Views: 9.5k  |  Created: 08/28/2009

Average Rating: 0
iTunes has 15 inventory records, 30 Questions, 1 Blogs and 3 links. Please help add to this by sharing more!

Deployment Tips (12)

Most Common Setup Type
Not Determined
Average Package Difficulty Rating
Rated 1 / 5 (Very Easy) based on 1 ratings
Most Commonly Reported Deployment Method
Windows Installer with Custom Transform (MST)
or cancel
17
Note
In our Enterprise environment, our goal was to deploy the iTunes package but to lock it down as much as possible. Our main objective was to allow our users access to iTunes for their iPhones. Through several hours of troubleshooting and research, here are the results that worked best for us.
Our journey first began by obtaining the registry keys needed to lock down the workstations. After lots of research we found that the HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.\iTunes\Parental Controls\Default\ folder needed to be created. This key allows the locked down features to be inherited by future users. Within that registry folder we needed to create a dword key called AdminFlags with the value of 3FFFF. This disabled almost all of the vital features on iTunes because it was the sum of ALL features combined. Let me try to explain this in better terms.
Say for instance that i wanted to disable the Music Store, the Check for Updates feature, and the AppleTV in iTunes. Here are the two keys that do so:

kParentalFlags_DisableMusicStore = 0x00000004 and
kParentalFlags_DisableCheckForUpdates = 0x00000100 and
kParentalFlags_DisableAppleTV = 0x00008000

If you pull up the windows calculator in scientific view in decimal and enter 4 + 100 + 8000 and hit enter. It will give you a result. Then hit the HEX radio button on the calculator and it will give you the result of 1FA8. You now have the HEX value of the 3 functions you'd like to disable in iTunes.
So if you go back to the AdminFlags registry key and enter 1FA8 the next time you open iTunes, those features will be disabled. Now I only have to deploy the registry key with that value and it will disable the features for any user that logs onto the workstation. Hopefully this will help some of you. We had a heck of a time finding documentation that explained this process.

Here is the link to all the features that can be disabled..unfortunately they didn't explain how to do it:
http://support.apple.com/kb/ht2102
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
12
Note
In regards to iTunes 8.1.0.52 Vista and Windows 7 deployment:

tamahome has the right idea in regards to what files and reg keys would be needed for a good profile fixup that would circumvent the "License Agreement" screen and any errors you may get for not running bonjour. The following reg keys and files are what you need to have run iTunes v8.1.0.52 without any nagging(after setting your preferences of course):

HKCU\AppEvents\EventLabels\Itunes_Complete
HKCU\Software\Apple Computer, Inc.\Itunes\SM Shorcut Installed

The following files are needed also:

[AppDataFolder]\Apple Computer\iTunes\iTunesPrefs.xml

[LocalAppDataFolder]\Apple Computer\iTunes\iTunesPrefs.xml

Notice they have the same file name? They are different, and both are needed.

A self heal(profile fix) will do the trick for both files and reg keys.

In the property manager the following needs to be present if you wish to get rid of the desktop shortcut:
DESKTOP_SHORTCUTS="1" to DESKTOP_SHORTCUTS="0".

If the "DESKTOP_SHORTCUTS" is not present in the table, just go ahead and add it. It was not present in v8.1.0.52 in either the 32bit or 64bit package.

Also in the properties manager:
SCHEDULE_ASUW=0 to turn off automatic updating.

Quick note: Although iTunes 32bit will install on 64bit Vista/Win7, it will not be able to burn cd's due to the ASPI drivers not being compatible. You will need the 64bit iTunes for your Vista/Win7 64bit.

I mention this only because the .msi for both 32bit and 64bit behave slightly differently. For example I did not need to set the "DESKTOP_SHORTCUTS" property in the 32bit package, but it was indeed needed for the 64bit.

It is also worth it to note: The only portion of the 64bit iTunes MSI that is 64bit is the Gear ASPI driver. iTunes is still a 32bit application, and will install to "Program Files (x86)".
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
9
Command Line
When you download iTunes, the package contains QuickTime and iTunes but the command line string for silent install doesn't work because only iTunes is installed.

iTunes works only with QuickTime so to install iTunes 8, download both QuickTime and iTunes and then install QuickTime 7.5 first with following command line:

QuickTimeInstaller.exe /quiet /norestart

After you can install iTunes with the following command line:

iTunesSetup.exe /quiet /norestart
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
8
Note
Deploying iTunes 8.x true MS Active Directory

As I had problems installing true AD, here the correct way to approach this.

