Re: unable to installed software. No rights

From: Shehzad Khoja [MSFT] (srkhoja_at_online.microsoft.com)
Date: 12/22/04 

Date: Wed, 22 Dec 2004 09:00:49 -0800

Again, I am repeating what I said: Selecting that switch box doesn't change
anything apart from the fact that now you can see the program. Program is
not completed in 2 hours, because it is displaying you a dialog box to
continue and you havent clicked "Next" button and since you haven't selected
"allow user to interact ..." you cannot see that dialog box.

Now, you have two choices, either click next button and continue with the
installation or find a way in which program can be installed without user
interaction. Some program support a script file and some support a switch
like /q. It is upto you to find out what the switch is and pass that as
command line.

In ExecMgr.log, from the bottom, search for phrase 'ProgramStarted' and this
will indicate to you which program SMS started and when and in next few
lines (5-6) it will tell you if program is finished. If it doesn't say that
program is finished, that means that SMS is waiting for that progrm to
finish. 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
"Owen Heart" <owen_heart73@yahoo.com> wrote in message 
news:cqc0aa$cqd$1@reader01.singnet.com.sg...
> Hi,
>
> If that the case, how come in 2 hrs the program is not completed. if i 
> were
> to manually installed the acrobat reader, it takes me less than 5 minues.
> SMS should do better than that.
>
> Pls advise on how do i know which program is busy by reading the log file.
>
> Tls.
>
>
> "Shehzad Khoja [MSFT]" <srkhoja@online.microsoft.com> wrote in message
> news:%23OklFA55EHA.2316@TK2MSFTNGP15.phx.gbl...
>> When you select "Allow users to interact..." all it changes is the fact
> that
>> now you can see the program running on your desktop. When you don't 
>> select
>> this option, client stil runs the program and your program still shows 
>> you
>> the dialog box to click next, but it is not visible to you. And since you
>> don't see it on the screen, you can't press the next command button to
>> continue it. And also because you don't see it, you assume that it has 
>> not
>> been executed, although SMS has run the program and program is waiting 
>> for
>> you to press next (invisible though). If you want to verify this, then 
>> try
>> running another program after running your acrobat program and SMS will
>> notify you that it is busy running another program. Also you can check 
>> SMS
>> client logs (ExecMgr.log to be precise) which will indicate that SMS has
>> started the program and is waiting for program to finish.
>>
>> As for your other question, it is up to the application (acrobat reader 
>> in
>> your case) to support a silent install. And it is up to you to provide a
>> command line which will do a silent install. SMS doesn't know what a
> program
>> is suppose to, it just runs the program with the command line you have
>> specified.
>>
>> -- 
>> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>>
>>
>> "Owen Heart" <owen_heart73@yahoo.com> wrote in message
>> news:cq995t$3m9$1@mawar.singnet.com.sg...
>> > Thanks Shezad.
>> >
>> > You have answer my questions. However when i select administrative runs
>> > ONLY and checked Software Installation, the advertisment program show 
>> > on
>> > the
>> > system tray but after countdown from 5 minutes, the software did not 
>> > run
>> > at
>> > all for Advance client.
>> >
>> > On the other hand, the program GUI interface Pop up and require user to
>> > click NEXT. Why is this so as I have not select allow user to interact.
>> > Can't the software(acrobat reader) installed the software itseld 
>> > without
>> > the
>> > user intervension.
>> >
>> > Pls advise.
>> > "Shehzad Khoja [MSFT]" <srkhoja@online.microsoft.com> wrote in message
>> > news:uMdSTSr5EHA.1404@TK2MSFTNGP11.phx.gbl...
>> >> That means that client will get this nw policy around 2:30 and it will
>> >> run
>> >> that program immidiately (because its start time has already passed).
>> >>
>> >> Purpose of having a start time is to pre-stage a package and let me
>> > explain
>> >> what that means:
>> >>
>> >> 1 - You want to run a program only over the weekend when no one is
> around
>> >> because it uses high CPU or takes a lot of bandwidth. What you should
> do
>> > is
>> >> create a program on say Monday, but specify a start time of say
> Saturday.
>> >>
>> >> 2 - You have a huge hirerchey and alot of your sites are over alow
> links
>> >> where you add those DPs individually or user preload package tool to
> copy
