Answered by:
Automated software deployment and UAC

Question
-
Hi all:
I need to push updates to custom software programs out to machines and we are using CA’s ITCM tool to do this. We have hit a snag with pushing EXE installers, UAC doesn’t seem to like those, and I am wondering if anyone has seen this and knows how to fix it? I was reading about using manifest files to request elevated privileges, but this results in a user prompt and we need to run the updates silently.
Any and all input is appreciated.
John.
Friday, February 19, 2010 2:05 PM
Answers
-
Hi John,
Thank you for posting in Windows Server Forum.
According to your description, I understand you want to deploy software updates (.exe) files to clients without credential popup.
The elevated privileges popup is caused by UAC feature.
When you push out the updates, you can modify the following group policies to disable credential popup for stand users.
Security Settings\Local Policies\Security Options
User Account Control: Detect application installations and prompt for elevation
Enabled (default for home)
Disabled (default for enterprise)
For more information about UAC group policy settings, you can refer to:
http://technet.microsoft.com/en-us/library/dd835564(WS.10).aspx
Hope it helps.
Sincerely,
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.- Marked as answer by Wilson Jia Friday, February 26, 2010 7:57 AM
Wednesday, February 24, 2010 8:03 AM -
Hi John,
You don't need to configure this "by hand". You can assgin a GPO to target computer OU.
Modify the following setting.
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
User Account Control: Detect application installations and prompt for elevation
Select "Disabled (default for enterprise)" option.
Regards,
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.- Marked as answer by Wilson Jia Friday, February 26, 2010 7:57 AM
Friday, February 26, 2010 2:02 AM
All replies
-
Hi John,
Thank you for posting in Windows Server Forum.
According to your description, I understand you want to deploy software updates (.exe) files to clients without credential popup.
The elevated privileges popup is caused by UAC feature.
When you push out the updates, you can modify the following group policies to disable credential popup for stand users.
Security Settings\Local Policies\Security Options
User Account Control: Detect application installations and prompt for elevation
Enabled (default for home)
Disabled (default for enterprise)
For more information about UAC group policy settings, you can refer to:
http://technet.microsoft.com/en-us/library/dd835564(WS.10).aspx
Hope it helps.
Sincerely,
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.- Marked as answer by Wilson Jia Friday, February 26, 2010 7:57 AM
Wednesday, February 24, 2010 8:03 AM -
Dear Customer,
I just wanted to say hi, and to see how things are going. I haven't heard back from you yet and I was wondering if there are any updates on the service request.
Thanks.
Sincerely
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.Thursday, February 25, 2010 6:52 AM -
Hi Wilson:
Thank you for your reply. Is this something that would have to be done "by hand" on each machine, or can this be automated as part of the install process.
John.Thursday, February 25, 2010 2:36 PM -
Hi John,
You don't need to configure this "by hand". You can assgin a GPO to target computer OU.
Modify the following setting.
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
User Account Control: Detect application installations and prompt for elevation
Select "Disabled (default for enterprise)" option.
Regards,
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.- Marked as answer by Wilson Jia Friday, February 26, 2010 7:57 AM
Friday, February 26, 2010 2:02 AM -
Cheers this sorted me outTuesday, February 13, 2018 3:13 PM