msi install elevated privildges

[torledo]

Hi chaps

 

I'm looking to install the shockwave player msi on to some machines via the users' login script. The domain users don't have local administrative rights to the machines, so i was wondering if the switches or method was to install an msi with elevated priviledges using msiexec ?

 

TIA

[torledo]

sorry to be a pain

 

but this is a bit urgent, need to get this sorted by lunchtime. Any ideas ?

[SYNACK]

I think that you just need to chuck in the registry key as stated here to make any MSI run with elevated privileges. You should be able to set this key, install then unset it to return to a secured mode. You can do it via GP if you have a windows server system setup to which is also discussed in the link. Edited February 7, 2008 by SYNACK
Added info

[ZeroHour]

You could use autoit to elevate to a domain admin fairly securely.

RunAsSet('user', 'domain', 'pass',0)
RunWait('msiexec something.msi')

[powdarrmonkey]

Why the login script? A startup script will run elevated.

[torledo]

sorry to be a pain

 

but this is a bit urgent, need to get this sorted by lunchtime. Any ideas ?

 

i tried adding the AlwaysInstallElevated key to a machine but after it failed to install following a sinlent install i run the msi directly via a network share as a domain user and when the installation ran i got the following error part of the way through install

 

Error 1303: you have insuffient prividledges to access:

C:windows\systems32\macromed\update.

 

I then had to abort the installation.

 

looks like it needs to create or write to a folder on the system drive, and can't.

[ZeroHour]

I honestly would do it with autoit and compile it to a exe and then link that exe to group policy. Its only 2 lines of code to run msiexec as another user.

[rusty155]

Why don't you just assign it through group policy? - This will install the msi using the system account.

[torledo]

Why don't you just assign it through group policy? - This will install the msi using the system account.

 

for some reason software deployment thru group policy has never played nice in our environment. I've given up on it and am looking at a proper software deployment solution i.e SMS to deal with centralised software deployment long-term.

 

Until then i'll give ZH's advice a go.

 

thanks for everyones input.

[ZeroHour]

Let us know if it works as I may get it wiki'ed about possible ways to elevate privileges.

[psydii]

Intrigued.. what environment do you have where gpo deployment doesn't play nice?

 

We had that problem once, but abondoning classlinkxp and creating new policies and XP images from scratch resolved it.

 

Not exactly something that you could do in the half hour before lunch, I'll grant you.