myITforum.com Community Forum myITforum.com Community Forum

Home  Forums  Blogs  Live Support chat  Search Articles  Wiki  FAQ  Email Lists  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Photo Gallery  Member List  Search  Calendars  FAQ  Ticket List  Log Out

All Forums RSS Feed Subscription:


  


Sccmservice account

 
View related threads: (in this forum | in all forums)

Logged in as: Guest
  Printable Version
All Forums >> [Management Products] >> System Center Products >> System Center Configuration Manager >> Sccmservice account Page: [1]
Login
Message << Older Topic   Newer Topic >>
Sccmservice account - 8/28/2008 7:31:49 PM   
darklord12

 

Posts: 49
Score: 0
Joined: 7/23/2008
Status: offline 		I try to deploy this app to a few computers in a specialized area in my hospital.  Local Users and Groups in this area is configured different from other areas in that admin groups on these computer do not have sccmservice account added as member.  Although advertisement status reports as successful, when I remote into the computer, I don't see the app gets installed.  I am guessing it has to do with sccmservice account not added to the admin groups.  Does sccmservice account need to be added to the local admin group in order for software push to be successful?  I thought SCCM uses the SCCM system account as admin to install the app...  Any explaination would be much appreciated.

< Message edited by darklord12 -- 8/28/2008 7:38:35 PM >
Post #: 1
RE: Sccmservice account - 8/28/2008 8:41:54 PM   
jsandys


Posts: 551
Score: 17
Joined: 3/24/2005
From: San Antonio, TX
Status: offline 		You are correct in that ConfigMgr does not use a service account for software installation; there is no service account whatsoever to be found in ConfigMgr.  Where did you look for the application?  Many poorly written application installers do not add shortcuts to the All Users Start Menu.  Is the install an MSI?  If so, youi may have to force it to install for all users by adding ALLUSERS=2 onto the msiexec ommand-line (once again the result of a poorly designed msi).  Sometimes, the installer is just a wrapper for another installer which quicks off requiring user intervention but the inital installer exits successfully.  There are a lot of these scenarios to possibly investigate and they are all 100% dependant on the installer.  Please provide more information about the installer for this application.

_____________________________

Jason
________________________________________
http://myitforum.com/cs2/blogs/jsandys/default.aspx

(in reply to darklord12)
Post #: 2
RE: Sccmservice account - 8/28/2008 9:31:28 PM   
darklord12

 

Posts: 49
Score: 0
Joined: 7/23/2008
Status: offline 		This is not a msi install.  I pushed this out using comand line and installshield switches in a batch file.  I verified that the app didn't get installed by going to the control panel - add/remove programs. I recently pushed this app out to around 1400 machines and it went smoothly with only a two failures.  I'll look into this some more and probably will post question later if I am stuck.  I am glad I got it clear that sccmservice user account or any admin user account is not needed for the software push.  Thanks for the response.

< Message edited by darklord12 -- 8/28/2008 9:35:37 PM >

(in reply to jsandys)
Post #: 3
RE: Sccmservice account - 8/29/2008 8:53:11 AM   
gjones


Posts: 844
Score: 50
Joined: 6/5/2001
From: Ottawa, Ontario, Canada
Status: offline
quote:

ORIGINAL: darklord12
Does sccmservice account need to be added to the local admin group in order for software push to be successful?  I thought SCCM uses the SCCM system account as admin to install the app...  Any explaination would be much appreciated.


Nope it does not. It use the Local System account to install the application, or the User account depending on how you setup the package/advert.

_____________________________

Garth@enhansoft.com

For a List of my Articles
http://www.myitforum.com/contrib/default.asp?cid=116
Blogs:
http://smsug.ca/blogs/garth_jones/default.aspx
http://myitforum.com/cs2/blogs/gjones/default.aspx


(in reply to darklord12)
Post #: 4
RE: Sccmservice account - 8/29/2008 8:56:54 AM   
gjones


Posts: 844
Score: 50
Joined: 6/5/2001
From: Ottawa, Ontario, Canada
Status: offline 		Remember with batch files that the local system account CAN’T connect off to a remote system. Therefore you need a connection account or the batch file written a particulate way to have it work with ConfigMgr or SMS.

What does your batch look like?

