Deploy Flash Player to regular users

I have the licensed distributable flash player .msi from Adobe. Now i needed some help with deploying Flash Player 10 to "regular users" via SMS.
I have no problems installating on user with admin rights, but it does not work for users WITHOUT any administrative privileges. I did not want to go with the option of "Only install when NO user is logged in". Instead I would like to install with the setting of "Whether or not the user is logged in". Please help..
Are there any specific settings in the .msi that can be changed in order to create a transform (.mst) file and allow regular users to install?
I have already tried removing "admin user" setting under the "launch conditions" of the msi, but that returns the same error that the user didn't have administrative privilege to install. What options to i need to change/add to the flash player msi, specifically?

0 Comments   [ + ] Show comments

Answers (7)

Posted by: ales.graca 13 years ago
Posted by: pnuw 13 years ago
Yellow Belt
Thank you for the reply. I already have the .msi file, i was looking for some guidance on what settings need to be changed within the .msi in order to install for a user without admin rights.
Posted by: anonymous_9363 13 years ago
Red Belt
If you have removed the 'AdminUser' LaunchCondition entry in your transform, the only logical conclusion is that the transform isn't being applied.

Take a verbose log of the install and check the TRANSFORMS property. I'm willing to bet it won't include your transform.
Posted by: jcarri06 13 years ago
Senior Purple Belt
Are you installing the application using the local System Account and not as the logged on user? I believe SMS, be default, will use this account and thus have all the elevated rights needed to install flash. I don't recall whether Flash needed to be installed as the logged on user or not, but worth a shot checking.

- J
Posted by: anonymous_9363 13 years ago
Red Belt
Re: post #3 - You are using a transform to apply your changes, right? Editing vendor-supplied MSIs is a Really Bad Idea. Always use a transform.
Posted by: Jsaylor 13 years ago
Second Degree Blue Belt
I have always deployed flash player to the machine context, not to the user context, and have had no issues doing so. It sounds like your SMS program is attempting to deploy to the user context, and is thus failing because of the lack of rights.

To deploy to the system account, open the properties of your program, click over to the environment tab, and set "Whether or not a user is logged in" in the Program can Run dropdown box. Make sure "Run with administrative rights" and no other boxes are checked.

Once you've verified this, you can see what context the program is running in by looking at the execmgr log files on the client in question. Go to %windows%\system32\ccm\logs on a client machine that you've run the advertisement on, open execmgr.log, and look for a "Raising Event" line, later in the entry it should contain the AdvertisementId and PackageName lines that match your Package and advertisement ID's. Check the UserContext value here, it should report "NT AUTHORITY\\SYSTEM" if it's correctly running in the admin context. If it's reporting another value, let us know.
Posted by: pnuw 13 years ago
Yellow Belt
It's working now and thank you to all for that..It was a combination of all your suggestions that helped me work through it.
I'll breakdown how i got started, where i got stuck, how i troubleshot, and how it's working now... maybe it can help someone.

1)My first SMS packet was just the msi, no transform. The settings were exactly as Jsaylor stated... "whether or not a user is logged in" and "run with administrative rights". This worked, like i said, ONLY when a user with admin rights was logged in, or when there were NO users logged in at all. This SMS packet DID NOT work when a "regular user" without any administrative privileges was logged in.

2)So i created a transform .mst file by removing the "AdminUser" properties of "Launch Conditions" within the .msi file.

3)I started testing the .msi file along with the .mst 'locally' from the desktop and NOT via SMS. I figured if the transform is working locally, it should also work from SMS.. So this is where i got stuck. For some reason, when I ran a .cmd file with the following line:
start /wait msiexec /i install_flash_player_10_active_x.msi TRANSFORMS=install_flash_player_10_active_x.mst /qn /norestart /lv fp10_ax.log
it would not install. Looking at the log files as VBScab suggested, i did see my TRANSFORM getting referenced, but i wasn't exactly sure where to look within the log file to see if the 'AdminUser' 'Launch Condition' settings was getting ignored or not..but obviously it was since my install wasn't working.

4)After reading the suggestions from jcarri06 and Jsaylor, i went back to SMS with the same .msi and .mst transform file. Using the same settings as I stated in step 1, i tested it and it worked when a 'regular user' was logged in!!

My point is, that the .msi and .mst did NOT work locally on the desktop, but they did when i ran install from SMS. I know i could try to go deeper and try to figure out why it's not working locally, but my main concern was to be able to deploy this via SMS no matter who's logged on, and it's working that way, so i'm happy. Thank you again to all.
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