Using Softgrid MSIs Without Being An Admin
Monday, 10 March 2008 by Michel Roth
Recently Microsoft included a new feature into Softgrid that allows for OSD to be deployed as an MSI. This was done to optimize the integration with ESDs like SMS / SCCM. MSI do however require admin privileges. Or do they?

Ment van der Plas has found a way to work around the "limitations" of using an MSI to deploy a Softgrid application. By default, MSIs are secured in that msiexec checks whether or not the user installing the program is an admin. If not, the installation will fail. There are some other catches as well as Ment points out: 

Removing the Launch Condition
This is where msiexec checks whether or not you are an admin. What you need to do to disable this check is:
• Open the generated MSI with Orca and locate the LaunchCondition table
• Remove the row containing “Privileged”

Changing the ALLUSERS property
By default the MSI installs the package for all the users on the machine provided the user has administrative privileges. To change this behavior do the following:
• Locate the Property table
• Set the property ALLUSERS to 2

Editing the SFTMIME commands
Locate the CustomAction table in the MSI and edit the following CustomActions:
• SOFTGRID_ADD_PACKAGE; in the Target column remove the /GLOBAL parameter from the SFTMIME command.
• SOFTGRID_DELETE_PACKAGE; in the Target column remove the /GLOBAL parameter from the SFTMIME command

Change User permissions on the client
It's also needed to give the user some additional permissions in the Microsoft Application Virtualization Client Console (sftcmc.msc):
• Add applications
• Delete applications
• Unload applications from the cache  

Ment mentions (what a choice of words huh?) that this is of course not meant for production environments, something I very much second. I think it still pays to read Ment's entire article though. 


Related Items:

Thinstall Webinar (27 January 2008)
Softgrid Client 4.1 And 4.2 HotFix Rollup 1 Released (3 January 2008)
Quest vWorkspace Client for Mac (26 October 2009)
Quest vWorkspace Mac AppPortal Released (23 November 2009)
RoyalTS 1.5 Released! (18 September 2008)
PubForum Nice Coming Up (24 September 2008)
Inside the New Features of ObserveIT v4.08 (11 June 2009)
Wyse goes Android (16 December 2010)
Login Consultants Releases Updated Version Of Benchmarking Tool (25 September 2008)
Suggested Troubleshooting Tools for Citrix/TS environments (13 January 2010)
Comments (0)