_____________________________

Garth@enhansoft.com

For a List of my Articles
http://www.myitforum.com/contrib/default.asp?cid=116
Blogs:
http://smsug.ca/blogs/garth_jones/default.aspx
http://myitforum.com/cs2/blogs/gjones/default.aspx


(in reply to darklord12)
Post #: 5
RE: Sccmservice account - 8/29/2008 2:46:11 PM   
darklord12

 

Posts: 49
Score: 0
Joined: 7/23/2008
Status: offline 		This is what it looks like:

@ECHO off 
SETLOCAL
SET THISDIR=%~dps0
echo Installing PACS...
%THISDIR%setup.exe /s /f1%THISDIR%pacs.iss
EXIT 0

I check the local cache and I see that the package is downloaded.  I tried to run the batch file from there, it appears to be running but the program didn't get installed after the batch file finished running.  However, if I launch the original setup.exe from there then the program gets installed successfully.  I have another longer version of this batch file where I remove the older version, delete the reg key, install the app and copy the ini file.  This longer version works great on 1000+ computers.  This batch is shorter because it's a fresh installation - the machines that I push to never had the app install.  It is unlikely that something is wrong with the batch file because I've tested this batch file on several computers and it worked.  However the machines that I tested on have the same image as 1000+ computers I pushed to.  The computers in this area have a slightly different image, but they are still members of the same domain.

< Message edited by darklord12 -- 8/29/2008 3:02:37 PM >

(in reply to gjones)
Post #: 6
RE: Sccmservice account - 8/29/2008 2:51:40 PM   
jnelson993


Posts: 925
Score: 127
Joined: 2/18/2005
From: Minneapolis, MN
Status: offline 		It can't be wrong, you're using my code :)

Hmm, maybe try quotes around the /f1 parameter...it SHOULDN'T matter because you're using %~dps0 which is the short path so there shouldn't be spaces in it, but perhaps there's something else it doesn't like. 

@ECHO off 
SETLOCAL
SET THISDIR=%~dps0
echo Installing PACS From %THISDIR%...
%THISDIR%setup.exe /s /f1"%THISDIR%pacs.iss"
EXIT 0

_____________________________

Number2 (John Nelson)
MyITForum - Blog
MyITForum - Forum Posts

(in reply to darklord12)
Post #: 7
RE: Sccmservice account - 8/29/2008 3:04:14 PM   
gjones


Posts: 844
Score: 50
Joined: 6/5/2001
From: Ottawa, Ontario, Canada
Status: offline 		There is nothing too this batch file, so why use it at all?

Why not have the use the command line within the program properties instead? This is only adding a level of complexity that is not needed.


_____________________________

Garth@enhansoft.com

For a List of my Articles
http://www.myitforum.com/contrib/default.asp?cid=116
Blogs:
http://smsug.ca/blogs/garth_jones/default.aspx
http://myitforum.com/cs2/blogs/gjones/default.aspx


(in reply to darklord12)
Post #: 8
RE: Sccmservice account - 8/29/2008 3:10:40 PM   
darklord12

 

Posts: 49
Score: 0
Joined: 7/23/2008
Status: offline 		Can you elaborate on this?  The reason I use this batch file is because I want to run the program silently by using the answer file .iss

(in reply to gjones)
Post #: 9
RE: Sccmservice account - 8/29/2008 3:21:48 PM   
hcortez463


Posts: 785
Score: 63
Joined: 4/8/2005
Status: offline 		the wonderfull world of medical apps.. I feel yoru paint.. Try this script..  copy and save as vbs.  Depending on your app, you might need to check the option to run with
admin rigths, user rights and allow user to interact with program under the program settings


On Error Resume Next
'strComputer = "."
set sho = Wscript.CreateObject("Wscript.Shell")
strCurrentDir = Left(Wscript.ScriptFullName, (InstrRev(Wscript.ScriptFullName, "\") -1)) & "\"
strCommandToRun = chr(34) & strCurrentDir & "setup.exe" & chr(34) & " /s /f1" & chr(34) & strcurrentdir & "xxxxx.iss" & chr(34)
intret = sho.run(strCommandToRun,0,True)
wscript.quit(intret)


_____________________________

If it Helps, Please rate....

(in reply to darklord12)
Post #: 10
RE: Sccmservice account - 8/29/2008 3:46:51 PM   
gjones


Posts: 844
Score: 50
Joined: 6/5/2001
From: Ottawa, Ontario, Canada
Status: offline
so type the command line in the program properties, see http://smsug.ca/blogs/garth_jones/archive/2008/08/29/configmgr-command-line.aspx. You can even change the “run” option to hidden too. By default all programs will look in the local directory for any files it needs.

_____________________________

Garth@enhansoft.com

For a List of my Articles
http://www.myitforum.com/contrib/default.asp?cid=116
Blogs:
http://smsug.ca/blogs/garth_jones/default.aspx
http://myitforum.com/cs2/blogs/gjones/default.aspx


(in reply to darklord12)
Post #: 11
RE: Sccmservice account - 8/29/2008 3:56:04 PM   
hcortez463


Posts: 785
Score: 63
Joined: 4/8/2005
Status: offline 		Garth is the man. so yeah what he said to.. :)

_____________________________

If it Helps, Please rate....

