Command line tools to temporarily allow program installation

[Guest]

Does anyone out there know of a command line tool or switch that I can use to
install a program to the PCs on a network. Currently, an asset management
tool I am using is being blocked by MS Anti-Spyware.

Any help would be appreciated.

 

[Bill Sanderson]

Can you say more about the situation?

There are ways to install software across a network, but they don't work
around Microsoft Antispyware blocking the install.

 

[Vanguard \(NPI\)]

Does anyone out there know of a command line tool or switch that I can use
to
install a program to the PCs on a network. Currently, an asset management
tool I am using is being blocked by MS Anti-Spyware.

Adding a command-line switch to the installation program for the application
that is being installed that would somehow make it impervious to
interference from MSAS would mean that the application (or its installation
program, at least) are MSAS-aware. I have not heard of any MSAS-aware
applications.

So why not just unload MSAS during the install? Many applications won't
install correctly if you have an anti-virus program running so you are told
to turn it off. Do the same for MSAS. If you have other security software,
like Spybot's TeaTimer or PrevX, that are active, you might have to disable
or unload them, too.

MSAS is *not* an enterprise-level security application - yet. Microsoft is
working in an enterprise version of their MSAS product. What you have now
is the *personal* version of MSAS (and also a *beta* version). If you are
pushing out an install to your hosts, you will need to tell your users to
disable or unload MSAS at the time you push.

 

[Bill Sanderson]

FWIW, I have a command-line uninstall for Microsoft Antispyware, which I
believe works, although I haven't needed it.

--

 

[Guest]

Where might we find that at? We need either a method to allow certain GPO
Logon Scripts or we need to un-install MS Anti-Spyware.

 

[Bill Sanderson]

The issue with logon script is the very first known issue posted at the
download site, as I recall:

http://support.microsoft.com/kb/892375 End users may be prompted to allow or
block administrative actions that originate from a central management tool
after they install Windows AntiSpyware (Beta) on a computer that is managed
by Systems Management Server 2003

Here's what I have--it is from a post in these groups--the original user
developed it and it worked in her environment--it is rather old--so testing
is definitely in order.

Unattended uninstall:

The command should be:
MsiExec.exe /X {536F7C74-844B-4683-B0C5-EA39E19A6FE3} -qn

If you want a log file ... (note: no space between the /L
and its parameters (ime))

MsiExec.exe /X {536F7C74-844B-4683-B0C5-
EA39E19A6FE3} /Lime c:\temp\msas.log -qn

(from lori)

--

 

[Guest]

The uninstall works like a champ. Of course I'd love to be able to script
that prior to Anti-Spyware loading so it wouldn't block the script...

There needs to be a way to "Sign" our scripts at the server level for MSAS
to read it. It would be a great location if it was in your GPO tool. Write
your scripts, sign your scripts, put them in a GPO and then boom approve them.

Dave

 

[Guest]

I want to thank everyone for their assistance, it has been most helpful.

Any idea on when the product may be going to production and out of beta
status?

 

[Bill Sanderson]

Microsoft has announced that there will be a corporate, managed product
incorporating Microsoft Antispyware's technology. Microsoft Client
Protection will incorporate both Microsoft Antispyware and Microsoft
Antivirus, and be managed by a centralized console, and many and versatile
group policy settings.

http://www.microsoft.com/athome/security/spyware/software/enterprise/default.mspx
http://www.microsoft.com/presspass/features/2005/oct05/10-06ClientProtection.mspx

This is what you want to be installing. Beta later this year--if you have a
dedicated Microsoft contact--salesperson or technical contact--speak to them
about getting connected with the beta. There's also a "sign up" link in the
first ref above.

--

 

[Bill Sanderson]

See my reply to Dave, nearby, for some information about a product for
managed environments. It will go into beta later this year. I'm not sure
they've given information about projected release at this point.

Microsoft Antispyware will reach beta2 stage later this year--can't predict
release for it either.

--