[gptalk] Re: Allowing FlashPlayer

  • From: Shane Williford <shane.williford@xxxxxxxxxx>
  • To: "gptalk@xxxxxxxxxxxxx" <gptalk@xxxxxxxxxxxxx>
  • Date: Wed, 30 Jul 2008 10:59:19 -0500

I agree...very strange! Darren...any ideas as to why this is? BTW, great 
article on software installation from your email reply yesterday 
(http://www.sdmsoftware.com/dl/Deploying_Software_With_Group_Policy.pdf). :)

Shane M. Williford
Systems Administrator
MCSE, MCSA Sec, Sec+, Net+, A+
Mazuma Credit Union
9300 Troost
Kansas City, MO 64131
shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx>
816-361-4194 x6012

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Nelson, Jamie
Sent: Wednesday, July 30, 2008 10:33 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

Wow so that's twice where we've seen that putting it in SYSVOL worked. Very 
weird. The only true difference would be the permissions, so I'm not sure how 
it makes a difference.

Anyways, thanks for sharing.

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Shane Williford
Sent: Wednesday, July 30, 2008 10:13 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

Thanks Jamie...I did have "Read & Execute" rights on my folder, but still 
didn't work. :(

Now, as you posted earlier, I placed my folder in the sysvol share and it 
worked! I uninstalled it, rebooted (to test), and it worked! So, I'm thinking 
that resolved it, but for the life of me can't figure out why. Running GP 
Modeling/Results shows GP application as designed (when having the pkg in my 
orig. folder). Hmmm....well, not gonna worry too much more about it. It works. 
Now off for beta testing. :)  Thanks for all the info!

Shane M. Williford
Systems Administrator
MCSE, MCSA Sec, Sec+, Net+, A+
Mazuma Credit Union
9300 Troost
Kansas City, MO 64131
shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx>
816-361-4194 x6012

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Nelson, Jamie
Sent: Tuesday, July 29, 2008 1:38 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

For clarification Domain Computers needs "Read and Execute" rights. Putting the 
package in SYSVOL shouldn't really make a difference except for the permissions 
are different by default.

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Shane Williford
Sent: Tuesday, July 29, 2008 1:29 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

Yeah..but I'm not thinking that necessariy did it. I've not done software 
deployment through GP before, so not sure of the difference there. It actually 
seemed to be the same as placing the msi file in a regular share folder with 
Dom Comp READ permissions; but, it's a great doc anyway. I uninstalled Flash 
and rebooted to reverify if it indeed works, but now I'm back to it not 
working, so I'm not sure what's going on. I still may need to test your 
original sysvol resolution.... :)

Shane M. Williford
Systems Administrator
MCSE, MCSA Sec, Sec+, Net+, A+
Mazuma Credit Union
9300 Troost
Kansas City, MO 64131
shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx>
816-361-4194 x6012

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Nelson, Jamie
Sent: Tuesday, July 29, 2008 1:25 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

Thanks Shane. So you had to do an administrative install to get it to work? 
That shouldn't have been necessary but if it took care of your issue then at 
least you're done with it. :)

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Shane Williford
Sent: Tuesday, July 29, 2008 12:41 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

Hey Jamie (and all)...I got it to work. With your 2 suggestions below...I did 
some further digging and found this AMAZING step-by-step software deployment 
PDF from Adobe, believe it or not. It goes through detailed steps to 
succesfully deploy any Adobe software via GP...and probably any software in 
general for that matter. I was still able to use the original share I created 
instead of the sysvol. I went ahead and attached the PDF in case anyone would 
like a gander (forgive me if this wasn't appropriate).

Thanks for all the assistance! :)

Shane M. Williford
Systems Administrator
MCSE, MCSA Sec, Sec+, Net+, A+
Mazuma Credit Union
9300 Troost
Kansas City, MO 64131
shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx>
816-361-4194 x6012

From: Shane Williford
Sent: Monday, July 28, 2008 4:54 PM
To: gptalk@xxxxxxxxxxxxx
Subject: RE: [gptalk] Re: Allowing FlashPlayer

Thanks Jamie...I added Dom Comp's to the share I wanted the install to pull 
from, but that didn't work (and I enabled the other setting within the same 
GPO...both without success). I'll try the sysvol solution and let you know.

Thanks!
________________________________
From: gptalk-bounce@xxxxxxxxxxxxx [gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of 
Nelson, Jamie [Jamie.Nelson@xxxxxxx]
Sent: Monday, July 28, 2008 3:09 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer
We just had a weird question like this on the board a few weeks ago and the 
person fixed it by putting the MSI (in this case for the Office Compatibility 
Pack) in the sysvol share. Before you do that, try the following:


1.       Make sure the "Domain Computers" group has explicit "Read" permissions 
to the share where you placed the MSI

2.       Enable "always wait for the network at computer startup and logon"

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Shane Williford
Sent: Monday, July 28, 2008 2:48 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

I am assigning it via Comp Config.

