UAC Bypassing to install software SCCM

---

Hi,

I am installing a application that i want to run silently which i have the setup.ini configured to do. The only thing I havent figured out how to get around is the UAC. I have to say yes to the UAC Prompt and then it proceeds the install silently.

It is a msi file and i am testing it through the cmd line using the msiexec /i followed by the msi file. I want to add it to SCCM so it can run either in the software center or a task sequence without that prompt happening.

Any advice on how to get around that would be greatly appreicated.

Thanks.

Craig

@Craig-Lush ,

I'll see if Adam can shed some light on options from the SCCM side of things.

Microsoft has a great tool called Orca that is part of the Windows SDK.

https://docs.microsoft.com/en-us/windows/win32/msi/orca-exe
https://developer.microsoft.com/en-us/windows/downloads/windows-10-sdk/

Orca will allow you to examine the MSI installer, and see what switches and parameters are available for the MSI

Many MSI installers will accept things like:

Accept=yes
ACCEPTEULA = 1

or something similar. You might need to modify the MSI using Orca and add a switch to the install command.

Thanks for your help Mike. I will take a look into this.

Craig

@Craig-Lush Hi Mike, I tried with the Ocra but i dont know what property to change. I watched a tutorial on youtube on how to use orca and followed the instructions with no luck.

When i doubleclick the msi it dont give that prompt. However when i run it from the command line it does.

The command line is: msiexec /i filename.msi /qb I wonder if i am missing a switch in my command. I have attached the screenshot. If there is a way to powershell it i will go that option as well.

Thank you,

Craig

@Craig-Lush ,

Are you logged on as an admin when you double click the MSI? Are you running the CMD or PowerShell as administrator?

@Mike-Rodrick I am logged in with my credentials with a domain account. I am part of the administrators group. I am not running the cmd prompt as administrator.

I am sure that will work but how would i script that to open the command as administrator? I will look in SCCM to see if i can do that somehow.

Any suggestions on how to do that?

Craig

@Mike-Rodrick Hi Mike, I figured it out. I made the application in SCCM with the msi file and I had to specific to install it as system. That will get around the UAC.

Thanks for all you help on this topic. I am sure you will be hearing from me again with powershell cmds.

Thanks,

Craig

@Craig-Lush ,

Awesome, glad I could help!

There are more PowerShell shows in the works, so keep an eye out!