SCCMs Programs deployment to HKCU
When you goto SCCM Software Library --- > Packages ---> Select a package ---> Click Programs Tab----> Select Properties ---> Under the Environment ( Selecting to deploy only when user is logged on have two Run Mode, one is Run with User's Right, two is Run with Administrator rights.)
Now if you are making changes to Regedit with (HKCU) what setting should you select? Because user don't have rights to Regedit or make changes under Regedit.
Should i select Run the Program "Only when user is logged on" then select Run with Admin? To by pass the right?
0 Comments
[ + ] Show comments
Answers (2)
Please log in to answer
Posted by:
anonymous_9363
7 years ago
If you run with admin rights, you're going to have to create a script that has to divine the user's SID, loops through HKEY_USERS to find that SID then write the registry value. Much simpler would be to unblock RegEdit (what exactly do you believe that achieves, when the registry is controlled by permissioning anyway?) and use a much simpler script, run via Active Setup.
Or, if the package is an MSI, you can do it the "proper" sway by creating a user feature and adjusting the MSI's feature tree so that the feature containing an advertised entry-point (e.g. a shortcut) triggers self-healing.
Or, if the package is an MSI, you can do it the "proper" sway by creating a user feature and adjusting the MSI's feature tree so that the feature containing an advertised entry-point (e.g. a shortcut) triggers self-healing.
Posted by:
Pressanykey
7 years ago
Hi,
have you considered the PSAppDeploy toolkit...
I use it as the standard interface between package and deployment tool, and if you really need to do things like HKCU it has built in functionality to do this (even without using Active Setup), basically what Ian is suggesting.
Cheers
Phil
have you considered the PSAppDeploy toolkit...
I use it as the standard interface between package and deployment tool, and if you really need to do things like HKCU it has built in functionality to do this (even without using Active Setup), basically what Ian is suggesting.
Cheers
Phil
