Tuesday, June 12, 2012 9:38 AM
ok so I know this has probably been asked a 100 times over but I cannot find a workable solution to the following issue.
We are trying to roll out Adobe CS4 Master Collection via SCCM 2007 to a bunch (300 roughly) Workstations. We have followed Adobes deployment guide and used the Adobe Uber Installer and it seems that this basically calls a setup.exe which in turn runs some msi's and exes. The issue we have is that because the installers sit on a shared folder on the network once the setup.exe attempts to run the Adobe air installer a message box pops up asking the user to confirm it is safe. Obviously we want no user interaction and as such cannot have that. Some of you out there who have experience with Adobe and their shocking installers will probably say well run it from a local drive by setting SCCM to download the content etc, this is fine and does work but takes the installer forever and a day to complete. The other option people may suggest is to not install AIR and the other apps which cause the security warning, this too is no good as we are splitting the Suite into individual application rollouts (ie Photoshop, Premiere etc) as not all stations require the full suite, if those elements arent there then future installations of Adobe applications from the suite fail. So I have tried everything i could find on the net to turn off zone checks, add trusted zones, change security levels within internet options, turn off UAC and nothing it still displays the open dialog box. So this is the main question who do you completely turn it off (Ideally via a REG key) so that it will just run anything regardless of its location?
Any help would be amazing as im pretty much ready to do myself some damage :-P
Tuesday, June 12, 2012 11:23 AM
1. Instead of doing someting to harm yourself, give a try to SCCM specific forum here
2. Adobe blogs and forums may help too http://blogs.adobe.com/oobe/2009/03/cool_tips_for_deploying_creati.html
3. Not sure what scripts do you use, but msiexe has q parameter and vbs script used with cscript do not need a "hint" to move.
4. Note very simple, but reliable Process Monitor (Sysinternals) may give a clue
Tuesday, June 12, 2012 2:45 PM
It would seem there are so many posts surrounding this with no good solutions only that listed above which dont suit my needs/scenario. I already know about Sysinternals apps but this too wont help me in this situation and I dont run any custom scripts I have simply used as stated above the Adobe Uber installer (Adobe Deployment Toolkit). After doing some more digging with the IE Zone Analyzer it seems that the mapped drive (Z in this case) which SCCM creates during deployment is being treated as an Internet zone. So by adding the sccm DP servers etc to the intranet zone will obviously make no difference. I have just added some more bits to the Trusted sites zone and told it to enable running applications and not prompt. Im just doing another test now. I was reading that this was an issue in IE7 where mapped drives werent going into the correct zone but we are using IE9 and I thought that was resolved. The only reason I havent posted in the SCCM forum is that this issue seems to be more about Windows Security Zones rather than specific SCCM.
Anyways I will report back further with my findings and hope someone else can find this info useful. :-)
Wednesday, June 13, 2012 2:10 PMOk so after some more digging I can confirm that if I run the installer from a share directly the install works fine with no open security prompt. The Installer is running as myself. If I run the installer via SCCM it runs under the system user account and prompts which I can only guess means the zones are not set for the local system. So I looked into a GPO on the computer settings which is Security Zone: Use only machine settings. This is meant to bring consistency to all users on the machine so they all have the same configured zones. I have just tested this again and once again the application running as system failed. So back to more testing and I will post more later.
Wednesday, June 13, 2012 3:00 PM
Huzzah! so the issue is now fixed, after drilling deeper I created a policy to not only set the zones via machine not user I also added the relevant entries into the Site to Zone Assignment list. This is now working for the system user as well as other users loggin in.
Hopefully people will find this nugget of info useful when trying to Deploy the Adobe CS4 Suite with split up elements and SCCM 2007 without downloading content locally on Windows 7
- Marked As Answer by GAMeB0Y Wednesday, June 13, 2012 3:01 PM