Adobe Community: Flash Player deploy by GPO

Currently Being Moderated

1. eidnolb,

Aug 25, 2010 10:38 AM in reply to ACM-HLM

Report

Hi, I am not familiar with how GPO works exactly, but perhaps this site will be helpful. If I find another link, I'll post it.

http://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_gu ide.html

Perhaps another person will post that would be able to help more. All I could tell you would be Flash Player from a user to user basis.

Thanks,

eidnolb

|

Mark as:

Currently Being Moderated

2. jake.culley,

Aug 25, 2010 10:43 AM in reply to ACM-HLM

Report

Be sure that you are deploying the activex installer (IE) and not the plugin (Firefox).

|

Mark as:

Currently Being Moderated

3. ACM-HLM,

Aug 26, 2010 1:04 AM in reply to ACM-HLM

Report

Thanks for the help guys. However I've read the admin guide cover to cover, and it's definitely the ActiveX version... still doesn't work and has to be installed manually for every machine

|

Mark as:

Currently Being Moderated

4. Pat Willener,

Aug 26, 2010 2:32 AM in reply to ACM-HLM

Report

ACM-HLM wrote:

However it doesn't work.

Have you tried to diagnose one of the machines that was installed via GPO, e.g.

what files do you find in C:\Windows\system32\Macromed\Flash ?
what is the content of the FlashInstall.log file in that folder?
is the Flash object add-on enabled in IE ?
does the Flash animation show at http://www.adobe.com/software/flash/about/ ? (What about the version information under it?)

P.S. you know that the installer does not run if any browser or messenger windows are open?

|

Mark as:

Currently Being Moderated

5. ACM-HLM,

Sep 2, 2010 2:38 AM in reply to Pat Willener

Report

Sorry for the delayed response. I was waiting for another user to report this problem, and one did this morning.

- On her PC under c:\WINDOWS\system32\Macromed\Flash\ we see:

FlashPlayerTrust (folder)

Flash10h.ocx

Flash10i.ocx

FlasInstall.log

FlashUtil10i_ActiveX.dll

FlashUtil10i_ActiveX.exe

- The content of FlashInstall.log is as follows:

=O====== M/10.1.53.64 2010-07-14+08-03-38.633 ========

0000 [I] 00000010 "C:\WINDOWS\TEMP\InstallAX.exe" -install activex -msi

0001 [W] 00001037 SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX/ 2

0002 [I] 00000013 C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx

0003 [I] 00000015 C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe

0004 [I] 00000016 C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.dll

=X====== M/10.1.53.64 2010-07-14+08-03-59.636 ========

=O====== M/10.1.53.64 2010-08-19+08-13-57.322 ========

0000 [I] 00000010 "C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe" -update activex

0001 [I] 00000011 0

=X====== M/10.1.53.64 2010-08-19+08-14-38.939 ========

=O====== M/10.1.82.76 2010-08-19+08-14-39.179 ========

0000 [I] 00000010 "C:\DOCUME~1\CRICHA~1.006\LOCALS~1\Temp\1D.dir\InstallFlashPlayer.exe " -iv 0

0001 [W] 00001037 SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX/ 2

0002 [W] 00001015 C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx 5

0003 [I] 00000018

0004 [W] 00001015 C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx 5

0005 [I] 00000013 C:\WINDOWS\system32\Macromed\Flash\Flash10i.ocx

0006 [I] 00000015 C:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe

0007 [I] 00000016 C:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_ActiveX.dll

0008 [W] 00001032 C:\WINDOWS\system32\Macromed\Flash\Flash10i.ocx 80070005

0009 [I] 00000018

0010 [E] 00001032 C:\WINDOWS\system32\Macromed\Flash\Flash10i.ocx 80070005

=X====== M/10.1.82.76 2010-08-19+08-15-21.629 ========

- The flash object is enabled in IE

- When going to the Flash animation at the URL you gave, the animation does not show - there is simply a static image. However under version information: You have version 10,1,53,64 installed

This is a really bizzare problem that has happened on literally dozens of machines accross the company that I have deployed Flash to using GPO...

|

Mark as:

Currently Being Moderated

6. eidnolb,

Sep 2, 2010 7:42 AM in reply to ACM-HLM

Report

Hi, There is a problem in the Flash folder. The file "Flash10h.ocx" is indeed the previous version. This is confirmed by the test site that shows Flash Player version 10.1.53.64. That file needs deleted.

More importantly, the Flash Object in IE "Shockwave Flash Object" that you say is Enabled will also have a version number or it may say "Flash10h.ocx" or it may say "Flash10i.ocx. The latter is the latest version, 10.1.82.76 which is the correct version.

The Flash files are all correct (vs 10.1.82.76) EXCEPT that Flash10h.ocx. There is a conflict between the Flash Object in IE and the Flash files and that is because of the Flash10h.ocx. This is why you were not able to see the animation with the test site.

This P.S. that Pat posted is important since any browser opened or any application that uses Flash prevents all "old" Flash files from being Uninstalled, to wit:

P.S. you know that the installer does not run if any browser or messenger windows are open?

I hope this helps explain why Flash Player is not working properly. However, I don't know how it is rectified with GPO.

If this were just one computer, I would just advise to go to the Flash folder, right click on that Flash10h.ocx and Delete it.

