[gptalk] Re: Software installation - assigned to user - errors
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Tue, 27 Feb 2007 18:45:58 -0800
Seems strange-how about just granting a test user account, modify rights
over that folder explicitly and see if it makes a difference?
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Washington, Booker
Sent: Tuesday, February 27, 2007 3:41 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Software installation - assigned to user - errors
I think I am missing something basic (maybe it is the end of the day for me)
So I need someone to look this over....to see why I am getting these errors
(I have been looking at this too long today)
I setup a network share (Software$) that has the Share permissions of
Everyone Full Control. On that share I have the NTFS permissions setup for
Authenticated Users - Modify
Under that main shared folder, I have my Application folder (Landesk Silent
Agent), wherein the NTFS permissions are inherited, thus Authenticated users
- Modify
The software install policies are set as follows: (Screen copy of GPO
settings below)
So this is an assigned application for the user, and when the user logs on,
I check the Application log, and I get the following messages in order:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1085
Date: 2/27/2007
Time: 6:25:43 PM
User: NT AUTHORITY\SYSTEM
Computer: Computer 1
Description:
The Group Policy client-side extension Software Installation failed to
execute. Please look for any errors reported earlier by that extension.
For more information, see Help and Support Center at
Event Type: Error
Event Source: Application Management
Event Category: None
Event ID: 108
Date: 2/27/2007
Time: 6:25:43 PM
User: DomainTest\bwa1
Computer: Computer 1
Description:
Failed to apply changes to software installation settings. Software changes
could not be applied. A previous log entry with details should exist. The
error was : Access is denied.
For more information, see Help and Support Center at
Event Type: Error
Event Source: Application Management
Event Category: None
Event ID: 103
Date: 2/27/2007
Time: 6:25:43 PM
User: Domaintest\bwa1
Computer: Computer 1
Description:
The removal of the assignment of application LanDesk Silent Install user
assignment package from policy LanDesk Client Computer install package
failed. The error was : The system cannot find the file specified.
For more information, see Help and Support Center at
Event Type: Error
Event Source: Application Management
Event Category: None
Event ID: 101
Date: 2/27/2007
Time: 6:25:43 PM
User: MGT\bwa1
Computer: Computer 1
Description:
The assignment of application LanDesk Silent Install user assignment package
from policy LanDesk Client Computer install package failed. The error was :
Access is denied.
For more information, see Help and Support Center at
***********GPO SETTINGS******************** BELOW
LanDesk Client Computer install package
Data collected on: 2/27/2007 6:29:18 PM
General
Details
Domain
domaintest.com
Owner
DOMAINTEST\domain admins
Created
2/27/2007 3:56:42 PM
Modified
2/27/2007 5:54:56 PM
User Revisions
6 (AD), 6 (sysvol)
Computer Revisions
11 (AD), 11 (sysvol)
Unique ID
{5B38A6CB-5770-4DCC-9F7C-392D750E8016}
GPO Status
Enabled
Links
Location
Enforced
Link Status
Path
OU1
No
Enabled
mgt.gt.buzz/Groups/IT-Group
OU2
No
Enabled
mgt.gt.buzz/People/1 - Mike's Vista Test
This list only includes links in the domain of the GPO.
Security Filtering <about:blank> hide
The settings in this GPO can only apply to the following groups, users, and
computers:
Name
NT AUTHORITY\Authenticated Users
WMI Filtering <about:blank> hide
WMI Filter Name
None
Description
Not applicable
Delegation
These groups and users have the specified permission for this GPO
Name
Allowed Permissions
Inherited
DomainReal\Enterprise Admins
Edit settings, delete, modify security
No
DomainTest\domain admins
Edit settings, delete, modify security
No
NT AUTHORITY\Authenticated Users
Read (from Security Filtering)
No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
Read
No
NT AUTHORITY\SYSTEM
Edit settings, delete, modify security
No
Computer Configuration (Enabled) <about:blank> hide
Administrative Templates <about:blank> hide
Windows Components/Windows Installer <about:blank> hide
Policy
Setting
<javascript:void();> Always install with elevated privileges
Enabled
This setting must be set for the machine and the user to be enforced.
User Configuration (Enabled) <about:blank> hide
Software Settings <about:blank> hide
Assigned Applications <about:blank> hide
LanDesk Silent Install user assignment package <about:blank> hide
Product Information <about:blank> hide
Name
LanDesk Silent Install user assignment package
Version
1.0
Language
Platform
Intel
Support URL
http://www.microsoft.com/management
Deployment Information <about:blank> hide
General
Setting
Deployment type
Assigned
Deployment source
\\servername\software$\Landesk <file:///\\servername\software$\Landesk>
Silent Agent\Domain-Security Scanning Agent.msi
Installation user interface options
Maximum
Uninstall this application when it falls out of the scope of management
Disabled
Do not display this package in the Add/Remove Programs control panel
Disabled
Install this application at logon
Enabled
Advanced Deployment Options
Setting
Ignore language when deploying this package
Disabled
Make this 32-bit X86 application available to Win64 machines
Enabled
Include OLE class and product information
Enabled
Diagnostic Information
Setting
Product code
{543898a6-ef9c-4ab6-83fd-5277bc248987}
Deployment Count
0
Security <about:blank> hide
Permissions
Type
Name
Permission
Inherited
Allow
MGT\domain admins
Full control
No
Allow
NT AUTHORITY\Authenticated Users
Read
No
Allow
NT AUTHORITY\SYSTEM
Full control
No
Allow
Domaintest\domain admins
Read, Write
Yes
Allow
DomainReal\Enterprise Admins
Read, Write
Yes
Allow
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
Read
Yes
Allow
NT AUTHORITY\Authenticated Users
Read
Yes
Allow
NT AUTHORITY\SYSTEM
Read, Write
Yes
Allow
CREATOR OWNER
Read, Write
Yes
Allow inheritable permissions from the parent to propagate to this object
and all child objects
Enabled
Advanced <about:blank> hide
Upgrades
Setting
Required upgrade for existing packages
Disabled
Packages that this package will upgrade
GPO
None
Packages in the current GPO that will upgrade this package
None
Categories
None
Transforms
None
Administrative Templates <about:blank> hide
Windows Components/Windows Installer <about:blank> hide
Policy
Setting
<javascript:void();> Always install with elevated privileges
Enabled
This setting must be set for the machine and the user to be enforced.
Other related posts:
