Silent install w/ customized settings

[Paal T. Breie]

Hi,

we would like to deploy MS AntiSpyware on our clients from a central
location, and we've been playing around with various ways of doing this. A
logonscript running MicrosoftAntiSpywareInstall.exe /S /v/qn seems to do the
job.. however, we would like our users to get as little status messages etc
as possible. To avoid this we tried switching the gcUserData.gcd file, which
obviously contains all the settings for MSAntiSpyware. This works fine,
besides the fact that AntiSpyware has to be shut down while replacing the
gcUserData.gcd file. If not the old settings are written replaced
automaticly. So..basicly, if we are to deploy it this way, with customized
settings, we need to find a way to kill all the processes running. Tried
terminating giantantispywaremain.exe, gcasdtserv.exe & gcasserv.exe with
kill.exe, but naturally this has been blocked to avoid spyware doing the
same ("Unauthorized terminiation attemp of the Microsoft AntiSpyware
Service. User used the Control Box Menu").

So.. any suggestions on how to reach our goal is very much appreciated

Regards,
Paal Breie

 

[John]

This has not been demonstrated to be possible yet because this is the HOME
version. BG anounced today that an Enterprise version is coming however.

 

[Ron Chamberlin]

Hi Paal,
Since this is Beta, I wouldn't think you would want it mass deployed on your
network
One caution is that, once it's on the desktop, users will be able to see and
kill incoming scripts.
Perhaps it would be better to wait for the Enterprise version that was
announced today.


Ron Chamberlin
MS-MVP

 

[Paal T. Breie]

Hi guys,

I totally agree, and I have already given the same advice. However, I'm a
technical guy, and the administration still wants us to deploy, despite my
advice. So my only concern at this point is how I can switch out the
gcUserData.gcd file without asking the users to manually shut down MSAS. Any
ideas people?

In advance, thank you.
Regards,
Paal B.

 

[John]

Why not just download Spysweeper Enterprise Edition Trial and run that until
the MS software is made to work correctly? I leverage demos all the time
and frequently get extensions on the demo time limit. It helps when you
have no real budget.

JohnF.

 

[Paal T. Breie]

Hi John,

due to our relationship with MS the administration wants us to deploy MSAS,
regardless. This is not my call.
If anyone have suggestions on how to replace gcUserData.gcd automaticly,
feel free to shout!

Best regards,
Paal B.

 

[John]

You must be having a terrible time with spyware. I had a couple of users
like that during the summer last year. After I gave them some difficult
options, they played nice and things are under control in my shop.

 

[mirthen]

Maybe, you could deploy a batch with Taskkill that kills
the process and copies the replaced file.

 

[Paal T. Breie]

Already tried it. Made a batch file using kill.exe from resource kit, and I
was able to kill the processes and replace the file.. however, the original
settings where copied back. I guess this is pretty understandable. If it
would have worked any spyware could have made adjustments on the settings
aswell. Anyway, got the following error after killing the services running:
---------------------------
Unauthorized Termination Attempt
---------------------------
Unauthorized terminiation attemp of the Microsoft AntiSpyware Service. User
used the Control Box Menu
---------------------------
OK
---------------------------

Maybe a logonscript would work..I guess logonscripts run before the services
start

Paal B.

 

[Roman]

hi paal!

what about repackaging the antispyware-tool?

i mean build your own msi-file, including the correct
configuration file!
that should be possible, and for a silent install of the
modified (or new) package a eval-version of installshield
or wise for windows installer should do it.

i repackaged many programs, and often that was the only
way to solve such problems.

greets,
roman

 

[Trying it out]

Try the following:
Install MS antispyware on one workstation
Make necessary settings changes.
Save the gcuserdata.gcd file
Create a folder called c:\program files\microsoft
antispyware on all the workstations that need the
software and then push the gcd file to that folder
Then run the silent install.
It seems to work fine that way.

 

[Guest]

Try the following:
Install MS antispyware on one workstation
Make necessary settings changes.
Save the gcuserdata.gcd file
Create a folder called c:\program files\microsoft
antispyware on all the workstations that need the
software and then push the gcd file to that folder
Then run the silent install.
It seems to work fine that way.

-----Original Message-----
Hi,

we would like to deploy MS AntiSpyware on our clients from a central
location, and we've been playing around with various ways of doing this. A
logonscript running

MicrosoftAntiSpywareInstall.exe /S /v/qn seems to do the

 

[Paal T. Breie]

Yeah, I recon this would work.. however, we have a large number of
computers, and a large number of skilled employees who already installed
MSAS. Was hoping for a sollution which would work for both people without
MSAS installed, and a way to replace settings on previously installed
clients.

Best regards,
Paal B.