How that is done under GPO, I don't know. But if the Flash Object in IE is vs 10.1.82.76, that would solve the problem.

eidnolb

|

Mark as:

Currently Being Moderated

7. ACM-HLM,

Sep 8, 2010 4:14 AM in reply to eidnolb

Report

Thanks eidnolb. Your post has been very helpful.

Since your last post another 7 or 8 users have had this problem. All have Flash10h.ocx in the C:\Windows\system32\Macromed\Flash directory along with Flash10i.ocx. The problem is I can't delete Flash10h.ocx - I get an access denied message even when logged on as Administrator and with no other processes running. I've even used Process Explorer to search for any handles on Flash10h.ocx - there are none - but I still can't delete it.

Your point about running the installer when other programmes are running - this is not an issue. Group Policy software distribution automatically background installs software on the client machines during bootup, before anyone can log on. So I don't see how anything can be running already...

I'm not sure how to proceed with this. You'd think that Adobe would have scripted the MSI they provide for large-scale distribution so that it uninstalls previous versions of Flash player before running the install of the new version...?

|

Mark as:

Currently Being Moderated

8. eidnolb,

Sep 8, 2010 8:58 AM in reply to ACM-HLM

Report

Hello again, Thanks for explaining about how the GPO works. I am sure that the MSI does indeed Uninstall all previous versions before Installing the new version. What Anti-Virus program do you use? I would think that this would/could block the Install of that. I recall another thread that they were having a very similar problem and finally traced it to McAfee Security and had to make some type of adjustment with that program.

What Flash Player version number is the Flash Object add on in IE? I can tell you that most likely the Flash10h.ocx was Uninstalled and for some reason the Flash10i.ocx Flash Object was not able to be Installed. And the Installer, being prevented to Install the Flash10i.ocx, "quits" and leaves in place the previous, which is the Flash10h.ocx. Just guessing, but I would say the Flash Object (Shockwave Flash Object) is version Flash10h.ocx.

On the forum here, this happens all of the time and the Anti-Virus programs must be considered and taken into account and I have to work around them to prevent them from blocking the Install of that ActiveX Control.

I would certainly take a look at your Anti-Virus program. That is one of the first things I inquire about when helping users on the forum.

I hope this helps and if I can find that other thread, I'll post it.

Thanks,

eidnolb

|

Mark as:

Currently Being Moderated

9. eidnolb,

Sep 8, 2010 9:05 AM in reply to ACM-HLM

Report

Hi, I found that thread that I mentioned in my Post#8, take a look. His solution is what I wanted you to see.

http://forums.adobe.com/message/2948151#2948151

Hope it helps.

Thanks,

eidnolb

|

Mark as:

Currently Being Moderated

10. ACM-HLM,

Sep 8, 2010 9:15 AM in reply to eidnolb

Report

Thanks for all your help. I think you may be on to something.

We use Sophos Anti-Virus Enterprise. I'll have a look and see if I can exclude processes:

InstallAX.exe

FlashUtil10h.exe

Uninstall_flash_player.exe

from the on-access scanning as the poster in the other thread did - then re-deploy Flash, and report back.

|

Mark as:

Currently Being Moderated

11. ACM-HLM,

Sep 9, 2010 8:47 AM in reply to ACM-HLM

Report

OK...I've been in to our Sophos Enterprise Console and added exceptions for Flash Player as above to our on-access scanning profile settings, as shown here:

I waited for these settings to take affect and re-deployed Flash Player using Group Policy.

The installation completed successfully as per the events logged on a PC I tested this afternoon:

Changes to software installation settings were applied successfully.

The reinstall of application Adobe Flash Player 10 ActiveX from policy London Software succeeded.

Product: Adobe Flash Player 10 ActiveX -- Configuration completed successfully.

However, it hasn't worked. Despite claiming to have installed successfully, Flash10h.ocx is still there - I can't delete it - and Flash Player doesn't work.

|

Mark as:

Currently Being Moderated

12. eidnolb,

Sep 9, 2010 10:32 AM in reply to ACM-HLM

Report

Hi, thanks for the screenshot and latest information. I have sent a PM to someone here and hope they will be able to assist you. I have another idea, but have to be out for awhile and will see about that as soon as I return.

It appears that for some reason, something is blocking the Install. I have no doubt that the FlashUtil10h.exe is being Uninstalled, but I don't know what is blocking the Install of the vs 10.1.82.76.

Thanks,

eidnolb

|

Mark as:

Currently Being Moderated

13. eidnolb,

Sep 9, 2010 3:00 PM in reply to ACM-HLM

Report

Hi, I reviewed your thread and also the thread that I linked to above for you. And I am going to copy and paste here parts of that other thread and then my comments in bold:

The Access Protection - Anti-Spyware Standard Protection module was causing the executables (when installing) to NOT accessing specific parts of the registry to complete the installation.I think what he is saying here is that the Anti-Virus was not allowing certain executables to write to the Windows Registry.

I've had to make the following changes to my McAfee policies in order to allow the Adobe Flash Player Active X Control to install successfully.

InstallAX.exe

FlashUtil10h.exe

Uninstall_flash_player.exe

You might be able to make similar changes to your environment if you're using another product.