>> >> package files. Now if you know that package will be available only
> after
>> > two
>> >> days then you can create an advertisement today but specify start time
> to
>> > be
>> >> after two days.
>> >>
>> >> 3 - You can use this feature to have Advanced download. This means 
>> >> that
>> >> if
>> > a
>> >> client gets a policy now to run a program after 3 days and
> advertisement
>> > is
>> >> specified to download and run then client will start downloading the
>> > package
>> >> right now so that it could run the program right away at time it was
>> >> specified after 3 days.
>> >>
>> >> Does this answer your question?
>> >>
>> >> -- 
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> > rights.
>> >>
>> >>
>> >> "Owen Heart" <owen_heart73@yahoo.com> wrote in message
>> >> news:cq5mo8$2s3$1@reader01.singnet.com.sg...
>> >> > Hi Shedzad,
>> >> >
>> >> > Well, quite a clear explanation that you have given. One thing to 
>> >> > ask
> u
>> > is
>> >> > that  i created an advertisement let say, the current time is 1.30
> p.m
>> > and
>> >> > I
>> >> > set the advertisement start time to 1.40 p.m.
>> >> >
>> >> > The default policy is 60 minutes which is 2.30p.m (since the current
>> > time
>> >> > is
>> >> > 1.30p.m). How does the advertisement start time come into effect at
>> >> > 1.40
>> >> > p.m
>> >> > since i guess the client won't request any policy until 2.30p.m?
>> >> >
>> >> > Does it mean that the client will poll for update at 2.40p.m?
>> >> >
>> >> > Thanks.
>> >> >
>> >> >
>> >> >
>> >> >
>> >> >
>> >> >
>> >> >
>> >> > "Shehzad Khoja [MSFT]" <srkhoja@online.microsoft.com> wrote in
> message
>> >> > news:%23$PquOU5EHA.2664@TK2MSFTNGP10.phx.gbl...
>> >> >> If the default is 60 minutes then this means that machine policy
> will
>> > be
>> >> >> polled every 60 minutes regardless if a user is logged on or not.
>> >> >> However,
>> >> >> if someone is not logged in then user policies will not be
> requested.
>> >> >> User
>> >> >> policies are policies when you create an advertisement and target 
>> >> >> it
>> >> >> to
>> > a
>> >> >> collection whose members are users or user groups and not machines.
>> >> >>
>> >> >> For your second question I am not sure when you want to distribute
>> >> >> your
>> >> >> application.
>> >> >>
>> >> >> If you want to distribute your application only when a user is
> logged
>> > on
>> >> >> then you have an option to specify to run the program in logged on
>> > user's
>> >> >> context or in system context. If users in your environment don't
> have
>> >> > rights
>> >> >> to install your application then you probably should go with
> selecting
>> >> >> run
>> >> >> in admin context. User interaction check-box only comes into 
>> >> >> picture
>> >> >> if
>> >> > you
>> >> >> are running program in admin context and you want user to see
>> >> >> installation
>> >> >> progress or give input to any dialog box messages. Remember that
> this
>> > is
>> >> >> a
>> >> >> security risk that is why by default SMS doesn't allow this. If you
>> > want
>> >> > to
>> >> >> get more information about security implication then it is commonly
>> > known
>> >> > as
>> >> >> 'Shatter Attack'.
>> >> >>
>> >> >> On other hand, if you want your application to be installed
> regardless
>> > if
>> >> >> someone is logged in or not, then you should select to run weather
> or
>> > not
>> >> > a
>> >> >> user is logged on and run with Admin rights.
>> >> >>
>> >> >> Use software installation account setting is only for SMS Legacy
>> > clients
>> >> > and
>> >> >> this checkbox doesn't make any difference on SMS Advanced client.
>> >> >>
>> >> >> Does this answer your question?
>> >> >>
>> >> >> -- 
>> >> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> > rights.
>> >> >>
>> >> >>
>> >> >> "Owen Heart" <owen_heart73@yahoo.com> wrote in message
>> >> >> news:cq1fra$r6h$1@reader01.singnet.com.sg...
>> >> >> > Hi Shehzad,
>> >> >> >
>> >> >> > May I ask you if the default is 60 minutes, then does it means
> that
>> >> > client
>> >> >> > will poll for policy 60 minutes later? Then what does it mean
>> >> >> > whether
>> >> >> > or
>> >> >> > not
>> >> >> > user is logged on? Can I say that even if the user is logged on
> the
>> >> > policy
>> >> >> > will only poll 60 minutes later?
>> >> >> >
>> >> >> > In addition,  Let say u want to distribute a acrobat reader
>> >> > (acrobat.exe)
>> >> >> > and when Domain user login in(no administrative rights),  what
> opion
>> >> > will
>> >> >> > you select under the run mode
>> >> >> >
>> >> >> > a) Run administrative rights
