Archive

Posts Tagged ‘Software Distribution’

Installing Google Earth

The deployment of software packages through Active Directory software distribution, requires an MSI (Windows Installer) file. Adding this MSI file as a new package for software installation in a Group Policy Object (GPO)  in Active Directory is fairly straightforward.

However, some software products don’t seem to come as an MSI file, but rather as an EXE file. For these kind of software packages we need some extra steps before we are able to add it as a new package in a GPO.

An example of such a software product is Google Earth. Recently, I was asked to prepare a software distribution for this product. This turned out to be a perfect example of a software package that needs some additional work to get things going.

Preparing the installation folder

Google Earth is an example of a software product that does not come as an MSI file, but as an EXE file instead. Before we can create a new software distribution package in a GPO, we need to extract the MSI file that is contained in the EXE file first.

There are several ways to extract the MSI file and all other files required for the installation of Google Earth, but I prefer to use an Administrative Installation.

To perform an  Admin Installation of Google Earth we need to run the installation package GoogleEarthWin.exe with the /A parameter. During the Admin Installation you will be asked for a network location where the installation files should be copied to. I used the folder C:\Google\Earth_5.2 as an example, but you should enter a network folder here.

Google Earth 1

At the end of the installation wizard, uncheck the option to start Google Earth. Once the installation is finished the installation folder will contain two subfolders and one MSI file and will look similar to this:

Google Earth 2

Before we can add this MSI file to a software installation GPO, we will have to make some modifications to it. Otherwise we will get an error when adding the MSI file to the GPO:

Google Earth 3

Editing the Google Earth MSI file

To modify the MSI file, just open it in an MSI Editor. I always use ORCA for this purpose. You can obtain ORCA here.

Once ORCA is installed, just right click on the Google Earth.msi file and select Edit with Orca from the context menu. After the MSI file has been opened go to the View menu and select Summary Information. The information you will see now will look similar to this:

Google Earth 4

The problem with this MSI file is in the Languages field. This field contains multiple values separated by commas for different languages. Just remove the contents of this field and just enter the desired language id (i.e. 1033 for US English or 1043 for Dutch).

Now save the modified MSI file and try add it to the software distribution GPO again. The package should now be added to the GPO without any problems.

Advertisements

Issues uninstalling Java Runtime software

In small to mid-size environments I prefer to distribute all software using Active Directory and Group Policies. As soon as the computer is started, the software distribution policies will be applied and all assigned applications will be installed automatically.

When upgrading a software package to a more recent version I always select the option to remove the old version first and then install the updated version, instead of performing an in-place upgrade.

I have been using this method for quite some time and I haven’t had any problems, until now…

One of the software packages I generally install on all computers is the Sun (now Oracle) Java Runtime Environment. Previously I didn’t experience any problems while uninstalling this software, but lately the uninstall process takes forever (well, not literally) to complete.

During the software installation phase, the computer is “hanging” while uninstalling the current JRE. If you’re patient enough, the computer will eventually (after an hour or so) display the logon screen. When you log on to the computer you will not be presented with your familiar Windows desktop, but the computer seems to continue the uninstall process in the background.

Then finally, after a quite some time (again an hour or so), the user’s desktop will appear and suddenly it also becomes obvious why the uninstall process for the JRE took so damn long.

Problems uninstalling the Java Runtime Environment

In my experience there are two separate problems that can occur during the removal of the JRE software:

  • The uninstall process cannot continue because one of the files is in use.
  • The uninstall process cannot check the validity of the certificate used to sign a source file.

Fortunately there is a solution to both problems.

Problem #1: file is in use

When we finally manage to get the Windows desktop to show, it will display a dialog box which will indicate the file in use is jqs.exe. This file belongs to the Java Quick Starter service. During the boot sequence this service will be started before the uninstall process takes place. This results in the file being in use when uninstalling the Java JRE.

Simply disabling this service will allow the uninstall process to continue without any problems. This will slightly slow down starting Java applications, but this won’t be a big deal. On Windows Vista or above this service doesn’t have any benefits at all anyway (for more information check http://www.java.com/en/download/help/quickstarter.xml).

I have chosen to disable this service using a group policy that is applied to all computers:

GPO Java Quick Starter

Using the GPO editor, select Computer Configuration | Windows Settings | Security Settings | System Services and set the startup mode for the JavaQuickStarterService to disabled:

Disable jqs

Problem #2: error checking certificate

The second issue involves an error while checking the validity of a certain certificate used to sign one of the source files of the Java JRE. There are possibly multiple reasons for this problem to occur, but in our case it was proxy authentication. The uninstall process runs in the context of the local system account (NTAUTHORITY\SYSTEM) and this “user” cannot be authenticated by the proxy server.

The solution for this problem involves installing the certificate as “Trusted Publisher”. Once the Windows desktop has appeared a dialog box will popup after a few seconds. This dialog box will allow you to view the certificate and it will reveal it is intended for sjremetrics.java.com. Select the Details tab and click Copy To File. This will let you save the certificate as a .CER file.

When the certificate has been saved, open the GPO editor and navigate to Computer Configuration | Windows Settings | Security Settings | Software Restriction Policies | Additional Rules. Right click the right pane and select New Certificate Rule. Use the Browse button to select the saved certificate and set the security level to Unrestricted.

Certificate Rule

After the policy has been applied the certificate will be listed as “Trusted Publisher”.

Certificate