Processess to exclude:- He then made changes per the above, and in effect is changing the AV, to allow these 3 processes to write to the Windows Registry, as they were excluded before(hence the failure of the Install) The Installer must write to certain Windows Registries. SEE LINK BELOW FOR ALL WINDOWS REGISTRIES THAT IS USED WHEN INSTALLING FLASH PLAYER. BY ***

Now I'm going to your screenshot and comment. I do not know what this means: (copy & paste)

I've been in to our Sophos Enterprise Console and added exceptions for Flash Player as above to our on-access scanning profile settings, as shown here:

I don't understand what the "on-access scanning profile settings" means. That is one thing. Second in the screenshot, it shows specific items that are not to be scanned. Does this mean the same thing is being accomplished that the other thread was by allowing those 3 executables to write to the Windows Registry? Just asking so we are on the same page in what you are trying to accomplish with the items in the screenshot. Scanning to me may be completely different than what it means to you.

I am so out of my comfort zone as you can tell, but I'm just trying to help you since no one else is here right now.

You used Process Explorer and didn't find any handles for FlashUtil10h.exe. You would not find that in Process Explorer to the best of my knowledge and understanding. All Flash files are Installed in the Flash folder (System32). Flash Player is a browser plugin and works thru the browser, which is that ActiveX Control and it works with the Flash files every time you need to view Flash content, videos, etc. It is not a process that runs, like say your Anti-Virus or Internet Explorer. I just use the Task Manager for my Desktop to see what processes are running and I can check it as soon as I boot up, to see what processes are loading at start up.

At this point, do you know how many machines still have this FlashUtil10h.exe in the Flash folder? I don't know why you can't use the Administrator Account and right click on that file and Delete it. I would just guess that is a privilege that comes under Group Policy Settings. That would most likely be the IT Department(if that is you, I apologize:-)

LINK FROM ABOVE*** http://kb2.adobe.com/cps/191/tn_19166.html

The list of the Windows Registries are almost at the bottom.

Hopefully you will have an answer soon.

Thanks,

eidnolb P.S. I don't know how that paragraph was placed at the end of my post, but I corrected it.

Message was edited by: eidnolb To correct placement of paragraph. and add P.S.

|

Mark as:

Currently Being Moderated

14. ACM-HLM,

Sep 10, 2010 2:03 AM in reply to eidnolb

Report

Regarding your point about our Anti-Virus. I’m still investigating where/how you can prevent Sophos from blocking those processes writing to the registry. I believe that the ‘On-Access scan profile’ is what does this. I cannot find anything else in Sophos that would prevent changes being made to the Windows registry – we install around 15 software packages through Group Policy to around 250 machines company-wide, all install properly except Flash Player (and without making any changes to our Anti-Virus settings)

I can remove the Flash10h.ocx manually by removing all the permissions, taking ownership, removing the read-only attribute and then deleting (see screenshot)

***N.B. the example user shown here has Firefox as well as Internet Explorer

After deleting Flash10h.ocx, if the user now goes to the Flash test page using Internet Explorer (http://www.adobe.com/software/flash/about/) instead of seeing the static image at the top and a version number on the right, they are now prompted with the yellow information bar prompting them to install the Flash plugin. This is no good as users don’t have permission to install software themselves (hence the reason to deploy Flash Player using Group Policy)

|

Mark as:

Currently Being Moderated

15. Pat Willener,

Sep 10, 2010 9:18 AM in reply to ACM-HLM

Report

Sorry, I will not be able to provide any additional help until I return from Europe by the end of next week.

If I were in your situation, I would probably try to contact Adobe Support. (I know that Adobe Support is not famous for its efficiency, but maybe they have some more knowledge about deploying Flash Player using GPO.)

|

Mark as:

Currently Being Moderated

16. eidnolb,

Sep 10, 2010 9:31 AM in reply to Pat Willener

Report

Hi Pat!! Thanks for checking in. Hope you are enjoying your vacation:-)

Maybe your suggestion will be the next step. I've searched for many answered threads on the issue that they are having, but they are varied and don't want to suggest a solution that isn't exactly the same they are having. I certainly don't intend to add to their problems.

Regards,

eidnolb

|

Mark as:

Currently Being Moderated

17. ChefRhino,

Sep 13, 2010 4:25 PM in reply to ACM-HLM

Report

Having the same issue, I am a sys admin at a +300 company and we use Symantec Endpoint Protection. Problem started for us mid week last week. Had a rash of people saying that the browser was telling them that Flash was not installed even though it was and had been for some time. So, I made sure we had the most current msi and re-deployed the GPO. Now instead of a handful of people not having Flash working, the entire company is broken. What a mess!! Please tell me there is a (re)deployable answer for this - not going from PC to PC.

Thanks.

|

Mark as:

Currently Being Moderated

18. grangeway2,

Sep 16, 2010 2:09 AM in reply to ACM-HLM

Report

Same sort of thing here - sophos/ gpo - redeploy - app seems to deploy successfully

installax.exe logs show:

=O====== M/10.1.82.76 2010-09-08+16-20-16.260 ========
0000 [I] 00000010 "C:\WINDOWS\TEMP\InstallAX.exe" -install activex -msi
0001 [W] 00001037 SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX/ 2
0002 [I] 00000013 C:\WINDOWS\system32\Macromed\Flash\Flash10i.ocx
0003 [I] 00000015 C:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe
0004 [I] 00000016 C:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_ActiveX.dll
=X====== M/10.1.82.76 2010-09-08+16-20-17.377 ========

However, what i'm finding is the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-44 4553540000} does not exist/get created

Having said that it's kind of mixed - when we push out a flash player update, we get some PC's work, some not work ;/

I've just been looking at one pc where i've tried manually running the flash player update (after gpo deployment), and get the following:

MSI (s) (70:C8) [09:51:47:864]: Note: 1: 2753 2: InstallAX.exe
Info 2835.The control ErrorIcon was not found on dialog SetupError.
Error 2753.The File 'InstallAX.exe' is not marked for installation.
MSI (s) (70:C8) [09:51:51:468]: Product: Adobe Flash Player 10 ActiveX -- Error 2753.The File 'InstallAX.exe' is not marked for installation.

