/build/static/layout/Breadcrumb_cap_w.png

Bypass UAC from VBScript deploying from SCCM

I am trying to deploy Microsoft's SyncToy which is a collection of 3 MSI files. When I create a simple vbs file to install all three silently and then try to push from SCCM to my Windows 7 clients, it does not install because UAC is enabled at its default level. Is there a way around this? Thanks

0 Comments   [ + ] Show comments

Answers (8)

Posted by: itolutions 13 years ago
Purple Belt
0
Do you deploy your package with "Run with user's rights"? Use "Run with Administrative rights".

VBScript should inherit enviroment of parent process (SCCM Agent with SYSTEM rights). 3 MSI should inherit VBScript enviroment if you are using "Shell.Run"
Posted by: bprobert 13 years ago
Senior Yellow Belt
0
I am using run with admin rights in SCCM, but still no go. The script is as follows..

====

Set WshShell = WScript.CreateObject("WScript.Shell")
Set objFSO = CreateObject("Scripting.FileSystemObject")
strScriptFileDirectory = objFSO.GetParentFolderName(wscript.ScriptFullName)

WshShell.Run "msiexec /i " & strScriptFileDirectory & "\1Synchronization-v2.0-x64-ENU.msi /q", 0, True

WshShell.Run "msiexec /i " & strScriptFileDirectory & "\2ProviderServices-v2.0-x64-ENU.msi /q", 0, True

WshShell.Run "msiexec /i " & strScriptFileDirectory & "\3SyncToySetup.msi /q", 0, True
Posted by: anonymous_9363 13 years ago
Red Belt
0
I don't get it...

Why would an SCCM-enabled site - implying locked-down desktops - have UAC enabled?
Posted by: bprobert 13 years ago
Senior Yellow Belt
0
the computers aren't locked down.
Posted by: itolutions 13 years ago
Purple Belt
0
For your enviroment you can try ShelLExecute with "runas":

Dim objShellApp: Set objShellApp = CreateObject("Shell.Application")


objShellApp.ShellExecute "myApplication.exe", "my arguments", "", "runas", 0
Posted by: pjgeutjens 13 years ago
Red Belt
0
what is the exact warning or error message you get when running these MSIs through SCCM? Did you see the UAC dialogs pop up during install or are you inferring the error cause from SCCM log files?
Posted by: anonymous_9363 13 years ago
Red Belt
0
...meaning that UAC is just as pointless in your environment so turn it off!
Posted by: bprobert 13 years ago
Senior Yellow Belt
0
I got it working. I had to make the following change to UAC through group policy on all the windows 7 computers. It defaults to "enabled" if you leave UAC as it is out the box. Thanks for the help guys.

EnableInstallerDetection User Account Control: Detect application installations and prompt for elevation 1 = Enabled (default for home) 0 = Disabled (default for enterprise)
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