Download the iTunes installer from www.apple.com. Run the iTunes.exe file and get the MSI files out of the C:\Documents and Settings\[user]\Local Settings\Temp folder. All that is needed is the iTunes.msi file (iTunes 8.x needs QuickTime 7.5.5 or higher to run, make a seperate package for that).

Edit the MSI file with Orca and go to View -> Summary Information. In the Languages section, delete all but 1033. Click OK and save the MSI file.

Generate a new transform file and make the following modifications.

In the Component table, find the component titled "iTunesDesktopShortcuts" and change the condition from DESKTOP_SHORTCUTS="1" to DESKTOP_SHORTCUTS="0".

In the Property table, change the IAcceptLicense field to "Yes and the ProductName field to conform to established naming conventions. Set SCHEDULE_ASUW from 1 to 0 to turn off automatic updating.

In the Shortcut table, drop the "About iTunes" shortcut.

Generate the transform, and rename the transform and MSI to established naming conventions.

Copy the MSI and MST to the distribution point. Now create your GPO and add the software package as an assigned package to the computer. Check the box to uninstall when it falls out of scope (if you wish) and add the MST file to the Modifications tab.
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
7
Note
-------------------------------------
Remove the iTunes 8 Desktop Shortcut:
-------------------------------------

- Launch iTunes8Setup.exe

- copy the extracted source from:
C:\Documents and Settings\<username>\Local Settings\Temp\<temp folder>

File names:
AppleMobileDeviceSupport.msi
AppleSoftwareUpdate.msi
Bonjour.msi
iTunes.msi
MobileMe.msi
QuickTime.msi
SetupAdmin.exe


- Open iTunes.msi in Wise.
- Goto Setup Editor and select the Components Tab
- Scroll down to iTunesDesktopShortcuts
- Get the Component Properties and change the DESKTOP_SHORTCUTS="1" Condition to "0"

Save as iTunes.mst
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
5
Note
These 2 registry entries have to be present under HKEY_CURRENT_USER, or else the Itunes shortcut will launch a repair. Itunes setup doesn't propagate them for new users (this seems to be an MSI limitation):

HKCU\AppEvents\EventLabels\Itunes_Complete
HKCU\Software\Apple Computer, Inc.\Itunes\SM Shorcut Installed

Also to avoid the "Agree" screen and the possible warning about the Bonjour service being disabled, this file must be present:

%USERPROFILE%\Local Settings\Application Data\Apple Computer\iTunes\iTunesPrefs.xml

Installing like this: 'iTunesSetup.exe /quiet /norestart' will leave other modules like 'Apple Mobile Device Support' un-updated.

Autoit script that will update everything:

run("c:\documents and settings\administrator\itunessetup.exe")

winwait("iTunes + QuickTime", "Welcome to the iTunes Installer")
controlclick("iTunes + QuickTime", "Welcome to the iTunes Installer", "&Next >")

winwait("iTunes + QuickTime", "License Agreement")
controlclick("iTunes + QuickTime", "License Agreement", "I &accept the terms in the license agreement")
controlclick("iTunes + QuickTime", "License Agreement", "&Next >")

winwait("iTunes + QuickTime", "Installation Options")
controlcommand("iTunes + QuickTime", "Installation Options", "Add iTunes and QuickTime shortcuts to my desktop", "Uncheck")
controlcommand("iTunes + QuickTime", "Installation Options", "Use iTunes as the default player for audio files", "Uncheck")
controlcommand("iTunes + QuickTime", "Installation Options", "Automatically update iTunes and other Apple software", "Uncheck")

controlclick("iTunes + QuickTime", "Installation Options", "&Install")

winwait("iTunes + QuickTime", "Congratulations.")
controlclick("iTunes + QuickTime", "Congratulations.", "&Finish")

winwait("iTunes + QuickTime", "You must restart")
controlclick("iTunes + QuickTime", "You must restart", "&No")

DirRemove("C:\Documents and Settings\All Users\Start Menu\Programs\Multimedia\Media Players\iTunes", 1)

DirMove("C:\Documents and Settings\All Users\Start Menu\Programs\Itunes", "C:\Documents and Settings\All Users\Start Menu\Programs\Multimedia\Media Players", 1)

FileDelete("C:\Documents and Settings\All Users\Start Menu\Programs\Apple Software Update.lnk")
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
3
Note
Most iTunes configuration information found under the application's Preferences dialog is stored in "%USERPROFILE%\Application Data\Apple Computer\iTunes\iTunesPrefs.xml" in encrypted form.

