Microsoft KB Archive/262638

= User Must Be the Local (Domain) Administrator to Deploy .msi Package in GPO =

PSS ID Number: 262638

Article Last Modified on 11/4/2003

-

The information in this article applies to:


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server

-



This article was previously published under Q262638



SYMPTOMS
When you give a user permission to edit a Group Policy object (GPO), they cannot deploy an .msi package to that GPO.



CAUSE
This problem can occur because the Application Deployment Editor (ADE) is trying to get product name or locale information from the registry. The ADE needs to perform an MsiOpenPackage function. This call requires the same rights that are needed to install a program.



RESOLUTION
To resolve this problem, give the user either local Administrative rights to the computer or give the user Domain Administrator rights.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
The user has rights to edit or change all other aspects of the GPO but cannot deploy an .msi package at the user or computer level. If the client administration tools are installed on the local computer, the only rights that are needed are Local Administrator to the box.

Keywords: kbenv kbnetwork kbpending kbprb KB262638

Technology: kbwin2000AdvServ kbwin2000AdvServSearch kbwin2000Search kbwin2000Serv kbwin2000ServSearch kbWinAdvServSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.