The "Always install elevated" policies only affect Windows Installer based
setups (those with .MSI packages). These policies have no affect on ZAP files.
ZAP files only execute with the privileges of the user.
Additionally, I would highly recommend that you not set any of the Always
Install Elevated policies. Those policies put your machine at a security risk.
Instead, use a deployment method to install applications. You are already using
Group Policy, so you should be able to use Group Policy to assign and publish
MSI applications. MSI supports installation of an application with elevated
privileges when "blessed" by the administrator. (This is the hand shake that
happens when you combine MSI with Group Policy software deployment).
The WinInstall LE was included on the Windows 2000 CD and can be used to
repackage legacy applications into the MSI format.
The following resources may be of use:
Software Installation and Maintenance Whitepaper
<
http://www.microsoft.com/windows2000...agement/siamwp.
asp>
Step-by-Step Guide to Creating Windows Installer Packages and Repackaging
Software for the Windows Installer using Veritas WinInstall LE
<http://www.microsoft.com/windows2000/techinfo/planning/management/veritas.asp>
Hope this helps,
- Carolyn Napier
Microsoft Windows Installer Team
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email directly to this alias. This alias is for newsgroup
purposes only.
MSI FAQ:
<http://www.microsoft.com/windows2000/community/centers/management/msi_faq.asp>
"Soucer" <(E-Mail Removed)> wrote in message
news:09b101c37c2c$3bb9e670$(E-Mail Removed)...
> Hello
>
> I have one domain on Windows 2000 Server and several
> client with normal users. I need install one program that
> NON have a .msi file. I have created .zap file and I have
> set ENABLE the GPO: Always install with elevated
> privileges in Computer Configuration and User
> Configuration.
> When user click on Add button on Add/Remove Program, the
> setup response: "program_name cannot be installed. It must
> be installed by a user with administrative privileges".
>
> What I can do?
>
> Thank you.