(in reply to gjones)
Post #: 12
RE: Sccmservice account - 8/29/2008 4:12:01 PM   
darklord12

 

Posts: 49
Score: 0
Joined: 7/23/2008
Status: offline 		The vbscript works fine just like the orginal batch file on all the computers, but when I tried to run it on the computers in the ER area, the app didn't get installed.  Computers in ER are autouser machines that use one generic login, but I don't think it has anything to do with the fail install.  I checked the execmgr log and the program return an exit code 0.  I'll try GJones's suggestion and see what happen.

< Message edited by darklord12 -- 8/29/2008 4:15:07 PM >

(in reply to hcortez463)
Post #: 13
RE: Sccmservice account - 8/29/2008 4:14:34 PM   
hcortez463


Posts: 785
Score: 63
Joined: 4/8/2005
Status: offline 		so if you run it manually it does work?  did you check interact with user setting?

_____________________________

If it Helps, Please rate....

(in reply to darklord12)
Post #: 14
RE: Sccmservice account - 8/29/2008 4:28:29 PM   
darklord12

 

Posts: 49
Score: 0
Joined: 7/23/2008
Status: offline 		This is weird.  So I download the package to the target computer and run setup.exe /s /f1pacs.iss via the command line and the app doesn't get installed.  But if I just run setup.exe and interact with program, then the install works. 

(in reply to hcortez463)
Post #: 15
RE: Sccmservice account - 8/29/2008 4:31:27 PM   
hcortez463


Posts: 785
Score: 63
Joined: 4/8/2005
Status: offline 		take the /s switch out and see what the error is.

_____________________________

If it Helps, Please rate....

(in reply to darklord12)
Post #: 16
RE: Sccmservice account - 8/29/2008 6:15:26 PM   
darklord12

 

Posts: 49
Score: 0
Joined: 7/23/2008
Status: offline 		If I take the /s switch out, then the program runs in the interactive mode just like when I run setup.exe, no error reported, program gets installed, so the /f1 does not do anything without the /s switch.  But if I insert the /s switch back to make it a silent install then the program fails to install.  I even re-created the iss file using /r switch but that doesn't help either. 

(in reply to hcortez463)
Post #: 17
RE: Sccmservice account - 8/30/2008 10:14:22 PM   
darklord12

 

Posts: 49
Score: 0
Joined: 7/23/2008
Status: offline 		I generate a log file using /f2 switch while running the silent install and get a return code of -3, which means Install failed - required data not in response file.  But I really don't think that the response file is invalid because like I mentioned earlier that it worked flawlessly on 1000+ computer except on the computers in this particular ER OU.  I looked at the ER OU in AD and notice that that there are a handful of GPs applied to it including disabling registry..., but since I don't have right to view it, I can't say for certain that the GP affects the silent install. I looked at execmgr and see the following msg - don't know if it has anything to do with the fail silent install. 

Failed to open to WMI namespace '\\.\root\ccm\Policy\Machine' (80004002) execmgr 8/28/2008 5:13:41 PM 2876 (0x0B3C)
Failed to ConnectSettings for ICcmPolicyAgent in CSoftDistPolicyNamespace::ConnectToNamespace execmgr 8/28/2008 5:13:41 PM 2876 (0x0B3C)
Failed to ConnectToNamespace in CSoftDistPolicyNamespace::GetMachinePolicy execmgr 8/28/2008 5:13:41 PM 2876 (0x0B3C)
Failed to connect to machine policy name space. 0x80004002 execmgr 8/28/2008 5:13:41 PM 2876 (0x0B3C)
Failed to connect to user policy name space execmgr 8/28/2008 5:13:41 PM 2876 (0x0B3C)
CSoftwareDistPolicyMgr::GetSWDistSiteSettings failed to connect to machine namespace execmgr 8/28/2008 5:13:41 PM 2876 (0x0B3C)
Failed to instantiate UI Server {C2F23AE4-82D8-456F-A4AF-A2655D8CA726} with error 8000401a execmgr 8/28/2008 5:13:41 PM 2876 (0x0B3C)
Failed to instantiate UI Server 2 {E8425D59-451B-4978-A2AB-641470EB7C02} with error 8000401a execmgr 8/28/2008 5:13:41 PM 2876 (0x0B3C)
Failed to instantiate Updates UI Server {2D023958-73D0-4542-8AD6-9A507364F70E} with error 8000401a execmgr 8/28/2008 5:13:41 PM 2876 (0x0B3C)
The logged on user is VALLEYMED\khanhl execmgr 8/29/2008 12:55:58 PM 2548 (0x09F4)

< Message edited by darklord12 -- 8/30/2008 10:17:18 PM >

(in reply to darklord12)
Post #: 18
Page:   [1]
All Forums >> [Management Products] >> System Center Products >> System Center Configuration Manager >> Sccmservice account Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts



  
Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI

0.469