and install latest version

:: This batch file should be run from a shutdown or startup script

@echo off

 

 

:: These are the only changes that need to be made for an updated version.

:: Simply put in the new version number, and the path to the new MSI file.

Set "LatestVersionNumber=15.0.0.167"

Set "LatestVersionMSI_Path=\\[sERVER-PATH-HERE]\install_flash_player_15_active_x.msi"

SET "LatestNPAPI_Path=\\[sERVER-PATH-HERE]\\install_flash_player_15_plugin.msi"

:: get Adobe Flash here: Adobe Flash Player Distribution | Adobe

 

:: Check Windows Version

ver | findstr /i "5\.1\." > nul

IF %ERRORLEVEL% EQU 0 goto ver_XP

ver | findstr /i "6\.1\." > nul

IF %ERRORLEVEL% EQU 0 goto ver_Win7

 

 

:ver_Win7

::Run Windows 7 specific commands here

Set "AdobeVersion=" & setlocal & Set "$V="

:: Look in the Uninstall area of registry, where the installed version of Flash player is listed

Set "RegKey=HKLM\SOFTWARE\Macromedia\FlashPlayerActiveX"

Set "RegItem=Version"

:: Take the output of a REG QUERY to the location above, and put it into the AdobeVersion variable

For /f "tokens=3*" %%! in (

'2^>nul Reg.exe QUERY "%RegKey%" /v "%RegItem%" ^|(

Findstr.exe /ri "\<%RegItem%\>"^)') Do Set "$V=%%!"

endlocal & call Set "AdobeVersion=%$V%"

 

 

:: If what is currently installed matches latest version, exit. Otherwise, go to install section

IF DEFINED AdobeVersion (goto :Win7vercheck) ELSE (goto :install)

:Win7vercheck

if %AdobeVersion% == %LatestVersionNumber% goto :exit

goto :Install

 

 

:ver_XP

 

 

::Run Windows XP specific commands here

Set "AdobeVersionXP=" & setlocal & Set "$T="

:: Look in the Uninstall area of registry, where the installed version of Flash player is listed

Set "RegKeyXP=HKLM\SOFTWARE\Macromedia\FlashPlayerActiveX"

Set "RegItemXP=Version"

:: Take the output of a REG QUERY to the location above, and put it into the AdobeVersion variable

For /f "tokens=3*" %%! in (

'2^>nul Reg.exe QUERY "%RegKeyXP%" /v "%RegItemXP%" ^|(

Findstr.exe /ri "\<%RegItemXP%\>"^)') Do Set "$V=%%!"

endlocal & call Set "AdobeVersionXP=%$V%"

 

 

:: If what is currently installed matches latest version, exit. Otherwise, go to install section

IF DEFINED AdobeVersionXP (goto :WinXPvercheck) ELSE (goto :install)

:WinXPvercheck

if %AdobeVersionXP% == %LatestVersionNumber% goto :exit

goto :Install

 

:Install

::Uninstall current versions of Flash from DFS share

\\[sERVER-PATH-HERE]\uninstall_flash_player.exe -uninstall

rem msiexec /uninstall %LatestVersionMSI_Path% /quiet

 

 

:: Remove offending registry entries causing the error

REG DELETE HKEY_CLASSES_ROOT\Installer\Features\6D98A6046E9005543B07D873D6BD65EB /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\4E867BFF724E3554CB631AF1E5269AD4 /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\0B86459180C72B4CA69A0A21353E906 /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\68AB67CA7DA73301B744AA0000000010 /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\A42FBB8140D64AC46B4BC13F2761E2CE /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\C460100B160DEAB4091314A638D85563 /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\4195BD842778D2748BFD2E90B25E896F /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\B0E390BD43903814AB06C5A1CDF94642 /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\D9D09CCDD8F460A40905DABD82F49FAF /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\2DAEED307B3FFB5409602AD510F5002D /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\41699E6F240F9544287BB8832B063165 /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\5258E229E7CA4924CAAA3417D244320C /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\3B9E3B7B41BF729498B49E215490FAA5 /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\087B87245BC6A734ABA6137C9FAF9B08 /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\0D8AAB85E4045854F93DDEB17BA22CEE /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\D90E84CDF5E493049BA3CFDE63FEEB55 /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\5A05710D5E944FB429CC7FF2F502BDCE /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\56A207F6F926A5E46B68A184628CA34B /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\26BB4CFE10DC36F41956CFD5BE534096 /F

REG DELETE HKEY_CLASSES_ROOT\Installer\Products\DF7BF1D05BC805A43811712A93B5E6EA /F

 

 

 

 

:: Install latest version of Flash

msiexec /quiet /package %LatestVersionMSI_PATH%

msiexec /quiet /package %LatestNPAPI_Path%

 

 

:: Copy mms.cfg to disable auto-update

:: copy /Y \\domain\Public\General\adobeflash\mms.cfg %systemdrive%\windows\system32\Macromed\Flash

:: copy /Y \\domain\Public\General\adobeflash\mms.cfg %systemdrive%\windows\SysWOW64\Macromed\Flash

goto :exit

 

 

:exit

:: ----------------------------------------