Shane M. Williford
Systems Administrator
MCSE, MCSA Sec, Sec+, Net+, A+
Mazuma Credit Union
9300 Troost
Kansas City, MO 64131
shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx>
816-361-4194 x6012

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Nelson, Jamie
Sent: Monday, July 28, 2008 2:32 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

That is only when you "advertise" software to users. Are you doing it that way 
or "assigning" it on the computer side (Computer Configuration) of the GPO?

Regards,

Jamie Nelson | Operations Consultant | BI&T Infrastructure-Intel | Devon Energy 
Corporation | Work: 405.552.8054 | http://www.dvn.com<http://www.dvn.com/>



From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Shane Williford
Sent: Monday, July 28, 2008 1:29 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

OK...well, after testing this solution...it seems the application does indeed 
install, but is not fully "activated" for use. A local (or domain) admin needs 
to log onto the PC and still install the ActiveX component from a site using 
Flash Player. Once that's done, all other users are able to view flash-enabled 
programs or websites. Am I just missing something? When looking at software 
assigning at MS, this is what they said: The core application is not installed 
until the user activates the application on the computer by one of three ways: 
selecting the application from the Start menu, clicking s shortcut on the 
Desktop, or by activating a document of a file type that is associated with the 
application
(article: 
http://technet2.microsoft.com/windowsserver/en/library/d3d52f5d-45ab-4be9-a040-28ffe09bc8f81033.mspx?mfr=true)


Shane M. Williford
Systems Administrator
MCSE, MCSA Sec, Sec+, Net+, A+
Mazuma Credit Union
9300 Troost
Kansas City, MO 64131
shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx>
816-361-4194 x6012

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Nelson, Jamie
Sent: Wednesday, July 23, 2008 10:40 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

Yeah, that's why you would do it as a machine-assigned software install...It 
will have admin rights because it is running at NT AUTHORITY\SYSTEM.

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Shane Williford
Sent: Wednesday, July 23, 2008 10:37 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

Thank you Jamie...I got the msi download and will try it out. I'm not sure 
it'll work as I'm reading on the site that local admin rights are still needed, 
but we'll see...

Shane M. Williford
Systems Administrator
MCSE, MCSA Sec, Sec+, Net+, A+
Mazuma Credit Union
9300 Troost
Kansas City, MO 64131
shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx>
816-361-4194 x6012

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Nelson, Jamie
Sent: Wednesday, July 23, 2008 8:57 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Allowing FlashPlayer

There is a Flash Player ActiveX MSI package available through the Adobe 
Distribution program. It's free but you have to signup. Push that out through 
machine assigned software and you should be good to go.

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Shane Williford
Sent: Wednesday, July 23, 2008 8:53 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Allowing FlashPlayer

Hi All...
I'm not sure if any of you experienced this in the past, but there was an Excel 
spreadsheet that was being passed around via email that had games inbedded into 
it using Flash (Ms. Pac Man, Galaga, and a couple others). As such, we used GP 
to not allow users to be able to use Flash. Since there hasn't been a problem 
with that lately, and the fact that more and more websites are using Flash we 
have come to the point to allow Flash again. We disallowed it by setting 
permissions on the Flash folder using GP. I have since changed the permissions 
accordingly, but am still having a 2nd 'ary problem. When going to a site with 
Flash, users are prompted to download Flash, by getting the ActiveX bar at the 
top of their IE window. They click on it and prompted to download/install Flash 
but since they're not local admins (only power users) they still can't see the 
web page correctly. Is there way using GP to allow ActiveX to automatically 
install (which may be a risk) or any way around this that you guys are aware of?

Thanks in advance!

Shane M. Williford
Systems Administrator
MCSE, MCSA Sec, Sec+, Net+, A+
Mazuma Credit Union
9300 Troost
Kansas City, MO 64131
shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx>
816-361-4194 x6012


________________________________
Notice: The information transmitted in this e-mail may contain confidential 
and/ or legally privileged information intended only for the use of the 
individual(s) named above. Review, use, disclosure, distribution, or forwarding 
of this information by persons or entities other than the intended recipient(s) 
is prohibited by law and may subject them to criminal or civil liabilities. 
Statements and opinion expressed in this e-mail may not represent those of 
Mazuma Credit Union. All e-mail communications through Mazuma's corporate email 
system are subject to archiving and review by someone other than the recipient. 
If you have received this communication in error, please notify the sender 
immediately and delete/destroy any and all copies of the original message from 
any computer or network system.
________________________________

Confidentiality Warning: This message and any attachments are intended only for 
the use of the intended recipient(s), are confidential, and may be privileged. 
If you are not the intended recipient, you are hereby notified that any review, 
retransmission, conversion to hard copy, copying, circulation or other use of 
all or any portion of this message and any attachments is strictly prohibited. 
If you are not the intended recipient, please notify the sender immediately by 
return e-mail, and delete this message and any attachments from your system.

