Assigned and Published applications

[Ihab Abedrabbo]

Hello.

I generally use GPO to publish some applications to users
in my Active Directory, but I have noticed some problems.

First of all, none of the users is an administrator of his
or her local machine. They are simply DOMAIN USERS. Some
applications just install perfectly without any problem.
Others instead do not get installed at all.

I'll give you an example.
If I have Windows 2000 SP1, and I publish McAfee VirusScan
Enterprise 7.1 to users, the application won't get
installed when users try to install it from the Control
Panel saying that the WINDOWS INSTALLER version is older
than expected, thus no installation occures. I noticed
that when I apply SP4, this problem disappears, but users
get another problem saying YOU NEED ADMINISTRATIVE
PRIVILAGES TO INSTALL THIS SOFTWARE! I need to logon
myself using an administrative account to perform the
operation, and thus my application publication is not
working!

My question to Microsoft is:
Publishing an application to a user should mean that the
application is approved and can be installed (generally by
authenticated users), so why can't users install some
applications even though they are published (i.e.
allowed)? How can I accomplish this without having to add
my users to other groups giving them more privilages ?

Thanks

 

[Chriss3]

Hello, Have you seen the follow articles below it may helps for Windows
Installer Package. Other wise you can use the File System feature with in a
Group Policy to modify the ACL for the %ProgramFiles% as well the Registry
feature to modify the ACL within the Registry that's what its all about.

Always install with elevated privileges (User) (Windows 2000 Group Policy
Reference)
User ConfigurationAdministrative TemplatesWindows ComponentsWindows
Installer
http://msdn.microsoft.com/library/en-us/gp/324.asp

Always install with elevated privileges (Computer) (Windows 2000 Group
Policy Reference)
Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows
Installer
http://msdn.microsoft.com/library/en-us/gp/90.asp

Always install with elevated privileges (User)Configuration\Administrative Templates\Windows Components\Windows Installer
Description Directs Windows Installer to use system permissions when it
installs any program on the system. This policy extends elevated privileges
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/gp/324.asp