Software Install

[Admir]

Hi All,

I have created group policy for a group of users. Evrything was fine antill
today. When I login with the user from the group where I aplayed th GP and I
want to start some program I get Installation window. Evrytime I login!!!.

I don't remember specifing anything like this in group policy or defaoult
domain policy. Not that I am awear off.

I am running win2000 server and users have a mandatory profile.

Please help me!!! I don't want users to install applications, cos I already
installed and configured it.

Help!!!

Regards,

Admir

 

[stevta [MSFT]]

Enable logging for MSI and see what installation package
is trying to install.


KEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Insta
ller

Reg_SZ: Logging

Value: voicewarmup

 

[stevta [MSFT]]

Enable logging for MSI and see what installation package
is trying to install.


KEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Insta
ller

Reg_SZ: Logging

Value: voicewarmup

 

[Dmitry Korolyov]

Hmm, afair software installation settings (ie which software was installed
already and which not, something like this) for software assigned/published
to users are saved in users profile, and since we have mandatory profiles
here, they are not saved. That's why continuous installs on logon.

--
Dmitry Korolyov
(e-mail address removed)
To e-mail me, remove "nospamformorons"
from the address.

 

[Admir]

Hi,

I have not published any appliucations true the group policy.

Applications that are prompting for install are:

WinZip
Windows Media Player
Office 2000

I have used this mandatory profile for 2 months now and I didn't have any
trouble.


Regards,

Admir

 

[Admir]

Hi All,

Dimitry you was right about mandatory profile.

I created another mandatory profile, just before I did that I started all
programs once, the I aplayed profile to all users and it works now fine.

There is one other thing. I installed "Qwark expres" as administrator. Now,
only administrator or power users can use program. What should I do about
this problem? Should I configure "Always Install with elevated privilages" ?

Regards,

Admir

 

[admir]

Hi Dimitry,

I tryed to run theese programs under ordinary user but they only run when
administrator is loged in.
Also what do you mean when you say to set them to catch only "access denied"
? Do you mean that I should set filter to include "access denied" ?

Regards,

Admir

 

[Dmitry Korolyov]

Yes, and to include only access denied. Finding exact access pattern for
some application may be tidious, but it's worth it.

 

[Admir]

Yes, you are right.

I did what you said and I saw that files that wher denied access are files
from the program directory. There was all bunch files so what I did, is I
gave evryone R+RW+X+C rights to the program directory en subfolders en
files. I didn't have time to search all files. My C: drive is bloched en
hiden by group policy so I don't think that this would couse a security
issue.

Anyway, thank you verry much.

Regards,

Admir