[gptalk] Re: Software installation - assigned to user - errors

I would also try to access the file directly, i.e. after the user has logged 
on, can you run the Windows Installer package directly from Run or a Command 
Prompt? I see that have enabled installation with elevated privs so it should 
work regardless if the user is a local admin or not. The elevated installation 
is BTW not necessary to install software through GPSI and a way for users to 
make them self local admins, but I assume you have your reasons for enabling 
this setting, that is out of the scope for this specific deployment.
 
Also, are all other deployments working, or is this the only one you have?
 
What is the reason for the difference here in the log events:
* DomainTest\bwa1
* MGT\bwa1

Is it two different users, it looks strange? If you run a WhoAmI after logon, 
what is the output?
 
 
HTH,
 
Thorbjörn Sjövold
Special Operations Software
www.specopssoft.com <http://www.specopssoft.com/> 
thorbjorn.sjovold a t specopssoft.com
 
Download our free tool for remote Gpupdate with graphical reporting,
http://www.specopssoft.com/products/specopsgpupdate/

________________________________

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Darren Mar-Elia
Sent: den 28 februari 2007 03:46
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Software installation - assigned to user - errors



Seems strange-how about just granting a test user account, modify rights over 
that folder explicitly and see if it makes a difference?

 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Washington, Booker
Sent: Tuesday, February 27, 2007 3:41 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Software installation - assigned to user - errors

 

I think I am missing something basic (maybe it is the end of the day for me)

 

So I need someone to look this over....to see why I am getting these errors (I 
have been looking at this too long today)

 

I setup a network share (Software$) that has the Share permissions of Everyone 
Full Control.  On that share I have the NTFS permissions setup for 
Authenticated Users - Modify

 

Under that main shared folder, I have my Application folder (Landesk Silent 
Agent), wherein the NTFS permissions are inherited, thus Authenticated users - 
Modify

 

The software install policies are set as follows: (Screen copy of GPO settings 
below)

 

So this is an assigned application for the user, and when the user logs on, I 
check the Application log, and I get the following messages in order:

 

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1085
Date:  2/27/2007
Time:  6:25:43 PM
User:  NT AUTHORITY\SYSTEM
Computer: Computer 1

Description:
The Group Policy client-side extension Software Installation failed to execute. 
Please look for any errors reported earlier by that extension.

 

For more information, see Help and Support Center at 

 

Event Type: Error
Event Source: Application Management
Event Category: None
Event ID: 108
Date:  2/27/2007
Time:  6:25:43 PM
User:  DomainTest\bwa1
Computer: Computer 1
Description:
Failed to apply changes to software installation settings.  Software changes 
could not be applied.  A previous log entry with details should exist.  The 
error was : Access is denied. 

 

 

 

For more information, see Help and Support Center at 

Event Type: Error
Event Source: Application Management
Event Category: None
Event ID: 103
Date:  2/27/2007
Time:  6:25:43 PM
User:  Domaintest\bwa1

Computer: Computer 1
Description:
The removal of the assignment of application LanDesk Silent Install user 
assignment package from policy LanDesk Client Computer install package failed.  
The error was : The system cannot find the file specified. 

 

For more information, see Help and Support Center at 

 

Event Type: Error
Event Source: Application Management
Event Category: None
Event ID: 101
Date:  2/27/2007
Time:  6:25:43 PM
User:  MGT\bwa1

Computer: Computer 1
Description:
The assignment of application LanDesk Silent Install user assignment package 
from policy LanDesk Client Computer install package failed.  The error was : 
Access is denied. 