Looking at procmon.exe output %temp% points to c:\documents and settings, and the msi installer tries to open install.exe from that location where the file doesn't exist.

In c:\windows\temp there was what looked to be an *old* version of installax.exe - however, deleting that makes no difference to the other error. In the end in this case, hade to use the MSI cleanup utility to nuke the MSI registry entries for flash and rerun the installer.

Only other referene to installas.exe in the msi log is:

MSI (s) (70:C8) [09:51:47:253]: Feature: FlashPlayerAXInstaller; Installed: Advertise;   Request: Absent;   Action: Absent
MSI (s) (70:C8) [09:51:47:253]: Component: __ISRegistryComponent65; Installed: Null;   Request: Null;   Action: Null
MSI (s) (70:C8) [09:51:47:253]: Component: ISRegistryComponent; Installed: Absent;   Request: Null;   Action: Null
MSI (s) (70:C8) [09:51:47:253]: Component: InstallAX.exe; Installed: Absent;   Request: Null;   Action: Null

|

Mark as:

Currently Being Moderated

19. dpolishsensation,

Sep 16, 2010 5:36 AM in reply to grangeway2

Report

We are having the same exact issue here (see my other thread here http://forums.adobe.com/thread/718387?tstart=0). Adobe Flash 10.0.45.2 was installed and now we are getting users reporting that it doesn't work though it is installed. We are now upgrading to 10.1.87.56 and I'm concerned this will happen again. Adobe support wasn't much help at all. I contacted them about four times this week with different answers every time. I sent them the log file below and they said it doesn't really tell them much (go figure).

Adobe Flash Player 10.0.45.2 failed installed:

List of files under C:\WINDOWS\system32\Macromed\Flash:

mms.cfg

KB923789.inf

FlashInstall.log

Contents of FlashInstall.log:

=O====== M/10.1.82.76 2010-09-14+12-38-19.239 ========
0000 [I] 00000010 "C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe" /RegServer
=X====== M/10.1.82.76 2010-09-14+12-38-21.708 ========

=O====== M/10.1.82.76 2010-09-14+12-38-25.474 ========
0000 [I] 00000010 "C:\WINDOWS\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe" /RegServer
=X====== M/10.1.82.76 2010-09-14+12-38-31.755 ========

=O====== M/10.1.82.76 2010-09-14+12-51-43.578 ========
0000 [I] 00000010 "C:\WINDOWS\Downloaded Program Files\CONFLICT.2\FP_AX_CAB_INSTALLER.exe" /RegServer
=X====== M/10.1.82.76 2010-09-14+12-51-45.750 ========

=O====== M/10.1.82.76 2010-09-14+12-51-49.406 ========
0000 [I] 00000010 "C:\WINDOWS\Downloaded Program Files\CONFLICT.3\FP_AX_CAB_INSTALLER.exe" /RegServer
=X====== M/10.1.82.76 2010-09-14+12-51-53.187 ========

=O====== M/10.1.82.76 2010-09-14+12-52-48.641 ========
0000 [I] 00000010 "C:\WINDOWS\Downloaded Program Files\CONFLICT.4\FP_AX_CAB_INSTALLER.exe" /RegServer
=X====== M/10.1.82.76 2010-09-14+12-52-51.844 ========

=O====== M/10.1.82.76 2010-09-14+12-52-55.657 ========
0000 [I] 00000010 "C:\WINDOWS\Downloaded Program Files\CONFLICT.5\FP_AX_CAB_INSTALLER.exe" /RegServer
=X====== M/10.1.82.76 2010-09-14+12-53-01.235 ========

|

Mark as:

Currently Being Moderated

20. dpolishsensation,

Sep 16, 2010 8:35 AM in reply to dpolishsensation

Report

Spoke with our system admin who manages our A/V and he provided me with the log below. It looks like our Access Protection rule is not currently enforced to block the flash installer.

9/14/2010               8:38:18 AM             Would be blocked by Access Protection rule (rule is currently not enforced)      BLIZCORP\tfinley              C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe             Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder            Action blocked : Execute
9/14/2010               8:38:25 AM             Would be blocked by Access Protection rule (rule is currently not enforced)      BLIZCORP\tfinley              C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
9/14/2010               8:51:43 AM             Would be blocked by Access Protection rule (rule is currently not enforced)      BLIZCORP\tfinley               C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\Downloaded Program Files\CONFLICT.2\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
9/14/2010               8:51:49 AM             Would be blocked by Access Protection rule (rule is currently not enforced)      BLIZCORP\tfinley                C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\Downloaded Program Files\CONFLICT.3\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
9/14/2010               8:52:48 AM             Would be blocked by Access Protection rule (rule is currently not enforced)      BLIZCORP\tfinley              C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\Downloaded Program Files\CONFLICT.4\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
9/14/2010               8:52:55 AM             Would be blocked by Access Protection rule (rule is currently not enforced)      BLIZCORP\tfinley               C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\Downloaded Program Files\CONFLICT.5\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
9/16/2010               9:18:27 AM             Would be blocked by Access Protection rule (rule is currently not enforced)      BLIZCORP\tfinley             C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\Downloaded Program Files\CONFLICT.6\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
9/16/2010               9:18:45 AM             Would be blocked by Access Protection rule (rule is currently not enforced)      BLIZCORP\tfinley               C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\Downloaded Program Files\CONFLICT.7\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
9/16/2010               9:19:57 AM             Would be blocked by Access Protection rule (rule is currently not enforced)      BLIZCORP\tfinley               C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\Downloaded Program Files\CONFLICT.8\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute

|

Mark as:

Currently Being Moderated

21. eidnolb,

Sep 16, 2010 12:42 PM in reply to dpolishsensation

Report

Hi dp, That log looks fine. The only thing I can't get past is that the Flash files are not Installed per that post, old version or current version. Just none at all. Something is blocking the Installation but what we don't know yet. Your efforts have shown that the AV can be ruled out. What about the Registry? Sometimes users are missing certain Windows Registry keys that the Flash Player Installer needs to write to or they have been corrupted. You can take a look at them here at this site. You'll need to page down about 3/4 of the way to "Common errors with Flash Player 10.1 Installation"(in red text). Then below that you'll see the list. http://kb2.adobe.com/cps/191/tn_19166.html

I don't remember if I posted this on the other thread or not, but I'll include it here.

http://www.adobe.com/devnet/flashplayer/enterprise_deployment.html

I cannot believe that Adobe Support for the use of GPO regarding Flash Player cannot help in this. Just working with users here on the Flash Forum can become somewhat troublesome, but at least I have my procedure to follow. How this translates over to the GPO I'm not sure.

More threads are popping up about this issue and or others are posting to threads already established.

Regards,

eidnolb

|

Mark as:

Currently Being Moderated

22. ACM-HLM,

Sep 21, 2010 3:37 AM in reply to ACM-HLM

Report

Just a thought. I wonder if using Group Policy to manually set the permissions of the c:\windows\system32\macromed\flash folder to give Full Control to Everyone would allow the MSI installer to delete flash10h.ocx during the course of it's installation (as this file has deny permissions preventing it from being deleted by default)?

|

Mark as:

Currently Being Moderated

23. dpolishsensation,

Sep 21, 2010 5:42 AM in reply to ACM-HLM

Report

We're actually not deploying via group policy but Altiris. Regardless, I've been deploying it the same way every month or so for the last couple years (as the patches are released by Adobe) and this is the first time I've seen this. If it is a permissions issue, I wish Adobe would step up and tell us that they have changed the way the latest installer works and that is what's causing the issue. Support is horrendous on the forums and on the phone (except for community that posts on these forums which is great). Has anyone trying installing regmon to monitor what is going on with the install/uninstall? I might have to give that a try...

|

Mark as:

Currently Being Moderated

24. grangeway2,

Sep 21, 2010 7:05 AM in reply to dpolishsensation

Report

I knocked up a quick powershell script to compare the permissions on registry keys/files system to what adobe 'fix' - however, it's probably also a good indication of state of registry after a (failed) gpo install. i.e. in short, permissions look ok, and lack of errors would suggest no corruption.

In terms of registry monitor - i've done a procmon on bootup - out of a million+ line log file, there's no ACCESS DENIED errors being generated by msiexec - so I'm assuming it's either finding or missing a file/registry entry that's causing it to go down a wrong path...

Wondering at the moment whether to give up on deplying via GPO, and look at using a powershell script in a computer start up script (hence the work below)

PS C:\foo> .\audit.ps1
Checking Flash File Permissions...
BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash
NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash
BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashPlayerTrust
NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashPlayerTrust
BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx
NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx
BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashAuthor.cfg
NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashAuthor.cfg
BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashInstall.log
NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashInstall.log
BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.dll
NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.dll
BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe
NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe
BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashPlayerTrust\AcrobatConnect.cf g
NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashPlayerTrust\AcrobatConnect.cf g
Checking Flash Registry Permissions...
WARNING: HKCR:\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2} does not exist
WARNING: HKCR:\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000} does not exist
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}\Inproc Server32
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}\Inproc Server32
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}\Progra mmable
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}\Progra mmable
WARNING: HKCR:\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4} does not exist
WARNING: HKCR:\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9} does not exist
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\ 0
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\ 0
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\ 0\win32
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\ 0\win32
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\ FLAGS
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\ FLAGS
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\ HELPDIR
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\ HELPDIR
WARNING: HKCR:\.spl does not exist
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\.swf
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\.swf
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\.swf\OpenWithList
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\.swf\OpenWithList
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\.swf\OpenWithList\IExplore.exe
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\.swf\OpenWithList\IExplore.exe
WARNING: HKCR:\.mfp does not exist
WARNING: HKCR:\.sol does not exist
WARNING: HKCR:\.sor does not exist
WARNING: HKCR:\FlashFactory.FlashFactory does not exist
WARNING: HKCR:\FlashFactory.FlashFactory.1 does not exist
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp\CurVer
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp\CurVer
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp.1
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp.1
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp.1\CLSID
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp.1\CLSID
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\DefaultIcon
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\DefaultIcon
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell\open
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell\open
BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell\open\command
NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell\open\command
WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.1 does not exist
WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.3 does not exist
WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.4 does not exist
WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.5 does not exist
WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.6 does not exist
WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.7 does not exist
WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.8 does not exist
WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.9 does not exist
WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.10 does not exist
WARNING: HKCR:\MacromediaFlashPaper.MacromediaFlashPaper does not exist
WARNING: HKCR:\MIME\Database\Content Type\application/futuresplash does not exist
WARNING: HKCR:\MIME\Database\Content Type\application/x-shockwave-flash does not exist
BUILTIN\Administrators has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash
NT AUTHORITY\SYSTEM has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash
BUILTIN\Administrators has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\Def aultIcon
NT AUTHORITY\SYSTEM has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\Def aultIcon
BUILTIN\Administrators has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\she ll
NT AUTHORITY\SYSTEM has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\she ll
BUILTIN\Administrators has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\she ll\open
NT AUTHORITY\SYSTEM has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\she ll\open
BUILTIN\Administrators has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\she ll\open\command
NT AUTHORITY\SYSTEM has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\she ll\open\command
WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1 does not exist
WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3 does not exist
WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4 does not exist
WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5 does not exist
WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6 does not exist
WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7 does not exist
WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8 does not exist
WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.9 does not exist
WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10 does not exist
WARNING: HKLM:\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000} does not exist

|

Mark as:

Currently Being Moderated

25. grangeway2,

Sep 23, 2010 3:39 AM in reply to grangeway2

Report

In case this might help someone else - I've now given up with installing flash via GPO, and decided to try

to install via a vbscript computer start up script that I knocked together this morning. In case it might help someone else, copy is included below:

Basically - put msizap.exe from windows installer sdk + the adodb flash uninstaller/msi file in the directory (strNetworkPath)

Script then does the following:

1) Calls adobe's uninstaller exe in silent mode to clean up what adobe can - then what it leaves behind we do ourselves:

2) removes c:\windows\temp\installax.exe if it exists

3) searches for and deletes from registry any Managed applications references containing (Adobe Flash Player 10 ActiveX) - in our case, i've already told GPO's to remove flash player - so it's erroring on uninstall at the moment)

4) Search for any installed msi applications called 'adobe flash player 10 activex' and runs MSIZAP on them ( seems adobe uninstaller doesn't completely remove the local msi references ;/)

5) copies MSI down frmo network to windows temp

6) msiexec /qb msi

7) delete the msi file

Sub InstallFlashPlayer()
    ' Network Path to:
    ' msizap.exe
    ' flash installer
    ' flash uninstaller
    strNetworkPath = "\\path\to\flash"

    strFlashVersion = "flash10k.ocx"
    strTempFolder = "C:\WINDOWS\temp"
    strFlashMSI = "install_flash_player_10_1_85_3_active_x.msi"

On Error Resume Next
Set WshShell = WScript.CreateObject("WScript.Shell")

    Set fso = WScript.CreateObject("Scripting.FileSystemObject")
    file1 = fso.FileExists ("C:\WINDOWS\system32\Macromed\Flash\" & strFlashVersion)
    if file1 = true then exit sub

WshShell.Run strNetworkPath & "\uninstall_flash_player.exe -uninstall",7, true

file1 = fso.FileExists (strTempFolder & "\installax.exe")
if file1 = true then fso.DeleteFile strTempFolder & "\installax.exe"

Const HKEY_LOCAL_MACHINE = &H80000002

    strComputer = "."

    Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _
        strComputer & "\root\default:StdRegProv")

    strKeyPath = "SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt"
    oReg.EnumKey HKEY_LOCAL_MACHINE, strKeyPath, arrSubKeys

    For Each subkey In arrSubKeys
strName = WshShell.RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curre ntVersion\Group Policy\AppMgmt\" & subkey & "\Deployment Name")
        Select Case Err
            Case 0:
                ' Key successfully read
                If strname = "Adobe Flash Player 10 ActiveX" Then
                    strProduct = WshShell.RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curre ntVersion\Group Policy\AppMgmt\" & subkey & "\Product ID")
                    'Error Handling if any? - resume next
      WshShell.RegDelete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt\" & subkey & "\"
      WshShell.RegDelete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt\" & strProduct
                End If
           Case Else:
               ' Some error - skip
               Err.clear
        End Select
    Next

Dim installer : Set installer = Nothing
Set installer = Wscript.CreateObject("WindowsInstaller.Installer") : CheckError

Dim product, products, info, productList, version
On Error Resume Next
Set products = installer.Products : CheckError
For Each product In products
guid = product
                name = installer.ProductInfo(product, "ProductName") : CheckError
if name = "Adobe Flash Player 10 ActiveX" Then
                    WshShell.Run strNetworkPath & "\MsiZap.Exe TWA! " & guid, 7, true
                    WshShell.Run strNetworkPath & "\MsiZap.Exe TW! " & guid, 7, true
                end if
Next
Set products = Nothing

fso.CopyFile strNetworkPath & "\" & strFlashMSI, strTempFolder & "\" & strFlashMSI, true

WshShell.Run "C:\WINDOWS\system32\msiexec.exe /I """ & strTempFolder & "\" &strFlashMSI & """ /qb-!", 7, true

fso.DeleteFile strTempFolder & "\" & strFlashMSI
On Error Goto 0
End Sub

Sub CheckError
Dim message, errRec
If Err = 0 Then Exit Sub
message = Err.Source & " " & Hex(Err) & ": " & Err.Description
If Not installer Is Nothing Then
Set errRec = installer.LastErrorRecord
If Not errRec Is Nothing Then message = message & vbNewLine & errRec.FormatText
End If
Wscript.Echo message
Wscript.Quit 2
End Sub

InstallFlashPlayer

|

Mark as:

Currently Being Moderated

26. VS_Phil,

Sep 23, 2010 5:59 AM in reply to grangeway2

Report

I found this thread about the 2753 error: http://www.eggheadcafe.com/software/aspnet/34942057/q-reason-for-error -2753-the-file-2-is-not-marked-for-installation.aspx and I think the remark about wrong file versions points in the right direction.

The key file for the installation appears to be InstallAX.exe which resides in the %temp% folder during and after installation. In my case the version of that file did not match the flash version assigned by GPO, in fact it was newer (probably due to some update performed locally). As soon as I put the old version from the installation share back into the temp folder the uninstall worked.

Please consider that %temp% points to different locations for the system account (which is used for GPO deployment) and for a logged on user when you are testing your deployment.

|

Mark as:

Currently Being Moderated

27. in_the_uk,

Sep 27, 2010 5:57 AM in reply to VS_Phil

Report

This may or may not be of use to anyone, and I'm still not sure what the overall cause is. However, I managed to get 10.1.85.3 to install from MSI after having it fail. The machine is running Windows 7 Business 64 bit It is on a domain and both variants of the flash player (activex and plugin) are deployed to it via Group Policy. It had 10.1.82.76 installed and I was trying to upgrade to 10.1.85.3 In between, I had installed the Flash Player Square 64bit beta release (1.2.something) GPO deployment failed to install with a typically meaningless error message. Double clicking the .MSI file gave ""the file 'installax.exe' is not marked for installation" (or installplugin.exe for the plugin version). The same when running msiexec /i <msi fie> under an administrative cmd.exe prompt. Uninstalling all 3 versions of Flash player (activex, plugin and 64bit) did not help. Removing installax.exe and installplugin.exe from c:\windows\temp did not help. Copying installax.exe from a machine which had successfully upgraded (A 32bit XP Pro box) did not help. Installing v10.1.82.76 via MSI and then installing v10.1.85.3 via MSI worked. I have no idea which if any of the previous steps helped the latter succeed.

Message was edited by: in_the_uk Use HTML entities

|

Mark as:

Currently Being Moderated

28. NetVicious,

Sep 27, 2010 8:12 AM in reply to ACM-HLM

Report

When you created the GPO what type of install you selected: publish or assign.

Publish: Publish it on the Add/Remove programs for *MANUAL* installation.

Assign: Install it on every machine of the related GPO.

If you see it on the Add/Remove Programs I'm sure you selected Publish.

|

Mark as:

Currently Being Moderated

29. in_the_uk,

Sep 27, 2010 8:28 AM in reply to NetVicious

Report

NetVicious wrote, sometime around 27/09/10 16:12:

When you created the GPO what type of install you selected: publish or assign.

>

Publish: Publish it on the Add/Remove programs for MANUAL installation.
Assign: Install it on every machine of the related GPO.

>

If you see it on the Add/Remove Programs I'm sure you selected Publish.

They were both Assigned

Software installed via GPO still shows up in add/remove programs in my

experience.

--

Russell Howe, IT Department <systems@bmtmarinerisk.com>

BMT Marine & Offshore Surveys Ltd

|

Mark as:

Currently Being Moderated

30. dpolishsensation,

Sep 27, 2010 8:30 AM in reply to in_the_uk

Report

I don't think this is a GPO issue personally as we are deploying using Altiris and having the same exact issues. I'm curious to the admins that are seeing this problem, what anti-virus are you using?

|

Mark as:

Currently Being Moderated

31. in_the_uk,

Sep 27, 2010 8:44 AM in reply to dpolishsensation

Report

dpolishsensation wrote, sometime around 27/09/10 16:30:

I don't think this is a GPO issue personally as we are deploying using Altiris and having the same exact issues. I'm curious to the admins that are seeing this problem, what anti-virus are you using?

On the machine which had the problem - no AV other than Windows Defender

and the Malicious Code Removal Tool.

On the machines which worked fine, AVG.

--

Russell Howe, IT Department <systems@bmtmarinerisk.com>

BMT Marine & Offshore Surveys Ltd

|

Mark as:

Currently Being Moderated

32. NetVicious,

Sep 27, 2010 8:52 AM in reply to in_the_uk

Report

I refer to the "Add new programs" section of the Add/Remove Programs in Windows XP.

If we are talking about one upgrade:

Well the 10.1.82 MSI had problems in the uninstaller https://bugs.adobe.com/jira/browse/FP-5218

I'm having the same problem with it in my network, it doesn't upgrades by the 10.1.85 because the uninstaller of this version it's wrong

If we are talking about first installation within a GPO, remember this:

- The GPO should be in the computer section. If you put it on the user section and your users doesn't are administrators (or they have rights) of his computer it won't install.

- The MSI of the installation should be accesible for every computer of the network. Use a shared folder of a server or place it on the netlogon folder of the DCs (on this case use the domain trick instead of the name of one or the DCS \\domain\netlogon\installs or whatever you want). Remember you need to access to the MSI file on the DC server when you are configuring the GPO in the same way the computers should do, on this case using the URN.

- Remember to assign the correct rights to the path and to the MSI file. If you're using a computer GPO the account that will be used to access it's the computer account (nor the user account). You need to add the account "Domain Computers" (remember to press Object Type button and add the "Computers" group after clicking of the check button).

With this tips you the MSIs should install correctly if there it's no other problem related to the bad uninstaller of the 10.1.82 MSI

|

Mark as:

Currently Being Moderated

33. in_the_uk,

Sep 27, 2010 8:57 AM in reply to NetVicious

Report

NetVicious wrote, sometime around 27/09/10 16:52:

I refer to the "Add new programs" section of the Add/Remove Programs in Windows XP.

>

If we are talking about one upgrade:

>

Well the 10.1.82 MSI had problems in the uninstaller https://bugs.adobe.com/jira/browse/FP-5218

>

I'm having the same problem with it in my network, it doesn't upgrades by the 10.1.85 because the uninstaller of this version it's wrong

This may well be the issue, although it appears to have worked on all

other computers (XP 32bit, Vista Business x64, Win7 Pro x64) apart from

this one as far as I can tell.

I suspect the issue was caused by the manual installation of the 64bit

beta flash player, but I can't prove it.

--

Russell Howe, IT Department <systems@bmtmarinerisk.com>

BMT Marine & Offshore Surveys Ltd

|

Mark as:

Currently Being Moderated

34. loverand friend,

Sep 27, 2010 10:44 AM in reply to ACM-HLM

Report

why its so hard to get Flash Player Downloads

|

Mark as:

Currently Being Moderated

35. MCSEPackager,

Oct 6, 2010 5:01 AM in reply to grangeway2

Report

I also had the 2753 error, indicating the .exe file was not marked for installation. In my instance I had 2 problems, one was that the install was running as an upgrade rather than a fresh install as I had expected (an uninstall should have run first) and the other was, my transform was not being used. When I resolved these issues the problem went away. For an upgrade install we had previously identified that the NewCustomAction1 Action needed to be conditioned "Not REMOVE" instead of "Not Installed" and the transform needed to keep the same name as the previous transform. We also had to remove the cached transform.

I was running the .msi which incidentally is available here: http://www.adobe.com/products/flashplayer/fp_distribution3.html. (someone was complaining it was difficult to find).

With a silent install and no transform, AgreeToLicense is set to NO, so that may have some bearing on why the file does not get marked for install resulting in the 2753 error (sorry no time to test this).

|

Mark as:

Currently Being Moderated

36. Wimmerd1986,

Feb 10, 2011 2:51 AM in reply to ACM-HLM

Report

Had the same problem as described by the TP; the solution that worked for me was this bit from above:

- Remember to assign the correct rights to the path and to the MSI file. If you're using a computer GPO the account that will be used to access it's the computer account (nor the user account). You need to add the account "Domain Computers" (remember to press Object Type button and add the "Computers" group after clicking of the check button).

Thanks to eveyrone that contributed to this!

|

Mark as:

Currently Being Moderated

37. AZCathy,

Feb 16, 2011 8:00 AM in reply to Wimmerd1986

Report

I'm seeing the same thing -- Flash Player (Active X) GPO deployment failing. The local computer log error shows "cannot find the specified file". The problem seems to be the msi available via the distribution site. I was unable to install using this msi even when I copied the downloaded file to a client and attempted installation locally. When I tried to install on the client the message was "Error 2753: The File 'InstallAX.exe' is not marked for installation."

The problem is NOT rights or or the failure to use a network path in the GPO as an installation point.

The fact that the msi couldn't even successfully install when copied to a client indicates that the msi is the problem.

Has anyone made a successful install using the msi installer available through the distribution site?

|

Mark as:

Currently Being Moderated

38. NetVicious,

Feb 17, 2011 12:45 AM in reply to AZCathy

Report

The problem it's the installer needs to uninstall the previous version first. For the uninstallation it needs the .exe of the old version. If you deleted it or you uses always the same name for the installer it will fail to uninstall and it won't install the new version.

I tried to uninstall using the flash player uninstaller [1] and in the next boot the new flash player was successfuly installed within the GPO.

[1] http://kb2.adobe.com/cps/141/tn_14157.html

|

Mark as:

Currently Being Moderated

39. AZCathy,

Feb 17, 2011 8:52 AM in reply to NetVicious

Report

Thank you for the link; manually uninstalling the old version before installing the new version solves the problem. I was able to run the install both locally and via GPO once it the old version was removed (locally) from those computers. 2 down, 97 to go . . .

There has to be a way I can remove the old version via GPO! Half my machines are laptops and very hard to get hands on to do manual uninstalls. I need to be able to do all of this via AD deployment.

|

Mark as:

Using Flash Player

Flash Player deploy by GPO - not working

Aug 25, 2010 4:47 AM

More Like This

Bookmarked By (0)

Answers + Points = Status