Re: NT Authority\System has no privileges to install msi??

From: Kenneth (Kennethyanad_at_yahoo.com)
Date: 08/31/04 

Date: Mon, 30 Aug 2004 19:51:59 -0700

Thanks very much for your reply.
Is it mean NT Authority\SYSTEM is admin account(or said
privileged account to install msi) in AD but not in NT
domain? do I need to add SYSTEM to domain admins manually
in AD? (if)
Our client is windows2000 with advanced client in NT domain

If so, will if affect Patch management feature? As it use
SYSTEM account, am I correct?

How can I check does the msi support elevation? As said in
http://msdn.microsoft.com/library/default.asp?
url=/library/en-us/msi/setup/alwaysinstallelevated.asp
- "If the AlwaysInstallElevated value is not set to "1"
under both of the preceding registry keys, the installer
uses elevated privileges to install managed applications
and uses the current user's privilege level for unmanaged
applications."

Does application advertised by SMS treat as "managed
applications"??

Thanks!!
Kenneth

>-----Original Message-----
>If you are in NT40 domain, then LocalSystem account in
NT4.0 domain is not a
>Security Principle in NT40 domain. It is not a limitation
of SMS but NT 4.0
>domain which doesn't consider NT Authority\SYSTEM as a
domain account.
>
>Having said that, does your msi support evelation? If so
you can try running
>program in user context and SMS will elevate MSI for you
(again: if MSI
>supports elevation). Also can you be specific about what
action fails with
>this error? You can turn on msi logging (/l*v switch on
command line) to get
>which action is failing.
>
>Hope this helps.
>
>--
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>
>"Kenneth" <Kennethyanad@yahoo.com> wrote in message
>news:096201c48ea7$1c8be7b0$a401280a@phx.gbl...
>> Dear All,
>>
>> When I tried to advertise a msi program to advanced
>> client with "run with administrative right" option, I
got
>> a error in msi log said "Error 1925. You do not have
>> sufficient privileges to complete this installation for
>> all user of the machine. log on as administrator and
then
>> retry this installation"
>>
>> It was run under NT Authority\System account. If i
assign
>> the system to local administrators group, it's ok. My
>> question is why system account has no privileges to
>> install per-machine? we are running in NT domain
>> environment.
>>
>> I'm sorry if the question i'm asking is too stupid but I
>> think system account is member of administrators...
>> if not how can we advertise application and let it
>> install in system account context?
>>
>> We are just one step closer to decide to implement sms
or
>> not. please give me some advice.
>>
>> Thank you very much!
>> Kenneth
>>
>> Thanks!!
>> Kenneth
>
>
>.
>

Relevant Pages

  • Re: Manage User Privileges Programmatically
    ... group which grants the necessary privileges (no, the name of the group is ... accounts that still survive group policy lockdown... ... As a dev I understand the need to make sure that an account has ... result in a non-working install as soon as group policy applied from ...
    (microsoft.public.win2000.security)
  • Re: Windows 2003 Service
    ... I install the Windows Service on a Win 2000 ... I set the same user on the Win 2003 Server and the service doesn't ... Your best bet is to create an special account for your ... - Not all problems are related to privileges, ...
    (microsoft.public.dotnet.general)
  • Re: Stuck booting into Safe Mode CLI
    ... you can change the privledges even on an Admin account, ... drive and install fresh. ... folders and altered privileges that prevents me or the antiMalWare ... always boots into the safe mode command line. ...
    (microsoft.public.windowsxp.general)
  • Re: unpermitted installation
    ... it's not an MSI file, ... > privileges (i.e. user can initiate a msi install that needs admin to ... >>> and exe install file to attempt actually answering you. ... >>> account probably would be unable to log in. ...
    (microsoft.public.security)
  • Re: NT AuthoritySystem has no privileges to install msi??
    ... make sure that your network access account is setup correctly and has access ... > command to install msi successfully on the same machine. ... >>> think system account is member of administrators... ...
    (microsoft.public.sms.swdist)
Loading