Privilege Elevation

[deep184]

Hello all!

Trying to get path-based elevation to function so that users who are not administrators can install software.

I enabled privilege elevation from global configuration and created a privilege elevation rule.

I created a path-based user-installed application rule and specified a network share that contains exe files for users to install.

During testing when I attempt to install a software I get the "you must be logged in as an administrator" error message.

Any help would be appreciated!

Thanks

[DEMdev]

Hi deep184​,

Can you show us how exactly you configured that setting for user-installed applications, and the relevant bit of the FlexEngine log file (at DEBUG log level) that shows that that configuration was applied?

[deep184]

Hello,

Elevation rule settings:

<?xml version="1.0" encoding="UTF-8"?>

-<userEnvironmentSettings>

<setting subType="path" elevationType="uia" elevate="\\Share\Software\*" type="privilegeElevation"/>

</userEnvironmentSettings>

FlexEngine log file

2017-06-02 07:20:00.711 [INFO ] Collected privilege elevation settings to apply for user-installed applications ('Software Repo.xml')

2017-06-02 07:20:00.711 [INFO ] Applied privilege elevation settings

2017-06-02 07:20:00.711 [DEBUG] Reloaded privilege elevation configuration

Thnaks for your help!

[ijdemes · Accepted solution]

Are you using the exact same path for executing the installation? If you configured FQDN in the path name, make sure you use it. Also make sure that you do not use a mapped drive to that path.

For instance, if you configured \\Share\Software , make sure you use \\Share\Software\install.exe

Did you enable child processes? If not, maybe the installer needs it.

I double checked in my LAB environment using your settings, and it works. I used the Notepad++ installer for the test.

[deep184]

Strange I was attempting to access the installers from a mapped drive.

Tried again as you suggested using the FQDN and I was able to successfully run installers located under \\Share\Software.

Thanks!