Allow non-admin to update and install apps

[Hulk]

We created a package for Creative Cloud Desktop app in the Admin Console and enabled "Allow non-admin to update and install apps". This was deployed to machines and Non-admin users were able to install the apps they required. An update then came out for Creative Cloud Desktop app. When users launched the Desktop app it started updating. It got to 2% then bought up a UAC prompt. Our non-admin users were unable to enter creds that worked so the update failed and desktop app wouldn't launch.
To stop the desktop app from trying to update on it's own we added SelfUpdate false into the ServiceConfig.xml file. This stopped desktop app from trying to update but then when users tried to install apps from the apps panel it started bringing up a UAC prompt. 

Does anyone know of a reliable way to get Creative Cloud working for non-admin users? We're currently deploying version 5.0.0.354 to users. 

[SuJoshi]

The option "Allow non-admin to update and install apps" allows the users to install and update CC apps using the desktop app and to install the creative cloud update, we always recommend the admins to enable UAC on the user's machine as update/upgrade and installation requires admin/elevated privileges. You can enable the "SelfServeInstalls" option in "serviceconfig.xml" file which allows the users to upgrade the creative cloud apps.

[Hulk]

Yes that's what we read that option should do, that's why we enabled it. But it doesn't seem to be working. From what I've seen enabling that option adds "SelfServeInstalls" option in "serviceconfig.xml". I can confirm that option is in there. UAC is enabled, we will not be disabling this. 

Our issue is even when all these options are set it still doesn't allow our non-admins to update and install apps. 

[SuJoshi]

Please confirm the version of the creative cloud app installed on the user's machine right now.

[Hulk]

Version 5.0.0.354

[SuJoshi]

The latest version of the creative cloud is 5.0.0.354 so ideally they should not get any prompt to update the application.

[Hulk]

We had 4.9.0.515 on the machines, this is the one that was prompting for an update when Creative Cloud Desktop was launched. 

We added SelfUpdate false into the ServiceConfig.xml file to stop this from updating.

Then we pushed out 5.0.0.354. We left SelfUpdate false in the ServiceConfig.xml file because we dont want it to start prompting again when the next version comes out.

We've tested with both versions and users are getting the UAC prompt trying to install apps from the panel. 

[SuJoshi]

Kindly confirm if "SelfServeInstalls" option in "serviceconfig.xml" is enabled or disabled. If possible to share the screenshot of the prompt the users are getting.

[Hulk]

This is the prompt users are getting.

And this is our current ServiceConfig.xml. "SelfServeInstalls" is true.

[SuJoshi]

Kindly give read/write permission to Adobe folder from this location and check if you are still getting the prompt: C:\Program Files (x86)\Common Files\Adobe.

If the issue persists, kindly create a support case so that our support agent can check the settings and details over a remote session.

[Hulk]

I gave the Users group full control over C:\Program Files (x86)\Common Files\Adobe and it's still bringing up the UAC prompt and not letting them install the applications.

We actually already have a support case open with adobe. I spoke to 5 different people and their responses varried from:

Person 1 - "to be honest with you, the customisation, oyu are expecting, works only in case of Enterprise licenses
you own a team license"

Person 2 - "i am sorry but the feature you are looking for is not a part of team plan"

Person 3 - "So, that restriction is different then option you are referring to .
"allow non-admins to update and install apps" , this option only allow end user's to see application panel in desktop application. So, they can update application
However, if user machine is restricted with admin rights. You may grant all adobe folder with admin rights on your end"

Person 4 - Said that 1 & 2 were incorrect about it being an enterprise license only feature and tried to troubleshoot the issue with us by getting us to use the old installable packager which created a package of version 4.9.0.515, this installed then tried to update straight away which bought up the UAC prompt, when it was cancelled because the user we were testing with did not have admin rights it hung at 2%.

Person 5 - Gave me various articles on how to make our users admins.

[SuJoshi]

Kindly share the case number which you have created against this issue.

[Hulk]

Case# ADB-11444924-J1S6

[SuJoshi · Accepted solution]

Thank you for sharing the case number. I reviewed it and checked with the tech and got the following response: "We educated the customer to check the group policy as non-admins can install the software but until windows installer has permission we cannot install anything on the system". 

The case is still open and awaiting your response. If the issue is still unresolved, so kindly contact our support team by replying to the email which you receive from Adobe related to the above case or can initiate the chat session, click on the chat icon on the bottom right corner of this page: https://helpx.adobe.com/support.html. 

[Alexander29605169ubq8]

I know this post is a couple years old. But is there an official work around to allow adobe apps to update without admin rights?

[SuJoshi]

Hi @Alexander29605169ubq8 If you create a managed package from the admin console and check the option "Allow non-admin to update and install apps", it allows the users to install and update CC apps without admin rights however, for updating the Creative Cloud Desktop app itself, they need admin rights.

[Alexander29605169ubq8]

I have created several packages and they have failed each time regardless of where I run them. As admin, Locally remotely via CLI etc. 

Also I found this on the package deployment support pages. 

Can some one at adobe provide another avenue for a solution? 

[Abambo]

Did you try on a fresh machine, without old software (leftovers)?

[Alexander29605169ubq8]

Yes It has been tried on a fresh machine. The adobe package will not run in any way shape or form without admi intervention. Hopefully someone here can point me to another viable solution. Or can adobe support reach 

[Alexander29605169ubq8]

out with another route. I have tried it on a freshly deployed image, a fresh VM and a new workstation that has never been in our enviornment. It seems like the package maker is dead. 

[SLSadm2]

I'm also having this issue and am happy to see this thread is still alive. When I launch CC's update dialogue, I make sure to enable 'Keep Adobe updated automatically" which prompts for UAC. After I've logged into UAC with my admin account, the app should no longer prompt my end users to update Creative Cloud or at least not require admin rights to update. With the frequency of updates Adobe pushes out, it's not sustainable to require admins approve each one on each workstation.

[SLSadm2]

There's another thread discussing this issue. One user created a new blank package, confirming it's set to allow end users to manage their own apps, but it still prompts for admin credentials when trying to install or update Adobe apps.

The same user found that CC version 5.6.0.788 with the same permission settings allowed end users to install and update Adobe apps without prompting for admin rights. So it appears to be an issue with the latest Creative Cloud package.

Link to the forum: https://community.adobe.com/t5/enterprise-teams-discussions/unable-to-install-application-and-update...

[AARON33908117wwfi]

We are getting this to prior to the version 6.1.0.587. Can Adobe Confirm. It's like it's getting ignored. Happened to two people with more possible.+

[kglad]

this is an old thread. adobe employees aren't likely to respond.

[Abambo]

Updates are working fine for my users, without the need of local admin privileges. For new users, I only create a fresh installation of a current Creative Cloud Desktop app. That one needs to be installed by an administrator.