Install msi package and force it to run or check

[larsjuhl]

Hi Guys,
Im installing an msi package (trend micro antivirus) on all workstations using a software package in a gpo linked to all workstations on computer level. all is fine but If I remove the application using eg. Add/remove programs or the trend micro console the application is ofcourse uninstalled.

My problem is that I want to make sure that the client/package is always installed after a reboot so if someone removes the application then it is forced installed again on reboot, anyone have an idea ?

Lars

 

[Ogi]

My scripts run the autocpp.exe program from the servers directory (\\Server\ofcscan\autopcc.exe) and this will reinstall and update the def files.

Hope this helps,
Carl.

 

[larsjuhl]

Hi Carl,
Thanks ! forgot to write that users do not have administrative rights on PC and as I can see using the autopcc.exe needs that ? an option could be to run the autopcc as computer startup script but it does not seem to work for me...
am i right here ?

thanks for fast reply Carl

 

[Ogi]

Isn't Trend installed with a password so a user can't unload it, mine is! I didn't set it up, inherited it.

Each time a user runs autocpp it only updates the engine/signature files so a normal user *should* be okay in running it. But I'm not 100% sure on that!

Carl.

 

[larsjuhl]

Hi Carl,
yeah the client needs password to uninstall but still this is a large installation and worst case senario must be looked at so if an admin by accident uninstalls the client (using the console manager) then I must prove that the client will be installed again.
Running autopcc also installs the client if not already installed and to install the program I need local admin rights unless its an msi file I could use evaleted privileges.
I tried running the msi file from a cmd file on computer level using msiexec but that runs every time PC boots so it takes too long.
I might have to live with this and scan the network every other day.
thanks
rgds
Lars