LGfL (Freedom2Roam) Cisco AnyConnect - Updating installed software via GPO...?

[Koldov]

TL;DR - Do I just put the updated MSI in the share?

 

Ashamed to say I've never looked past making the GPO, shoving the MSI in a share and letting it do it's thing (aside from the occasional troubleshooting issues installing over Wi-Fi)... then usually the program itself takes care of its own updates.

 

However, we have a VPN client from CISCO (via LGfL) that has recently had an updated version made available (after I poked them following the post from @penfold ).

 

http://www.edugeek.net/forums/security/233517-exploit-released-cisco-anyconnect-bug-giving-system-privileges.html

 

We have a very limited subset of the SLT who are allowed to VPN in and so testing is nigh on impossible (especially as they're all off on holiday) but I recently had a WFH user on-site who is rarely in school (unfortunately I was on their laptop remotely from home doing updates/SIMS move etc.) and thought I would let the VPN software update so signed in - as that's when it usually updates itself from the LGfL servers.

 

But no update happened... I've contacted LGfL who assure me nothing is wrong their end and have been told to just basically uninstall and reinstall the updated version... I mentioned that my user was WFH and they cannot uninstall/reinstall as they're standard users and they said that was the problem (like they need admin to do the update) which I've not really seen but I can't say for certain as updates are rare and I've usually done them during maintenance where I'm signed on as admin, but my RDP session was admin and it still didn't work...

 

The update went fine on my work laptop a couple of weeks ago, but again... I'm admin.

 

So, basically 2 questions:

 

1. If you know the software, is it your experience an update needs admin to run..?

 

2. If I was to leave the update until after the holidays (because I don't think it will get much use during) do I just drop an updated MSI into the share and some sort of GPO magic will happen

(or a setting that I can change) that means it will realise there is an updated version and do the update (or am I hoping)...?

Edited August 1, 2023 by Koldov