Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

interactive services dialog detection :: A program can't display a message on your desktop

Created: 20 Oct 2009 • Updated: 21 May 2010 | 10 comments

Hello,

This post is in concern to deployment of applications through SMS.

I have one install.xml which is having 3 MSIs. And 4th command to give Modify access to one folder which is used by Business Users.

Install.xml:

-------------------------------------
<Run>
   <Exec>%SystemRoot%\System32\Msiexec.exe /i "#PackagePath#\x86\ ABC Folder \ ABC.msi" transforms="#PackagePath#\x86\ ABC Folder \ ABC.mst" /qb! /l* C:\Build\Logs\ ABC.log</Exec>
  </Run>

  <Run>
   <Exec>%SystemRoot%\System32\Msiexec.exe /i "#PackagePath#\x86\ DEF Folder \ DEF_HotFIX.msi" /qb! /log C:\Build\Logs\ DEF.log</Exec>
  </Run>

  

  <Run>
   <Exec>%SystemRoot%\System32\Msiexec.exe /i "#PackagePath#\x86\ XYZ Folder \ XYZ.msi" transforms="#PackagePath#\x86\ XYZ Folder \ XYZ.mst" /qb! /log C:\Build\Logs\ XYZ.log</Exec>
  </Run>

  <Run>
   <Exec>%SystemRoot%\System32\ICacls.exe "%ProgramFiles%\ folder A \ folder B \ Folder Cache" /Grant Interactive:M</Exec>
  </Run>

-----------------------------------

PROBLEM-

When this install.xml is run through SMS, following message comes up.

Main Title Instruction:

Interactive services dialog detection

Description:

A program can't display a message on your desktop

Details:

Program or Device requesting attention-

Messagae Title:
"Folder B"
Program Path: C:\ Program Files \ Folder A \ Folder B \ ....... [installation files continued..]

And installtion is in continuation. As of now there is no error in installation.

And I reckon that this is due to INTERACTIVE group access to folder CACHE.

Can somebody throw light on this how can installation be done in silent mode/ with out appearing any popups.

Because this package needs to be sent on 275-280 machines through SMS.

Your recommendations----

*Also it is difficult to remove any services from registry thing manually. If any other file needs to be installed then can include but manual operation is not possible.

Thank You.
 

Comments 10 CommentsJump to latest comment

EdT's picture

1. Have you tried setting the SMS deployment parameters to "Allow Interaction with Desktop", and "Deploy only when user is logged in"
2. transforms=  is incorrect. It has to be TRANSFORMS=  (as this is a public property). This may be the culprit in your warning about something wanting to display a message, as windows installer will barf on this line.
3. Who are you applying Modify permissions to?  There is no mention of a user or group in your lCacls command. What is lCacls?  I know of CACLS.exe and also XCACLS.exe but have not encountered lCacls.exe before. Is it psychic, so that it knows which users and groups you want to apply permissions for ??  (LOL)
Are these permissions local or domain based? 
The SMS installer account may not have domain privileges in order to extract the domain security SID for any AD or domain group that you are using to define security, It may be preferable to apply security settings by group policy. 

Finally, you have put: "*Also it is difficult to remove any services from registry thing manually. If any other file needs to be installed then can include but manual operation is not possible." - is this relevant to your posting as it makes no sense to me. Is this a statement or a question about something??

If your issue has been solved, please use the "Mark as Solution" link on the most relevant thread.

VBScab's picture

What a needlessly complicated deployment. Why not:

- use a Task Sequence to run the MSIs in sequence, or for the packages that follow one another, either:
   - set a 'Run this program first' and have it run the previous MSI, or
   - create an MST for the MSI and check for installation of the previous package. If it's not present, abandon the installation.
- add the permissioning line to the last MSI or to a separate MSI

Don't know why 'x' happened? Want to know why 'y' happened? Use ProcMon and it will tell you.
Think about using http://www.google.com before posting.

Lacks's picture

EDT:

1. I will see whether ALLOW INTERACTION is checked or nor.

2. you mean to say transforms should be in Caps.

3. This group [Interactive] is added to one particualr folder so that any user wants to read/write the document then can do in that order. So Modify permissions have been given.
This is for all users whom we are deploying this package.

when I right click on the folder about I stated above, right click > properties then there is User & Admin group are there [generally these comes in any org for security purpose] but when this ICacls command is run, it adds INTERACTIVE group and now if I check by right click > properties > User, Admin, Interactive groups are there.

This group is not concerned with any domain or AD.

4. I mentioned that it is not possible to modify anything manually [as roll out goes for hundreds of machines and also org policy does not allow to do so. Thats why I said that if there is a need of any additional file to be deployed to make this thing working then can do so. I don't know how come you understand it as a question. There is no question mark anywhere and very clear that manual operation is not possbile].

sorry if it confused you

Thanks.

VBScab's picture

...was supplied with Windows Server 2003 SP2. technet.microsoft.com/en-us/library/cc753525%28WS.10%29.aspx

@OP: I think your command line is failing because it's using the wrong format. Try:

%SystemRoot%\System32\ICacls.exe "%ProgramFiles%\ folder A \ folder B \ Folder Cache" /Grant Interactive:(m,wdac)

BTW, I recommend XCACLS or SetACL instead. Both use friendlier syntax and both can permission the registry as well as the file system using the same syntax.

Don't know why 'x' happened? Want to know why 'y' happened? Use ProcMon and it will tell you.
Think about using http://www.google.com before posting.

EdT's picture

Ian,
My recollection is that XCACLS.EXE is a file system permissioning tool only - no registry capabilities. Is there another version that does registry as well?

Lacks,
Yes, TRANSFORMS  must be in CAPS

If your issue has been solved, please use the "Mark as Solution" link on the most relevant thread.

VBScab's picture

Memory playing tricks again...I was sure that's what we used at Credit Suisse, precisely because it served both purposes. Perhaps it was a hacked in-house version (CS had many, many such tools...)

Anyway, I've long since converted to SetACL.

Don't know why 'x' happened? Want to know why 'y' happened? Use ProcMon and it will tell you.
Think about using http://www.google.com before posting.

EdT's picture

Would be interested where you sourced your version from??

If your issue has been solved, please use the "Mark as Solution" link on the most relevant thread.

VBScab's picture

sourceforge.net

Don't know why 'x' happened? Want to know why 'y' happened? Use ProcMon and it will tell you.
Think about using http://www.google.com before posting.

Lizzie's picture

stupid computer

How do I fix this thing?  I've tried scans with Symantec, Malwarebyte's, and CCleaner registry editor.  (Keep in mind I do not understand the nature of this problem).  Some people suggest disabling the notifications while others cry out no, it is only a symptom of a larger problem.  Another person suggested deleting any Image Path in the registry editor with any appearance of svchost.exe.  There are approximately 100 of them that look like the one cicled below.  I am not prepared to delete a bunch of files I don't understand.  The last thing I downloaded (other than that stupid registry cleaner) was a series of updates for Adobe CS4.  If it's an issue with updates, will the problem just fix itself as more updates are available?

Edit:  Got annoyed enough to follow the directions to disable the notifications, but it did not work.

EdT's picture

I don't quite understand why you have posted your issue in this forum, as it's absolutely nothing to do with Wise, but next time, may I suggest that you use GOOGLE to research your error messages.
Then you would quickly find links like this one:

http://forum.notebookreview.com/showthread.php?t=306788

which identify the error as being due to a printer driver issue, and suggest workarounds.
Randonly editing the registry when you don't know what you are doing is putting the integrity of your operating system at risk, so avoid the person who suggested this next time you have an issue.

If your issue has been solved, please use the "Mark as Solution" link on the most relevant thread.