/build/static/layout/Breadcrumb_cap_w.png

Uninstall problem - System account needs admin right

We have recently removed local admin from all users and are now in the process of removing unapproved software from users PC's. The users installed the software themselves whilst they had local admin.

We use SMS2003 as our deployment tool.

I use the following command line (in an .exe file so that SMS can run it) to uninstall a package. This was taken from the registry and then modified with a response file so that it can run silently.

"C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe" /M{3CB41017-F5CA-4C56-934C-ED02156251E6} /s /f1"c:\windows\uninstall.iss" (Under testing I have removed the /s so that I can see any error messages)

The problem is that when I run this .exe file from SMS it runs with SYSTEM rights. The package has a check in it to check if the account that is running it has admin rights. The SYSTEM account doesn't have local admin and I get the message "You do not have sufficient privileges... Please log on as an administrator."

The SYSTEM account has enough rights to uninstall, the problem is the package has a check built into it to check for admin rights.

Does anyone have any ideas on how I can get around this?

0 Comments   [ + ] Show comments

Answers (3)

Posted by: sirclive 19 years ago
Senior Yellow Belt
0
Hi..

I don't use SMS, so forgive me if this is gibberish - I'll just say how I remotely install things. I use a KIX script, combined with PSEXEC.

You could have a BAT file with your uninstall syntax, copy it over to a folder on the remote workstation (the one you want to uninstall the app), and run it from a workstation/server using
PSEXEC -s -d \\workstation -u username -p password pathtobatchfile.bat

where -u and -p are optional extras if the user running the psexec is NOT an administrator of the target workstation.

SO for example, you would have something like..

XCOPY "uninstall_driver.bat" "\\workstation\c$\temp"
PSEXEC -s -d -u Administrator -p Adminpass c:\temp\uninstall_driver.bat

(-u and -p wouldn't be needed if the user ID running this script had Admin rights on the target workstation)

I hope this makes some kind of sense? I'm not terribly good at explaining my thought processes :-)

I also apologise if this isn't anything close to the answer you were looking for.

Cheers,
Gerard
Posted by: Bladerun 19 years ago
Green Belt
0
Are you dropping the response file on the machine, or is it already there when you run this command?

Usually necessary permissions are set there.


Also, why is the account SMS uses on all machines not a local admin? It would save you numerous headaches.
Posted by: auroauro 19 years ago
Yellow Belt
0
I have the same SMS 2003 problem during a package installation (BlackBerry Desktop Software 4.0) if the user haven't admin right.

I'm not sure if it could help because I can't try this fix:
http://support.microsoft.com/?scid=kb;en-us;831198&spid=2890&sid=529
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