Skip navigation
Currently Being Moderated

Adobe reader 10.1 AutoUpdate without administrative privileges

Sep 27, 2011 3:46 AM

Tags: #update #distribution #deploy #reader


If I install Adobe Reader 10.1 for windows 7 manually, then standard user without administrative rights can use autoapdate. If I install it through Group Policy or SCCM, then standard users should enter admin's password. How can I install Adobe Reader automatically and that it doesn't demand administrator's password from standard users?

  • Currently Being Moderated
    Sep 28, 2011 7:54 AM   in reply to sch1024


    While you are installing through Group policy, there's an option of "Always install with elevated privileges". Please ensure that the option is being checked. You can find that option under,

    1. Edit the Policy, where you have created the package

    2. "Group Policy Management Editor" opens up

    3. Navigate to Computer Configuration > Policies > Administrative Template > Windows Components > Windows Installer

    4. On the right pane, there's a setting called "Always install with elevated provileges"

    5. Double click on it and select the "Enabled" option and Click on "Ok"


    Hope, it helps.

    Mark as:
  • Currently Being Moderated
    Sep 29, 2011 12:26 AM   in reply to sch1024


    I think I got your point. There are two things to it.

    A. While we have Reader 10.1 installed manually and we see that standard users can auto update to 10.1.1 without elevation prompt. It's becuase the patch is an MSP and and if it's certificates matches with the installed MSI, it does not ask for elevation.


    B. Whereas in case of pushing patch via GPO. We create AIP (i.e. the package) for 10.1.1. And the patch we push is actually an MSI. So MSI installation on a standard users would always ask for elevation.


    I have tried to install 10.1 MSI on a standard user also 10.1.1 AIP on a standard user, in both the cases, it asked me for admin credentials.


    So the underlying reasoning behind the two different behavior is MSP vs MSI.

    Mark as:
  • Currently Being Moderated
    Sep 29, 2011 3:46 AM   in reply to sch1024

    Well, Let me rephrase, so you want to push the Reader 10.1 via GPO and then afterwards you want the users machines get updated automatically. i.e. Post 10.1, you want the users to receive updates via (Help>Check for updates) silent update and not via GPO. Am I right?


    If this is the case, am not sure if this is an supported scenario, because you are installing an AIP first and then the next updates are coming from an Non AIP installation. As far as I know, if we have deployed any patch via GPO then the next updates must be pushed via GPO only. Since, their underlying technology is AIP. We should not be mixing both the ways of installation.


    I do not think, there's any solution available for your problem via GPO right now. Though I would like to see your Cust Wizard option once. But what I can suggest you to resolve the issue with SCCM (if possible)

    Mark as:
  • Currently Being Moderated
    Apr 13, 2012 10:08 AM   in reply to sch1024

    @sch1024: Did you ever solve this problem?

    I had the same idea, my goal was to install 10.1.0 on all clients and then let them autoupdate themselves.

    Unfortunately this doesn't work because the users (no admin rights) get the update icon and then have to enter the admin password :-(.


    I tried to deploy the original 10.1.0 msi file via Powershell script (no AIP!) but the result is the same, no silent update...

    Mark as:

More Like This

  • Retrieving data ...

Bookmarked By (0)

Answers + Points = Status

  • 10 points awarded for Correct Answers
  • 5 points awarded for Helpful Answers
  • 10,000+ points
  • 1,001-10,000 points
  • 501-1,000 points
  • 5-500 points