I am trying to repackage a Forticlient VPN to distribute out through KACE and upgrade users VPN clients they have installed. AppDeploy creates the msi just fine but when I test it on a clean machine, I get an error that I cannot open the VPN with admin rights. I am the domain admin and I am signed in as such so that isnt the problem. Could someone give me some kind of idea on what could be wrong? I have to get this out to 100+ users and I really dont want to manually upgrade all their machines.
3 Comments   [ + ] Show Comments

Comments

  • Yeah, just testing. The problem comes is while testing the package on a clean machine. After it packages up great, when I try it on the clean machine it installs but when you try to click on the icon and open it, it says you must have admin rights to do it. Its weird since I am signed in as a domain admin.
  • I work in a Mac and Windows environment and have found the pkg and msi but need to know how to remove the "other components" and install the VPN only so I can push them out to multiple users through Heat Software's LANrev management. Any Command line modifiers to get this done? Or Any help at all?
  • Download the online installer and start it, when you get to the install stage, the MSI bit where you click next, choose what you want etc - stop. Have a look in C:\ProgramData\Applications\Cache\{B5E0B33F-91D4-408B-BE40-46BCA75F3914}\5.4.0.0780 for the MSI. You can use that to deploy, come back to us if you need a hand configuring the settings, ie VPN or Complete.
    I've done this but need to get VPN only. Any Help?
Please log in to comment

Community Chosen Answer

3
I figure you are talking about distributions using the k1000.  If you are trying to deploy this as a MI it runs as system not admin.  If you need to distribute as an admin you need to use a kscript
Answered 11/03/2015 by: SMal.tmcc
Red Belt

Please log in to comment

Answers

1
Just to be clear - you're just testing the package and still having problems? 

Do you have a support contract with FortiClient? If you do, you will have access to there Offline Installers, you should be able to use this for deployment (hopefully). Don't reinvent the wheel if you don't need too.

**Update
Download the online installer and start it, when you get to the install stage, the MSI bit where you click next, choose what you want etc - stop. Have a look in C:\ProgramData\Applications\Cache\{B5E0B33F-91D4-408B-BE40-46BCA75F3914}\5.4.0.0780 for the MSI. You can use that to deploy, come back to us if you need a hand configuring the settings, ie VPN or Complete.

At a basic deployment, you can go
msiexec /i FortiClient.msi /qb

Change the /qb to qn when adding to KACE, use /qb when testing so you can see msi errors, otherwise you wil need to read logs. You can add logging with 
/l*vx C:\Windows\Logs\NameofYour.log


Its basicly a MSI wrapped in a exe, I think they did it so they could trigger a virus scan to make sure the system is clean before the VPN get layed down, good security i guess.

Or, you can download it from here, its just uploading now, so give it some time.
https://www.dropbox.com/sh/liiq6e46vtgrkxl/AAAeC1D3dgyC37-Trz25Vf_Ma?dl=0
The msi is signed, so will be safe/tamper poof - Signed by Forti Something Canada Whatever.

I will delete this file after a few days.

Answered 11/04/2015 by: rileyz
Red Belt

  • Yeah, just testing. The problem comes is while testing the package on a clean machine. After it packages up great, when I try it on the clean machine it installs but when you try to click on the icon and open it, it says you must have admin rights to do it. Its weird since I am signed in as a domain admin.
    • Read my updated post pls.
  • Ok thank you for your help. I will take a look at this (I downloaded the file). We have support for our Fortigate but we are using the free Forticlient that we can get from Fortinet through our Fortigate. I am sure I will need more help so I will be back as soon as I can. Thank you so much for all your help!
    • Ok update, the MSI pushes out fine through KACE but it doesnt upgrade the current version that is on the machine. So all the users will have to manually do the configuration. Unless someone knows how to push out the configuration to the users like using the registry setting for it (although tried copying it to a clean machine and import it and it wouldnt let me). Just trying to find a easy way to upgrade all the remote users VPN without having to hold hands and walk them through it.
      • What do you mean by it does not upgrade the current version? A) both versions are installed at the same time. B) It was upgraded by the new version but missing settings.

        Whooa, upgrade over VPN is a bit of risk, if it goes wrong... lol. Anyway, I recommend a support doc for users so they can reconfig if the update goes wrong.

        If you let me know the registry settings I can whip you up a mst (transform) for the installer. You must give me the correct setting tho - what i mean by that is TEST the settings! ie if you do a reg import of the settings, will it set it up correctly.

        *im not working at moment, lucky for you I have free time.
Please log in to comment
0
Ok, gotcha on that. Yes we are using k1000. Not trying to sound stupid but what is a kscript? Is it a KACE script? This is my first time using the AppDeploy so I am just learning.
Answered 11/03/2015 by: droehrig
White Belt

  • yes use the scripts page and you can specify the user to push with in the "Windows Run As" section. The same holds true for scripts if you use the default settings it pushes as system.
Please log in to comment
Answer this question or Comment on this question for clarity