Publishing Applications without Admin Rights

[gmail2]

I have several questions on published applications, however, my first and main question is regarding permissions. I always understood that published applications were always installed with elevated privileges by default. However, after publishing an application to a test account now, it errored out saying that I needed to logon as an administrator. So, I decided to enable "always install with elevated privileges" under the scope of both the computer and user - and to my surprise, it still said I needed admin rights. The msi in question is the Windows 2003 Admin Pack (which includes additional msi's like AD users and computers etc). Is there any way to do this without the user having admin rights? Or is this application dependent (ie, can some applications be installed by users without needing admin rights?)

I also have a few other questions about published applications:

1. If a patch is released for an application I've published, and I apply the patch to my admin install, then re-deploy the application in AD - will the application be automatically re-installed with the updated files? Or am I dependant on the users going into Add/Remove Programs and updating the application? Bearing in mind that the Admin Tools Pack can't be auto-installed by file extension activation.

2. If I turn on "uninstall when out of scope of management", I presume that it's incorrect to say that the application wouldn't be uninstalled if a user outside of the scope of management logged into that PC (regardless of whether they have admin rights or not)? So when would the application get uninstalled? Or does this check box only change the advertisement of the application, but not the actual installation (for published applications)?

Right, I think that's all my questions for now. I know it's alo to ask, but I'd really appreciate some help understanding this as there are several applications I'd like to publish to certain departments.

Thanks again

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau

 

[gmail2]

Hi all,

Sorry, after (an awful lot) of googling, I found out what was wrong with this. Thankfully, as I suspected, published and assigned applications do get installed with elevated privileges, without the "always install with elevated privileges" being enabled. The problem I had, is that Microsoft have put a condition in the LaunchCondition in the MSI that says you MUST have admin rights. Basically, from what I can understand, it's a way of saying that you must have admin rights, or your administrator must have approved it (by modifying the msi file). For anybody that runs into this in the future, the record you need to change is AdminUser or REMOVE="All" to Privilege or REMOVE="All"

I'd still be interested to hear about how I can keep the applications patched and how they would get removed (if at all)

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau