[gptalk] Re: Permissions for software installation
- From: "Greg" <gwerner@xxxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Mon, 4 Aug 2008 18:49:51 -0400
When you set up the deployment, did you point it to an IP address or a server
name? I had this issue once in the past when I used an ip address and found
out it will cause you to get access denied.
----- Original Message -----
From: Nelson, Jamie
To: gptalk@xxxxxxxxxxxxx
Sent: Monday, August 04, 2008 1:29 PM
Subject: [gptalk] Re: Permissions for software installation
Yep, I've always made it a point to grant explicit rights to Domain Computers
if it is a per-computer assigned installation.
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Monday, August 04, 2008 11:41 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Permissions for software installation
Andrew-
Was this a per-computer deployment? If so, then the installation happens in
the context of the machine's domain account. In the past I've noticed that
Authenticated Users was not sufficient to solve this problem, even though it
should have been. I'm not clear why this is, but perhaps setting up some
auditing on the server sided would have pointed the way. What I've seen, as a
solution, is to grant either Domain Computers or Everyone explicit access to
the files.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Andrew McHale
Sent: Monday, August 04, 2008 9:33 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Permissions for software installation
Hi all,
I've just created a GPO for deploying Acrobat 9 using the standard policy
software installation (not GPP) and added a transform file to get around things
like desktop shortcuts and EULA agreements.
However, when I came to deploy it I got errors about not being able to access
the files.
On Friday I also created a GPO to deploy Java. This had exactly the same
access rights as the Acrobat files but worked first time.
I managed to get the Acrobat installation to work by giving 'Everyone' read,
list and execute permissions to the folder containing the files but am confused
as to why I had to do this.
I thought the software installation used elevated privileges to install
software? Can anyone explain to me (to help my GP understanding) why this is
the case? In case you need to know, our environment is 100% Server 2003 SP2 and
I was deploying to a XP SP3 machine.
Thanks
Andrew
------------------------------------------------------------------------------
Confidentiality Warning: This message and any attachments are intended only
for the use of the intended recipient(s), are confidential, and may be
privileged. If you are not the intended recipient, you are hereby notified that
any review, retransmission, conversion to hard copy, copying, circulation or
other use of all or any portion of this message and any attachments is strictly
prohibited. If you are not the intended recipient, please notify the sender
immediately by return e-mail, and delete this message and any attachments from
your system.
Other related posts:
