ACTIVE SETUP: Registry Changes doesnt work for non-admin users
I am trying to use this ACTIVE SETUP to make some registry changes for some non-advertised shortcuts as part of our Adobe X deployment script.
----------------------------------------------------------------------------------------------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\AdbeRdrX1001]
"Version"="1"
"StubPath"="Regedit.exe /s c:\\WINNT\\system32\\AdobeRdrX.reg"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Active Setup\Installed Components\AdbeRdrX1001]
------------------------------------------------------------------------------------------
It works great (copy entries over to HKCU and run StubPath) for admin users but it doesnt work for non-admin users when they log on to their computers.
The reason probably being that our environment is locked down for non-admins.
I need a workaround to make this Active Setup work for non-admin users on the network without having to request to increase their access rights.
Any help will be appreciated
----------------------------------------------------------------------------------------------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\AdbeRdrX1001]
"Version"="1"
"StubPath"="Regedit.exe /s c:\\WINNT\\system32\\AdobeRdrX.reg"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Active Setup\Installed Components\AdbeRdrX1001]
------------------------------------------------------------------------------------------
It works great (copy entries over to HKCU and run StubPath) for admin users but it doesnt work for non-admin users when they log on to their computers.
The reason probably being that our environment is locked down for non-admins.
I need a workaround to make this Active Setup work for non-admin users on the network without having to request to increase their access rights.
Any help will be appreciated
0 Comments
[ + ] Show comments
Answers (11)
Please log in to answer
Posted by:
timmsie
12 years ago
It's highly unlikely in a locked down environment that Regedit will run for a standard user.
change to a script (vb or wise etc)
or change the shortcut to a script that inserts the current user keys first and then runs the app
change to a script (vb or wise etc)
or change the shortcut to a script that inserts the current user keys first and then runs the app
Posted by:
anonymous_9363
12 years ago
I guess this is for Adobe Reader 10? You would be best advised to merge the .REG into a transform and apply that against the MSI at deployment time.
Posted by:
itolutions
12 years ago
Check - May be regedit using is prohibited by Polices or tries to register HKLM/HKCR data without neccessary permissions.
Posted by:
zerville
12 years ago
Thanks for the contributions..Unfortunately I am still not close to a viable solution yet.
Does anyone know of any other method outside ACTIVE SETUP that can be used to apply an HKCU registry settings to all other users logged to a computer?
All am trying to do is create some HKCU registry settings for Adobe X and then replicate the settings to other logged on users. ACTIVE SETUP only seem to do this succesfully for other admin users but not for other non-admin users. most of my logon users are understandably non-admin users
VBScab, how do you merge a .REG to a transform file? I dont seem to see this in Customization Wizard X ...Do you know of any documentation link for Cusotmization Wizard X that I can refer to?
Thanks all
Does anyone know of any other method outside ACTIVE SETUP that can be used to apply an HKCU registry settings to all other users logged to a computer?
All am trying to do is create some HKCU registry settings for Adobe X and then replicate the settings to other logged on users. ACTIVE SETUP only seem to do this succesfully for other admin users but not for other non-admin users. most of my logon users are understandably non-admin users
VBScab, how do you merge a .REG to a transform file? I dont seem to see this in Customization Wizard X ...Do you know of any documentation link for Cusotmization Wizard X that I can refer to?
Thanks all
Posted by:
pjgeutjens
12 years ago
as a little test, instead of using regedit.exe in the command line for the ActiveSetup, try writing a vbs script that uses the WSHShell.RegWrite function to write the registry entries, and calling that in the stubpath. I deeply suspect the use of regedit.exe being restricted for your standard users, but a VBS might just get through.
If this is still a No-GO, the use of GPO might be an alternative.
If this is still a No-GO, the use of GPO might be an alternative.
Posted by:
timmsie
12 years ago
You can add reg keys with the adobe customisation wizard I'm sure of it, although not used it for a while.
You can also do what I suggested and replace the shortcut with a script that writes the current user keys then launches the app
You can also do what I suggested and replace the shortcut with a script that writes the current user keys then launches the app
Posted by:
anonymous_9363
12 years ago
Sorry, folks, my mistake. I assumed that the OP was getting 'Access denied' errors because the .REG contained HKLM entries. I'll go back to sleep now.