________________________________
Notice: The information transmitted in this e-mail may contain confidential 
and/ or legally privileged information intended only for the use of the 
individual(s) named above. Review, use, disclosure, distribution, or forwarding 
of this information by persons or entities other than the intended recipient(s) 
is prohibited by law and may subject them to criminal or civil liabilities. 
Statements and opinion expressed in this e-mail may not represent those of 
Mazuma Credit Union. All e-mail communications through Mazuma's corporate email 
system are subject to archiving and review by someone other than the recipient. 
If you have received this communication in error, please notify the sender 
immediately and delete/destroy any and all copies of the original message from 
any computer or network system.

________________________________
Notice: The information transmitted in this e-mail may contain confidential 
and/ or legally privileged information intended only for the use of the 
individual(s) named above. Review, use, disclosure, distribution, or forwarding 
of this information by persons or entities other than the intended recipient(s) 
is prohibited by law and may subject them to criminal or civil liabilities. 
Statements and opinion expressed in this e-mail may not represent those of 
Mazuma Credit Union. All e-mail communications through Mazuma's corporate email 
system are subject to archiving and review by someone other than the recipient. 
If you have received this communication in error, please notify the sender 
immediately and delete/destroy any and all copies of the original message from 
any computer or network system.

________________________________
Notice: The information transmitted in this e-mail may contain confidential 
and/ or legally privileged information intended only for the use of the 
individual(s) named above. Review, use, disclosure, distribution, or forwarding 
of this information by persons or entities other than the intended recipient(s) 
is prohibited by law and may subject them to criminal or civil liabilities. 
Statements and opinion expressed in this e-mail may not represent those of 
Mazuma Credit Union. All e-mail communications through Mazuma's corporate email 
system are subject to archiving and review by someone other than the recipient. 
If you have received this communication in error, please notify the sender 
immediately and delete/destroy any and all copies of the original message from 
any computer or network system.

________________________________
Notice: The information transmitted in this e-mail may contain confidential 
and/ or legally privileged information intended only for the use of the 
individual(s) named above. Review, use, disclosure, distribution, or forwarding 
of this information by persons or entities other than the intended recipient(s) 
is prohibited by law and may subject them to criminal or civil liabilities. 
Statements and opinion expressed in this e-mail may not represent those of 
Mazuma Credit Union. All e-mail communications through Mazuma's corporate email 
system are subject to archiving and review by someone other than the recipient. 
If you have received this communication in error, please notify the sender 
immediately and delete/destroy any and all copies of the original message from 
any computer or network system.

________________________________
Notice: The information transmitted in this e-mail may contain confidential 
and/ or legally privileged information intended only for the use of the 
individual(s) named above. Review, use, disclosure, distribution, or forwarding 
of this information by persons or entities other than the intended recipient(s) 
is prohibited by law and may subject them to criminal or civil liabilities. 
Statements and opinion expressed in this e-mail may not represent those of 
Mazuma Credit Union. All e-mail communications through Mazuma's corporate email 
system are subject to archiving and review by someone other than the recipient. 
If you have received this communication in error, please notify the sender 
immediately and delete/destroy any and all copies of the original message from 
any computer or network system.

________________________________
Notice: The information transmitted in this e-mail may contain confidential 
and/ or legally privileged information intended only for the use of the 
individual(s) named above. Review, use, disclosure, distribution, or forwarding 
of this information by persons or entities other than the intended recipient(s) 
is prohibited by law and may subject them to criminal or civil liabilities. 
Statements and opinion expressed in this e-mail may not represent those of 
Mazuma Credit Union. All e-mail communications through Mazuma's corporate email 
system are subject to archiving and review by someone other than the recipient. 
If you have received this communication in error, please notify the sender 
immediately and delete/destroy any and all copies of the original message from 
any computer or network system.

________________________________
Notice: The information transmitted in this e-mail may contain confidential 
and/ or legally privileged information intended only for the use of the 
individual(s) named above. Review, use, disclosure, distribution, or forwarding 
of this information by persons or entities other than the intended recipient(s) 
is prohibited by law and may subject them to criminal or civil liabilities. 
Statements and opinion expressed in this e-mail may not represent those of 
Mazuma Credit Union. All e-mail communications through Mazuma's corporate email 
system are subject to archiving and review by someone other than the recipient. 
If you have received this communication in error, please notify the sender 
immediately and delete/destroy any and all copies of the original message from 
any computer or network system.

Other related posts: