Client Management Suite

We are in our testing phase moving from Altiris 6.9SP4 to Altiris 7.1 and ran into a stumbling block for software deployment. I've been doing some research, but cannot seem to find anyone else experiencing this problem.

For security reasons the computers at our location have the Default UAC level, so we made sure to set up the computers in our test environment for Altiris 7.1 to same UAC level. I have an MSI package that as it installs it extracts another MSI in a temp location, and then tries to install this MSI packagealso during the installation. UAC consistently blocks this MSI package from installing and the job fails. If I disable UAC completely, the job will complete as it should.

I asked our server administrators to make sure the group policy settings are exactly the same in our test network as our production network, and this has not resolved the issue. I've also rechecked all our permissions and made sure the correct accounts have the needed access, but still no success.

The only way this job will complete in our test network running Altiris 7.1 is if UAC is disabled on the machine, but we don't have this problem with Altiris 3.69SP4. For security reasons we would also like to keep the UAC level set as Default.

Has anybody else experienced this? What did you change to resolve the issue?

Hello,

May I ask you to verify that this MSI can be installed on the problematic client with UAC enabled from CMD by using the same commandline which has selected in the policy?

Also an additional question:

Has your nested msi(msi from msi) the property "ALLUSERS=1"  for execution?

Regards,

Dmitri

What MSI are you using?  Have you tried using AeXNSC.exe instead?

Installing the Altiris Agent using AeXNSC.exe:
http://www.symantec.com/docs/HOWTO2852

I actually ended up using AltirisAgentInstSvc.exe and PsExec.exe along with the attached vb script.  

The advantage I found to using AltirisAgentInstSvc.exe is that it automatically downloads whatever the latest agent is from the NS, and throttles the download as well.

edit: Oh and I found that it only seemed to run properly from the \netlogon share.  I'm not a GP expert, so I'm not sure why.

Attachment(s)

AltirisAgent_0.txt   5 KB 1 version

Thank you for all the input. We actually found out that we had a buried permissions issue that was causing this problem.

However, having this issue did lead us to look into the Software Catalog and Package Delivery more. After some research and learning the new setup, we might decide to go down this route instead of just trying to push scripts.

Thanks again for the assistance.