The only way I found to modify this is to load iTunes, make the preference change, close iTunes, then take a copy of this changed 'customized' file. You can use this file how you want, e.g. in a transform with a custom action at the end of the installation sequence to copy the file to the directories "%USERPROFILE%\Application Data\Apple Computer\iTunes" and "C:\Documents and Settings\Default User\Application Data\Apple Computer\iTunes".
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
3
Note

Something that doesn't appear to be that well known is that WINRAR has the ability to extract from executables. WINRAR is really cheap and gives you the ability to right click some executables and extract their content. This works with the iTunes exe and also works with updates provided by Microsoft. It's the first thing I try on any exe I'm tasked with packaging and I have a high hit rate at getting MSI files out without any effort. The best thing is, you can copy an exe to a folder, right click and WINRAR offers to "Extract here ...", so you end up with all the files neatly extracted into their own folder, all without having to mess about with the TEMP dir. Try it, you'll love it.

Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
2
Note
Information posted by sdawkins was certainly helpful. Since converting Dec to Hex values is not how we all want to spend our time, I'd recommend looking at an article at http://www.afp548.com/article.php?story=20090929184106810. Very helpful coverage of the same topic. The decimal column is the key to figuring out the AdminFlags value. You can effectively forget about converting anything.

Table for your convenience:
kParentalFlag_Lock = Hex = Dec
kParentalFlags_Locked = 0x00000001 = 1
'kParentalFlags_DisablePodcasts = 0x00000002 = 2
'kParentalFlags_DisableMusicStore = 0x00000004 = 4
'kParentalFlags_DisableSharing = 0x00000008 = 8
'kParentalFlags_DisableExplicitContent = 0x00000010 = 16
'kParentalFlags_DisableRadio = 0x00000020 = 32
'kParentalFlags_RestrictMovieContent = 0x00000040 = 64
'kParentalFlags_RestrictTVShowContent = 0x00000080 = 128
'kParentalFlags_DisableCheckForUpdates = 0x00000100 = 256
'kParentalFlags_RestrictGames = 0x00000200 = 512
'kParentalFlags_DisableMiniStore = 0x00000400 = 1024
'kParentalFlags_DisableAutomaticDeviceSync = 0x00000800 = 2048
'kParentalFlags_DisableGetAlbumArtwork = 0x00001000 = 4096
'kParentalFlags_DisablePlugins = 0x00002000 = 8192
'kParentalFlags_DisableOpenStream = 0x00004000 = 16384
'kParentalFlags_DisableAppleTV = 0x00008000 = 32768
'kParentalFlags_DisableDeviceRegistration = 0x00010000 = 65536
'kParentalFlags_DisableDiagnostics = 0x00020000 = 131072
'kParentalFlags_AllowITunesUAccess = 0x00040000 = 262144
'kParentalFlags_RequireEncryptedBackups = 0x00080000 = 524288

Sum the Dec values corresponding to what you want to lock down and that's your AdminFlags value.

If using a vb script, plug it in via:
ws.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default\AdminFlags","Your Value","REG_DWORD"
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
1
Note

Follow below link to package latest version of itunes for Windows 7

http://msiworld.blogspot.com.au/2012/06/re-packaging-apple-itunes-10617-and.html

Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
1
Command Line
Silent uninstall for Version 8.0.0.35

MsiExec.exe /X{41B9E2CF-0B3F-442A-B5B3-592A4A355634} /qn /norestart
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
-3
Note
You can also just go into the shortcuts area in Wise and redirect the icon to get installed in a directory like c:\Windows\icons.

When recompiling, be sure and check the box to *not update on recompile*.

This way you don't have to run a transform if you are happy with the base msi install.
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment

Inventory Records (15)

View inventory records anonymously contributed by opt-in users of the K1000 Systems Management Appliance.

iTunes

Version

8.1.0.52

Contact

AppleCare Support

Uninstall String

MsiExec.exe /I{C26B06A9-27BB-45B0-9873-9C623EC2BA38}

Questions & Answers (30)

Questions & Answers related to Apple iTunes

1
ANSWERS
4
ANSWERS
2
ANSWERS
3
ANSWERED
5
ANSWERS
5
ANSWERED
2
ANSWERS
3
ANSWERED
1
ANSWERS
1
ANSWERS
2
ANSWERS
1
ANSWERS

Blogs (1)

Blog posts related to Apple iTunes

Reviews (0)

Reviews related to Apple iTunes