Why not try using the .PDF extension as the advertised entry-point? That way, you could do the job properly by adding a new feature containing your HKCU settings and adjusting the feature tree accordingly.
Why not try using the .PDF extension as the advertised entry-point? That way, you could do the job properly by adding a new feature containing your HKCU settings and adjusting the feature tree accordingly.
Posted by:
zerville
12 years ago
Thanks Folks.
Pjgeutjens, vbs is not allowed in my environment..its a bit crazy here..but GPO may be my last shot if I cant get it done at the packaging level...I will have to talk to our AD guys if I eventually choose that option
Timmsie, I just found a documentation that explains adding registry keys with Adobe Customization wizard and I want to explore that option a little more... Before I go further, do you by chance know if making HKCU registry with a transform file auto-creates any advertised entry-point that allows HKCU reg change to flow to other users outside the currently logged-on user?
Pjgeutjens, vbs is not allowed in my environment..its a bit crazy here..but GPO may be my last shot if I cant get it done at the packaging level...I will have to talk to our AD guys if I eventually choose that option
Timmsie, I just found a documentation that explains adding registry keys with Adobe Customization wizard and I want to explore that option a little more... Before I go further, do you by chance know if making HKCU registry with a transform file auto-creates any advertised entry-point that allows HKCU reg change to flow to other users outside the currently logged-on user?
Posted by:
zerville
12 years ago
Sorry I take that back Timmsie I may be overthinking here... its not likely transform will do that.. I will have to manually create an advertised entry point.. possibly an msiexec to implement the transform file....and that wont work because non-admin users cant run msiexec.exe in my environment...ouch!.. I will think more about what to do and get back if I eventually find any other alternative to use at the packaging level outside using a GPO
Posted by:
pjgeutjens
12 years ago
I just had a look at the MSI for Adobe Reader X, and considering the fact that it already contains HKCU registry keys out of the box, I'm pretty sure you can just use the latest Adobe Customization Wizard to add your own (as Ian already suggested), and they too should get propagated by the existing mechanisms (more specifically the advertised shortcuts and the ProgIDs and MIME entries), which should trigger as soon as anyone gets anywhere near Adobe Reader on the machine.
I haven't been able to test yet, but give it a go.
EDIT:
That's taking it pretty far.. or are we talking about a Citrix environment here? Actually not being able to run msiexec.exe would otherwise pretty much kill any MSI-internal options for repair...
PJ
I haven't been able to test yet, but give it a go.
EDIT:
wont work because non-admin users cant run msiexec.exe in my environment
That's taking it pretty far.. or are we talking about a Citrix environment here? Actually not being able to run msiexec.exe would otherwise pretty much kill any MSI-internal options for repair...
PJ
Posted by:
zerville
12 years ago
Thanks Pjgeutjens. I opted for the GPO because time was running out on me to deploy this package..
I attempted deploying using AdobeCustomizationWizard/Transform/Msiexec in Active Setup and it partially worked for my non-admin users this time but I ran into some other regarding applying the transform to my Adobe ReaderX 10.0.1 boostrapper executable (totally different issue not related to Active Setup)..and I wasnt going to unbundle my boostrapped executable into an msi just to fix Active Setup so I decided to take the GPO route and save all the hassles...
Regardless of my taking the GPO route, I think setting up AdobeCustomizationWizard/Transform/msiexec in Active Setup would have worked if I had ad more time to spend on the project...Thank for all the suggestions
I attempted deploying using AdobeCustomizationWizard/Transform/Msiexec in Active Setup and it partially worked for my non-admin users this time but I ran into some other regarding applying the transform to my Adobe ReaderX 10.0.1 boostrapper executable (totally different issue not related to Active Setup)..and I wasnt going to unbundle my boostrapped executable into an msi just to fix Active Setup so I decided to take the GPO route and save all the hassles...
Regardless of my taking the GPO route, I think setting up AdobeCustomizationWizard/Transform/msiexec in Active Setup would have worked if I had ad more time to spend on the project...Thank for all the suggestions
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.