Uninstall problem - System account needs admin right
We have recently removed local admin from all users and are now in the process of removing unapproved software from users PC's. The users installed the software themselves whilst they had local admin.
We use SMS2003 as our deployment tool.
I use the following command line (in an .exe file so that SMS can run it) to uninstall a package. This was taken from the registry and then modified with a response file so that it can run silently.
"C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe" /M{3CB41017-F5CA-4C56-934C-ED02156251E6} /s /f1"c:\windows\uninstall.iss" (Under testing I have removed the /s so that I can see any error messages)
The problem is that when I run this .exe file from SMS it runs with SYSTEM rights. The package has a check in it to check if the account that is running it has admin rights. The SYSTEM account doesn't have local admin and I get the message "You do not have sufficient privileges... Please log on as an administrator."
The SYSTEM account has enough rights to uninstall, the problem is the package has a check built into it to check for admin rights.
Does anyone have any ideas on how I can get around this?
We use SMS2003 as our deployment tool.
I use the following command line (in an .exe file so that SMS can run it) to uninstall a package. This was taken from the registry and then modified with a response file so that it can run silently.
"C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe" /M{3CB41017-F5CA-4C56-934C-ED02156251E6} /s /f1"c:\windows\uninstall.iss" (Under testing I have removed the /s so that I can see any error messages)
The problem is that when I run this .exe file from SMS it runs with SYSTEM rights. The package has a check in it to check if the account that is running it has admin rights. The SYSTEM account doesn't have local admin and I get the message "You do not have sufficient privileges... Please log on as an administrator."
The SYSTEM account has enough rights to uninstall, the problem is the package has a check built into it to check for admin rights.
Does anyone have any ideas on how I can get around this?
0 Comments
[ + ] Show comments
Answers (3)
Please log in to answer
Posted by:
sirclive
19 years ago
Hi..
I don't use SMS, so forgive me if this is gibberish - I'll just say how I remotely install things. I use a KIX script, combined with PSEXEC.
You could have a BAT file with your uninstall syntax, copy it over to a folder on the remote workstation (the one you want to uninstall the app), and run it from a workstation/server using
PSEXEC -s -d \\workstation -u username -p password pathtobatchfile.bat
where -u and -p are optional extras if the user running the psexec is NOT an administrator of the target workstation.
SO for example, you would have something like..
XCOPY "uninstall_driver.bat" "\\workstation\c$\temp"
PSEXEC -s -d -u Administrator -p Adminpass c:\temp\uninstall_driver.bat
(-u and -p wouldn't be needed if the user ID running this script had Admin rights on the target workstation)
I hope this makes some kind of sense? I'm not terribly good at explaining my thought processes :-)
I also apologise if this isn't anything close to the answer you were looking for.
Cheers,
Gerard
I don't use SMS, so forgive me if this is gibberish - I'll just say how I remotely install things. I use a KIX script, combined with PSEXEC.
You could have a BAT file with your uninstall syntax, copy it over to a folder on the remote workstation (the one you want to uninstall the app), and run it from a workstation/server using
PSEXEC -s -d \\workstation -u username -p password pathtobatchfile.bat
where -u and -p are optional extras if the user running the psexec is NOT an administrator of the target workstation.
SO for example, you would have something like..
XCOPY "uninstall_driver.bat" "\\workstation\c$\temp"
PSEXEC -s -d -u Administrator -p Adminpass c:\temp\uninstall_driver.bat
(-u and -p wouldn't be needed if the user ID running this script had Admin rights on the target workstation)
I hope this makes some kind of sense? I'm not terribly good at explaining my thought processes :-)
I also apologise if this isn't anything close to the answer you were looking for.
Cheers,
Gerard
Posted by:
Bladerun
19 years ago
Are you dropping the response file on the machine, or is it already there when you run this command?
Usually necessary permissions are set there.
Also, why is the account SMS uses on all machines not a local admin? It would save you numerous headaches.
Usually necessary permissions are set there.
Also, why is the account SMS uses on all machines not a local admin? It would save you numerous headaches.
Posted by:
auroauro
19 years ago
I have the same SMS 2003 problem during a package installation (BlackBerry Desktop Software 4.0) if the user haven't admin right.
I'm not sure if it could help because I can't try this fix:
http://support.microsoft.com/?scid=kb;en-us;831198&spid=2890&sid=529
I'm not sure if it could help because I can't try this fix:
http://support.microsoft.com/?scid=kb;en-us;831198&spid=2890&sid=529
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.