Deploy and patch Reader via GPO

[DS RJMcLeod]

So here's the huge problem - I want to deploy a patched Adobe X1 via group policy

NOt exactly ground breaking stuff ist it. And yet this complex procedure is fraught with problems.

Firstly I really struggle with Adobe's not simply doling out MSI's for any update. It really complicates things no-end.

Anyway, Here's what I understand the procedure to be.

1 Download the msi, - ftp://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.00/

2 Msiexec -a it extract it to a folder

3 Download the patch - ftp://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.22/misc/

4 msiexec -a -p  tpatch.msp to patch msi in step 2

5 Run customisation wizard against the patched msi from step 4

6 Copy transform to folder

7 Point GP at a share and deploy using the transform from step 6

Fails on step 4.

The upgrade patch cannot be installed by the windows installer service because the programme to be upgraded may be missing or the upgrade patch may update a different version of the programme. Verify the program to be upgraded exists on your computer and you have the correct upgrade patch

So try another patch

This folder ftp://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.21/misc/ has 2 msp files.

Redo steps 1- 4 with this AdbeRdrUpd11021_MUI.msp- which failed to patch.

Redo steps 1 - 4 with AdbeRdrUpd11021.msp which seemed to patch ok,

However I fail on step 5 - Setup.ini is missing apparently.

Created an empty ini file and redid steps 1 -5 , but no joy. Still missing an ini file.

Can someone detail the correct procedure to get a usable msi that I can run the customisation wizard against so I can deploy this.

Thank you.

[varimr75744726]

Here's the log:

=== Verbose logging started: 9/28/2017  13:15:32  Build type: SHIP UNICODE 5.00.7601.00  Calling process: C:\Windows\system32\msiexec.exe ===

MSI (c) (38:64) [13:15:32:328]: Font created.  Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

MSI (c) (38:64) [13:15:32:328]: Font created.  Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

MSI (c) (38:58) [13:15:32:344]: Resetting cached policy values

MSI (c) (38:58) [13:15:32:344]: Machine policy value 'Debug' is 0

MSI (c) (38:58) [13:15:32:344]: ******* RunEngine:

           ******* Product: \\server\share\AdbeRdr11000_en_US.msi

           ******* Action: ADMIN

           ******* CommandLine: **********

MSI (c) (38:58) [13:15:32:360]: Incrementing counter to disable shutdown. Counter after increment: 0

MSI (c) (38:58) [13:15:32:360]: Machine policy value 'DisableUserInstalls' is 0

MSI (c) (38:58) [13:15:32:625]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1

MSI (c) (38:58) [13:15:32:625]: SOFTWARE RESTRICTION POLICY: Verifying package --> '\\server\share\AdbeRdr11000_en_US.msi' against software restriction policy

MSI (c) (38:58) [13:15:32:625]: Note: 1: 2262 2:  DigitalSignature 3: -2147287038

MSI (c) (38:58) [13:15:32:625]: SOFTWARE RESTRICTION POLICY: \\server\shareAdbeRdr11000_en_US.msi is not digitally signed

MSI (c) (38:58) [13:15:32:640]: SOFTWARE RESTRICTION POLICY: \\server\share\AdbeRdr11000_en_US.msi is permitted to run at the 'unrestricted' authorization level.

MSI (c) (38:58) [13:15:32:640]: Cloaking enabled.

MSI (c) (38:58) [13:15:32:640]: Attempting to enable all disabled privileges before calling Install on Server

MSI (c) (38:58) [13:15:32:656]: End dialog not enabled

MSI (c) (38:58) [13:15:32:656]: Original package ==> \\server\share\AdbeRdr11000_en_US.msi

MSI (c) (38:58) [13:15:32:656]: Package we're running from ==> C:\Users\vrapp\AppData\Local\Temp\73c9b6.msi

MSI (c) (38:58) [13:15:32:656]: APPCOMPAT: Uninstall Flags override found.

MSI (c) (38:58) [13:15:32:656]: APPCOMPAT: Uninstall VersionNT override found.

MSI (c) (38:58) [13:15:32:656]: APPCOMPAT: Uninstall ServicePackLevel override found.

MSI (c) (38:58) [13:15:32:656]: APPCOMPAT: looking for appcompat database entry with ProductCode '{AC76BA86-7AD7-1033-7B44-AB0000000001}'.

MSI (c) (38:58) [13:15:32:656]: APPCOMPAT: no matching ProductCode found in database.

