[gptalk] Re: Software installation - assigned to user - errors

Seems strange-how about just granting a test user account, modify rights
over that folder explicitly and see if it makes a difference?

 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Washington, Booker
Sent: Tuesday, February 27, 2007 3:41 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Software installation - assigned to user - errors

 

I think I am missing something basic (maybe it is the end of the day for me)

 

So I need someone to look this over....to see why I am getting these errors
(I have been looking at this too long today)

 

I setup a network share (Software$) that has the Share permissions of
Everyone Full Control.  On that share I have the NTFS permissions setup for
Authenticated Users - Modify

 

Under that main shared folder, I have my Application folder (Landesk Silent
Agent), wherein the NTFS permissions are inherited, thus Authenticated users
- Modify

 

The software install policies are set as follows: (Screen copy of GPO
settings below)

 

So this is an assigned application for the user, and when the user logs on,
I check the Application log, and I get the following messages in order:

 

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1085
Date:  2/27/2007
Time:  6:25:43 PM
User:  NT AUTHORITY\SYSTEM
Computer: Computer 1

Description:
The Group Policy client-side extension Software Installation failed to
execute. Please look for any errors reported earlier by that extension.

 

For more information, see Help and Support Center at 

 

Event Type: Error
Event Source: Application Management
Event Category: None
Event ID: 108
Date:  2/27/2007
Time:  6:25:43 PM
User:  DomainTest\bwa1
Computer: Computer 1
Description:
Failed to apply changes to software installation settings.  Software changes
could not be applied.  A previous log entry with details should exist.  The
error was : Access is denied. 

 

 

 

For more information, see Help and Support Center at 

Event Type: Error
Event Source: Application Management
Event Category: None
Event ID: 103
Date:  2/27/2007
Time:  6:25:43 PM
User:  Domaintest\bwa1

Computer: Computer 1
Description:
The removal of the assignment of application LanDesk Silent Install user
assignment package from policy LanDesk Client Computer install package
failed.  The error was : The system cannot find the file specified. 

 

For more information, see Help and Support Center at 

 

Event Type: Error
Event Source: Application Management
Event Category: None
Event ID: 101
Date:  2/27/2007
Time:  6:25:43 PM
User:  MGT\bwa1

Computer: Computer 1
Description:
The assignment of application LanDesk Silent Install user assignment package
from policy LanDesk Client Computer install package failed.  The error was :
Access is denied. 

 

For more information, see Help and Support Center at 

 

 

 

 

***********GPO SETTINGS******************** BELOW

 

 

 

 


LanDesk Client Computer install package


Data collected on: 2/27/2007 6:29:18 PM

 

General

Details


Domain

domaintest.com


Owner

DOMAINTEST\domain admins


Created

2/27/2007 3:56:42 PM


Modified

2/27/2007 5:54:56 PM


User Revisions

6 (AD), 6 (sysvol)


Computer Revisions

11 (AD), 11 (sysvol)


Unique ID

{5B38A6CB-5770-4DCC-9F7C-392D750E8016}


GPO Status

Enabled

Links


Location

Enforced

Link Status

Path


OU1

No

Enabled

mgt.gt.buzz/Groups/IT-Group


OU2

No

Enabled

mgt.gt.buzz/People/1 - Mike's Vista Test


This list only includes links in the domain of the GPO.

Security Filtering <about:blank> hide

The settings in this GPO can only apply to the following groups, users, and
computers:


Name


NT AUTHORITY\Authenticated Users

WMI Filtering <about:blank> hide


WMI Filter Name

None


Description

Not applicable

Delegation

These groups and users have the specified permission for this GPO


Name

Allowed Permissions

Inherited


DomainReal\Enterprise Admins

Edit settings, delete, modify security

No


DomainTest\domain admins

Edit settings, delete, modify security

No


NT AUTHORITY\Authenticated Users

Read (from Security Filtering)

No


NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS

Read

No


NT AUTHORITY\SYSTEM

Edit settings, delete, modify security

No

Computer Configuration (Enabled) <about:blank> hide

Administrative Templates <about:blank> hide

Windows Components/Windows Installer <about:blank> hide


Policy

Setting


 <javascript:void();> Always install with elevated privileges

Enabled


        

This setting must be set for the machine and the user to be enforced.

User Configuration (Enabled) <about:blank> hide

Software Settings <about:blank> hide

Assigned Applications <about:blank> hide

LanDesk Silent Install user assignment package <about:blank> hide

Product Information <about:blank> hide


Name

LanDesk Silent Install user assignment package


Version

1.0


Language

        

Platform

Intel


Support URL

http://www.microsoft.com/management

Deployment Information <about:blank> hide


General

Setting


Deployment type

Assigned


Deployment source

\\servername\software$\Landesk <file:///\\servername\software$\Landesk>
Silent Agent\Domain-Security Scanning Agent.msi


Installation user interface options

Maximum


Uninstall this application when it falls out of the scope of management

Disabled


Do not display this package in the Add/Remove Programs control panel

Disabled


Install this application at logon

Enabled

 


Advanced Deployment Options

Setting


Ignore language when deploying this package

Disabled


Make this 32-bit X86 application available to Win64 machines

Enabled


Include OLE class and product information

Enabled

 


Diagnostic Information

Setting


Product code

{543898a6-ef9c-4ab6-83fd-5277bc248987}


Deployment Count

0

Security <about:blank> hide

Permissions 


Type

Name

Permission

Inherited


Allow

MGT\domain admins

Full control

No


Allow

NT AUTHORITY\Authenticated Users

Read

No


Allow

NT AUTHORITY\SYSTEM

Full control

No


Allow

Domaintest\domain admins

Read, Write

Yes


Allow

DomainReal\Enterprise Admins

Read, Write

Yes


Allow

NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS

Read

Yes


Allow

NT AUTHORITY\Authenticated Users

Read

Yes


Allow

NT AUTHORITY\SYSTEM

Read, Write

Yes


Allow

CREATOR OWNER

Read, Write

Yes

 


Allow inheritable permissions from the parent to propagate to this object
and all child objects

Enabled

Advanced <about:blank> hide


Upgrades

Setting


Required upgrade for existing packages

Disabled



Packages that this package will upgrade

GPO


None


Packages in the current GPO that will upgrade this package

None

 


Categories


None

 


Transforms


None

Administrative Templates <about:blank> hide

Windows Components/Windows Installer <about:blank> hide


Policy

Setting


 <javascript:void();> Always install with elevated privileges

Enabled


        

This setting must be set for the machine and the user to be enforced.

Other related posts: