How to allow program updates without prompting UAC?

Posted by Ryan Mortier on Server Fault See other posts from Server Fault or by Ryan Mortier
Published on 2013-03-06T17:29:06Z Indexed on 2013/06/25 10:23 UTC
Read the original article Hit count: 317

We have about 15-20 users who have this software installed.

We have UAC enabled through GPO as you should, which means the software prompts for admin approval if a standard user trys to install it. Thats fine, they can call the help desk to have the software installed.

My problem is, our help desk is being bombarded every day because users can't update the software and there are updates almost every day which is prompting UAC.

Using procmon.exe to find out where it was trying to write to, I then created a GPO to allow file permission access to the program files folder for this particular software, including the program data folder, but it still prompts for admin approval. It seems as though that the software is using msiexec.exe to run a .msp patch file.

The only "ACCESS DENIED"s I can still see in procmon is things like this:

procmon log

What can I possibly do to stop this software from prompting UAC with admin password credentials aside from disabling UAC?

© Server Fault or respective owner

Related posts about Windows

Related posts about group-policy