question

BatmanJohn-5715 avatar image
0 Votes"
BatmanJohn-5715 asked EricTreater-8637 answered

Installing INF by app via company portal. Admin creds being prompted.

Turning down UAC then installing INF.

Write-Host "Disabling UAC"
Set-ItemProperty -Path “HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System” -Name “FilterAdministratorToken” -Value “0”;
Set-ItemProperty -Path “HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System” -Name “EnableUIADesktopToggle” -Value “0”;
Set-ItemProperty -Path “HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System” -Name “EnableSecureUIAPaths” -Value “0”;
Set-ItemProperty -Path “HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System” -Name “EnableLUA” -Value “0”;
Set-ItemProperty -Path “HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System” -Name “ConsentPromptBehaviorAdmin” -Value “0”;
Set-ItemProperty -Path “HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System” -Name “ConsentPromptBehaviorUser” -Value “0”;


Start-Process -filePath C:\Install\drivers\printers\ricoh\RicohMP3555\disk1\oemsetup.inf -Verb Install -ArgumentList "/S /v /qn"

24641-2020-09-10-19-17-09.png


mem-intune-application-management
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

EricTreater-8637 avatar image
0 Votes"
EricTreater-8637 answered

I think you're right on. PSEXEC with the -s switch and the UNC path says access is denied. my machines are not AD joined, they're enrolled in AAD/Intune/Autopilot, so they're not happy accessing UNC.

I'm going to start down the Copy--Execute--Delete road.

Thanks for the suggestions

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.