>> >> >> > b) Use software Installation Account
>> >> >> > c) Allow users to interface with this program.  - Since user have
> no
>> >> > local
>> >> >> > rights- this is not possible.
>> >> >> >
>> >> >> > Thanks.
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >> > "Shehzad Khoja [MSFT]" <srkhoja@online.microsoft.com> wrote in
>> > message
>> >> >> > news:OrFSUB94EHA.3648@TK2MSFTNGP11.phx.gbl...
>> >> >> >> Hi Susan
>> >> >> >>
>> >> >> >> In Advertised Program Client Agent settings there is a settings
>> > which
>> >> >> >> indicates how often clients should poll MP for new\updated
>> >> >> >> policies.
>> >> > This
>> >> >> > is
>> >> >> >> set to 60 minutes by default. If you don't want to wait for 60
>> > minutes
>> >> >> > then
>> >> >> >> you might want to reduce this down to something more frequent.
> But
>> > you
>> >> >> >> should understand that this will generate more nextwork traffic
> and
>> > if
>> >> >> >> you
>> >> >> >> are over slow links then how does this affect your organization.
>> >> >> >>
>> >> >> >> As for you other question, you should look at what time client
> got
>> > the
>> >> >> >> advertisement? Again, ExecMgr.log will give you this 
>> >> >> >> information.
>> > Also
>> >> >> > same
>> >> >> >> log will give you information as why program didn't run for 2
>> >> >> >> hours.
>> >> >> >> There
>> >> >> >> can be several things why this could happen:
>> >> >> >> 1 - Package contents are not on DP.
>> >> >> >> 2 - Client didn't get policy until 16:00
>> >> >> >> 3 - User environment condition was not met...
>> >> >> >> 4 - Client was considered roaming until 16:00...
>> >> >> >>
>> >> >> >> List goes on ... however, ExecMgr.log is the best place to look
> as
>> > why
>> >> >> >> was
>> >> >> >> this delay. You can simply look at the reports as see when did
>> > client
>> >> > get
>> >> >> >> the policy and after how long it ran the program and why it did
>> >> >> >> take
>> >> > that
>> >> >> >> long. If you find out that there are issues with client finding
> the
>> >> >> > content
>> >> >> >> then CAS.log, LocationServices.log and DataTransferService.log
> will
>> > be
>> >> >> >> intresting to look at as well.
>> >> >> >>
>> >> >> >> If you are not familiar with client logs then please zip these
> logs
>> >> >> >> and
>> >> >> > post
>> >> >> >> them to the group.
>> >> >> >>
>> >> >> >> -- 
>> >> >> >> This posting is provided "AS IS" with no warranties, and confers
> no
>> >> >> > rights.
>> >> >> >>
>> >> >> >>
>> >> >> >> "Susan" <Susan@hotmail.com> wrote in message
>> >> >> >> news:cprcrt$jct$1@reader01.singnet.com.sg...
>> >> >> >> >
>> >> >> >> > Hi,
>> >> >> >> >
>> >> >> >> > I encounterd the following on all machine. I'm running sms 
>> >> >> >> > 2003
>> > with
>> >> >> > sp1.
>> >> >> >> > The application run but when it was executed the following
> occur
>> >> >> >> >
>> >> >> >> > "This version of symantec antirius require elevated prileges 
>> >> >> >> > in
>> >> >> >> > order
>> >> >> >> > to
>> >> >> >> > install. Please log in as an administrator or contact your
>> >> >> >> > network
>> >> >> >> > administrator for help."
>> >> >> >> >
>> >> >> >> > The package account given is  Asia\Domain User
>> >> >> >> >
>> >> >> >> > I have specify the Domain administrator in the Network access
>> >> > account.
>> >> >> >> > All
>> >> >> >> > user do not have local administrator rights on their machine.
>> >> >> >> > They
>> >> > are
>> >> >> >> > Domain user.
>> >> >> >> >
>> >> >> >> > In the package, i have select when user log in,
> administrative
>> >> >> > prileges
>> >> >> >> > and allow to interact was checked.  Despite i have select the
>> >> >> >> > time
>> >> >> >> > to
>> >> >> > run
>> >> >> >> > the  advertisment, some of the application did not run as
>> >> >> >> > expected
>> >> > for
>> >> >> >> > example, if i schedule the application at 14:00, it did not 
>> >> >> >> > run
>> > even
>> >> > i
>> >> >> >> > have
>> >> >> >> > waited for 2 hrs. I do not want the advisertisent to run as
> soon
>> > as
>> >> >> >> > possible
>> >> >> >> >
>> >> >> >> > When will the client pull down the policy despite that i have
>> >> >> >> > restart
>> >> >> > the
>> >> >> >> > machine a few time?  Since some the machine is at remote site,
> i
>> >> > can't
>> >> >> > go
>> >> >> >> > to
>> >> >> >> > every machine to initiate action on Machine Policy Retrieval &
>> >> >> > Evaluation
>> >> >> >> > Cycle.
>> >> >> >> >
>> >> >> >> > Thanks.
>> >> >> >> >
>> >> >> >> >
>> >> >> >>
>> >> >> >>
>> >> >> >
>> >> >> >
>> >> >>
>> >> >>
>> >> >
>> >> >
>> >>
>> >>
>> >
>> >
>>
>>
>
>