MSI (c) (38:58) [13:15:32:656]: MSCOREE not loaded loading copy from system32

MSI (c) (38:58) [13:15:32:656]: Machine policy value 'TransformsSecure' is 0

MSI (c) (38:58) [13:15:32:656]: User policy value 'TransformsAtSource' is 0

MSI (c) (38:58) [13:15:32:656]: Original patch ==> C:\Users\vrapp\AdbeRdrUpd11022_incr.msp

MSI (c) (38:58) [13:15:32:656]: Patch we're running from ==> C:\Users\vrapp\AdbeRdrUpd11022_incr.msp

MSI (c) (38:58) [13:15:32:672]: SOFTWARE RESTRICTION POLICY: Verifying patch --> 'C:\Users\vrapp\AdbeRdrUpd11022_incr.msp' against software restriction policy

MSI (c) (38:58) [13:15:32:672]: SOFTWARE RESTRICTION POLICY: C:\Users\vrapp\AdbeRdrUpd11022_incr.msp has a digital signature

MSI (c) (38:58) [13:15:32:765]: SOFTWARE RESTRICTION POLICY: C:\Users\vrapp\AdbeRdrUpd11022_incr.msp is permitted to run at the 'unrestricted' authorization level.

MSI (c) (38:58) [13:15:32:765]: SequencePatches starts. Product code: {AC76BA86-7AD7-1033-7B44-AB0000000001}, Product version: 11.0.00, Upgrade code: {A6EADE66-0000-0000-484E-7E8A45000000}, Product language 1033

MSI (c) (38:58) [13:15:32:765]: PATCH SEQUENCER: verifying the applicability of minor upgrade patch C:\Users\vrapp\AdbeRdrUpd11022_incr.msp against product code: {AC76BA86-7AD7-1033-7B44-AB0000000001}, product version: 11.0.00, product language 1033 and upgrade code: {A6EADE66-0000-0000-484E-7E8A45000000}

MSI (c) (38:58) [13:15:32:765]: PATCH SEQUENCER: minor upgrade patch C:\Users\vrapp\AdbeRdrUpd11022_incr.msp is not applicable.

MSI (c) (38:58) [13:15:32:765]: SequencePatches returns success.

MSI (c) (38:58) [13:15:32:765]: Final Patch Application Order:

MSI (c) (38:58) [13:15:32:765]: Other Patches:

MSI (c) (38:58) [13:15:32:765]: Unknown\Absent: {AC76BA86-7AD7-0000-2550-7A8C40011022} - C:\Users\vrapp\AdbeRdrUpd11022_incr.msp

The upgrade cannot be installed by the Windows Installer service because the program to be upgraded may be missing, or the upgrade may update a different version of the program. Verify that the program to be upgraded exists on your computer and that you have the correct upgrade.

\\server\share\AdbeRdr11000_en_US.msi

MSI (c) (38:58) [13:15:32:765]: Product: Adobe Reader XI - Update '{AC76BA86-7AD7-0000-2550-7A8C40011022}' could not be installed. Error code 1642. Additional information is available in the log file c:\install.log.

MSI (c) (38:58) [13:15:32:765]: Windows Installer installed an update. Product Name: Adobe Reader XI. Product Version: 11.0.00. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Update Name: {AC76BA86-7AD7-0000-2550-7A8C40011022}. Installation success or error status: 1642.

MSI (c) (38:58) [13:15:32:765]: Note: 1: 1708

MSI (c) (38:58) [13:15:32:765]: Product: Adobe Reader XI -- Installation failed.

MSI (c) (38:58) [13:15:32:765]: Windows Installer installed the product. Product Name: Adobe Reader XI. Product Version: 11.0.00. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Installation success or error status: 1642.

MSI (c) (38:58) [13:15:32:765]: MainEngineThread is returning 1642

=== Verbose logging stopped: 9/28/2017  13:15:32 ===

[ahmedc5629709]

Each time that I attempted to do this over the years, same or similar difficulties arise.  And whenever I search for the fix, mostly I find such 'unresolved' threads.  For such a common app from such a major developer that regularly pushes out patches to fix newly-found holes, is one wrong to expect a simple, spelled-out, published, reusable method? 

[daniell75120436 · Accepted solution]

I know this is an old thread, but it is the first link that comes up on a search.

These are the steps I use: https://community.spiceworks.com/how_to/37690-how-to-deploy-acrobat-reader-with-gpo

I have been using those instructions on the Spiceworks forums, and it has worked consistently until a few weeks ago. I received a similar error. I was not able to resolve this issue. It seems like it should work, but something (probably minor) broke the patching process.

My resolution for this was to use another computer. With the same instructions, I was able to udpate my GPO to the latest Adobe Reader.