 

For more information, see Help and Support Center at 

 

 

 

 

***********GPO SETTINGS******************** BELOW

 

 

 

 

LanDesk Client Computer install package

Data collected on: 2/27/2007 6:29:18 PM

 

General

Details

Domain

domaintest.com

Owner

DOMAINTEST\domain admins

Created

2/27/2007 3:56:42 PM

Modified

2/27/2007 5:54:56 PM

User Revisions

6 (AD), 6 (sysvol)

Computer Revisions

11 (AD), 11 (sysvol)

Unique ID

{5B38A6CB-5770-4DCC-9F7C-392D750E8016}

GPO Status

Enabled

Links

Location

Enforced

Link Status

Path

OU1

No

Enabled

mgt.gt.buzz/Groups/IT-Group

OU2

No

Enabled

mgt.gt.buzz/People/1 - Mike's Vista Test


This list only includes links in the domain of the GPO.

Security Filteringhide <about:blank> 

The settings in this GPO can only apply to the following groups, users, and 
computers:

Name

NT AUTHORITY\Authenticated Users

WMI Filteringhide <about:blank> 

WMI Filter Name

None

Description

Not applicable

Delegation

These groups and users have the specified permission for this GPO

Name

Allowed Permissions

Inherited

DomainReal\Enterprise Admins

Edit settings, delete, modify security

No

DomainTest\domain admins

Edit settings, delete, modify security

No

NT AUTHORITY\Authenticated Users

Read (from Security Filtering)

No

NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS

Read

No

NT AUTHORITY\SYSTEM

Edit settings, delete, modify security

No

Computer Configuration (Enabled)hide <about:blank> 

Administrative Templateshide <about:blank> 

Windows Components/Windows Installerhide <about:blank> 

Policy

Setting

Always install with elevated privileges <javascript:void();> 

Enabled

        
This setting must be set for the machine and the user to be enforced.

User Configuration (Enabled)hide <about:blank> 

Software Settingshide <about:blank> 

Assigned Applicationshide <about:blank> 

LanDesk Silent Install user assignment packagehide <about:blank> 

Product Informationhide <about:blank> 

Name

LanDesk Silent Install user assignment package

Version

1.0

Language

        
Platform

Intel

Support URL

http://www.microsoft.com/management

Deployment Informationhide <about:blank> 

General

Setting

Deployment type

Assigned

Deployment source

\\servername\software$\Landesk <file:///\\servername\software$\Landesk>  Silent 
Agent\Domain-Security Scanning Agent.msi

Installation user interface options

Maximum

Uninstall this application when it falls out of the scope of management

Disabled

Do not display this package in the Add/Remove Programs control panel

Disabled

Install this application at logon

Enabled

 

Advanced Deployment Options

Setting

Ignore language when deploying this package

Disabled

Make this 32-bit X86 application available to Win64 machines

Enabled

Include OLE class and product information

Enabled

 

Diagnostic Information

Setting

Product code

{543898a6-ef9c-4ab6-83fd-5277bc248987}

Deployment Count

0

Securityhide <about:blank> 

Permissions 

Type

Name

Permission

Inherited

Allow

MGT\domain admins

Full control

No

Allow

NT AUTHORITY\Authenticated Users

Read

No

Allow

NT AUTHORITY\SYSTEM

Full control

No

Allow

Domaintest\domain admins

Read, Write

Yes

Allow

DomainReal\Enterprise Admins

Read, Write

Yes

Allow

NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS

Read

Yes

Allow

NT AUTHORITY\Authenticated Users

Read

Yes

Allow

NT AUTHORITY\SYSTEM

Read, Write

Yes

Allow

CREATOR OWNER

Read, Write

Yes

 

Allow inheritable permissions from the parent to propagate to this object and 
all child objects

Enabled

Advancedhide <about:blank> 

Upgrades

Setting

Required upgrade for existing packages

Disabled

Packages that this package will upgrade

GPO

None

Packages in the current GPO that will upgrade this package

None

 

Categories

None

 

Transforms

None

Administrative Templateshide <about:blank> 

Windows Components/Windows Installerhide <about:blank> 

Policy

Setting

Always install with elevated privileges <javascript:void();> 

Enabled

        
This setting must be set for the machine and the user to be enforced.

Other related posts: