Answered by:
Unable to deploy Applications
Question
-
Hello everyone,
I am having an issue with my end users where they are not able to install software on their systems. I have added Lync 2010 to the Application Catalog and set the deployment to "All Users." If I log into the computer as a local administrator, the installation runs without an issue and all is right with the world. However, when I have one of my end users attempt to install the software everything seems like it is working until they get a prompt that says it was "Unable to make chagnes to your software." If you click on the more information portion, the only thing it tells you is "The software change returned error code 0x800702E4(-2147024156)."
Based on the fact that it works on someone who is an administrator, this leads me to believe that security is wrong somewhere...but I can't seem to figure out where I went wrong. The System Center admin account is a local administrator on all computers, which baffles me even more while attempting to troubleshoot the issue.
I have been looking around on the internet and trying a few things but I can't seem to find anything good that will help me out. I also did not want to fill the initial post with logs, combined with the fact that I didn't know what logs may be helpful in troubleshootoing this. I appreciate any help someone can offer.
Thank you.
Wednesday, July 18, 2012 7:17 PM
Answers
-
The System Center admin account is a local administrator on all computers, which baffles me even more while attempting to troubleshoot the issue.
See AppEnforce.log.
Which account are you talking about? An application is either installed using local system or the context of the logged-in user. That can be defined in the properties of the deployment type: http://technet.microsoft.com/en-us/library/gg682174.aspx#BKMK_Step5Torsten Meringer | http://www.mssccmfaq.de
- Marked as answer by BrianGWAccount Thursday, July 19, 2012 12:59 AM
Wednesday, July 18, 2012 7:47 PM
All replies
-
The System Center admin account is a local administrator on all computers, which baffles me even more while attempting to troubleshoot the issue.
See AppEnforce.log.
Which account are you talking about? An application is either installed using local system or the context of the logged-in user. That can be defined in the properties of the deployment type: http://technet.microsoft.com/en-us/library/gg682174.aspx#BKMK_Step5Torsten Meringer | http://www.mssccmfaq.de
- Marked as answer by BrianGWAccount Thursday, July 19, 2012 12:59 AM
Wednesday, July 18, 2012 7:47 PM -
Thank you for the response.
I checked the log and from my last attempt at installation, it generated the following entires.
<![LOG[+++ Starting Install enforcement for App DT "Lync 2010" ApplicationDeliveryType - ScopeId_A35FB0DD-D4F6-4F28-8119-E71BE2F2293E/DeploymentType_f5caa2ec-9517-49e9-a47c-4595ec42acc5, Revision - 6, ContentPath - C:\Windows\ccmcache\4, Execution Context - User]LOG]!><time="15:13:13.606+240" date="07-18-2012" component="AppEnforce" context="" type="1" thread="2680" file="appprovider.cpp:1624">
<![LOG[ A user is logged on to the system.]LOG]!><time="15:13:13.607+240" date="07-18-2012" component="AppEnforce" context="" type="1" thread="2680" file="appprovider.cpp:1999">
<![LOG[ Performing detection of app deployment type Lync 2010(ScopeId_A35FB0DD-D4F6-4F28-8119-E71BE2F2293E/DeploymentType_f5caa2ec-9517-49e9-a47c-4595ec42acc5, revision 6) for user.]LOG]!><time="15:13:13.612+240" date="07-18-2012" component="AppEnforce" context="" type="1" thread="2680" file="appprovider.cpp:2064">
<![LOG[+++ Application not discovered. [AppDT Id: ScopeId_A35FB0DD-D4F6-4F28-8119-E71BE2F2293E/DeploymentType_f5caa2ec-9517-49e9-a47c-4595ec42acc5, Revision: 6]]LOG]!><time="15:13:13.639+240" date="07-18-2012" component="AppEnforce" context="" type="1" thread="2680" file="localapphandler.cpp:291">
<![LOG[ App enforcement environment:
Context: User
Command line: LyncSetup.exe /install /silent
Allow user interaction: Yes
UI mode: 1
User token: not null
Session Id: 2
Content path: C:\Windows\ccmcache\4
Working directory: ]LOG]!><time="15:13:13.640+240" date="07-18-2012" component="AppEnforce" context="" type="1" thread="2680" file="appcontext.cpp:67">
<![LOG[ Prepared working directory: C:\Windows\ccmcache\4]LOG]!><time="15:13:13.642+240" date="07-18-2012" component="AppEnforce" context="" type="1" thread="2680" file="appcontext.cpp:182">
<![LOG[ Prepared command line: "C:\Windows\ccmcache\4\LyncSetup.exe" /install /silent]LOG]!><time="15:13:13.646+240" date="07-18-2012" component="AppEnforce" context="" type="1" thread="2680" file="appcontext.cpp:331">
<![LOG[ Executing Command line: "C:\Windows\ccmcache\4\LyncSetup.exe" /install /silent with user context]LOG]!><time="15:13:13.647+240" date="07-18-2012" component="AppEnforce" context="" type="1" thread="2680" file="appexcnlib.cpp:201">
<![LOG[ Working directory C:\Windows\ccmcache\4]LOG]!><time="15:13:13.647+240" date="07-18-2012" component="AppEnforce" context="" type="1" thread="2680" file="appexcnlib.cpp:215">
<![LOG[CMsiHandler::EnforceApp failed (0x800702e4).]LOG]!><time="15:13:13.651+240" date="07-18-2012" component="AppEnforce" context="" type="3" thread="2680" file="msihandler.cpp:284">
<![LOG[AppProvider::EnforceApp - Failed to invoke EnforceApp on Application handler(0x800702e4).]LOG]!><time="15:13:13.652+240" date="07-18-2012" component="AppEnforce" context="" type="3" thread="2680" file="appprovider.cpp:1702">
<![LOG[CommenceEnforcement failed with error 0x800702e4.]LOG]!><time="15:13:13.652+240" date="07-18-2012" component="AppEnforce" context="" type="3" thread="2680" file="appprovider.cpp:1741">
<![LOG[Method CommenceEnforcement failed with error code 800702E4]LOG]!><time="15:13:13.652+240" date="07-18-2012" component="AppEnforce" context="" type="3" thread="2680" file="appprovider.cpp:2296">
<![LOG[++++++ Failed to enforce app. Error 0x800702e4. ++++++]LOG]!><time="15:13:13.654+240" date="07-18-2012" component="AppEnforce" context="" type="3" thread="2680" file="appprovider.cpp:2365">What I mean by that is that I have an account called SCCM_Admin. This account is what the program was initially installed under and is the administrator of System Center. I use that account to do all of the configuration and management of the systems. We don't use our regular accounts for any major software programs.
I will check out the link as well and see if I have something different from there.
Wednesday, July 18, 2012 8:26 PM -
You got this error because the user that tries to install haven't got rights to install the application!
When you deploy to user it runs in the context of that user. In this case with lync your user needs to be a local admin on the computer to install.
Wednesday, July 18, 2012 9:00 PM