Skip to main content
Participating Frequently
August 25, 2010
Question

Flash Player deploy by GPO - not working

  • August 25, 2010
  • 14 replies
  • 41906 views

I've been attempting to get Flash Player 10 (distributable verision, install_flash_player_10_active_x.msi) to deploy accross our network - three sites, around 100 computers total.

I've assigned it to Group Policy, the client machines pull it down and install successfully (it even shows up in Add/Remove programmes).

However it doesn't work. Whenever any user goes to a flash-based website they get a message telling them to download and install flash.

Has anyone else experienced this?

All our clients are running Win XP and IE8

    This topic has been closed for replies.

    14 replies

    October 11, 2012

    There are a lot of postings to this question so I would like to suggest a commercial solution to it. PolicyPak is a group policy based desktop management system that delivers and locks down third party application settings for applications such as Adobe Flash.  It's also available in two free modes, trial mode and community mode so it costs you nothing to check it out.  Its management interface simply snaps right into Group Policy Administrator which you already know.  It even provides a GUI interface for you to confgure your desired settings that emulates the interface of the application.  Go here for more information http://www.policypak.com/products/manage-flash-player-using-group-policy.html

    One more thing, besides giving you the ability to completely manage Adobe Flash, it also supports more than fifty other applications to boot.

    July 17, 2013

    I know someone mentioned this earlier, but PolicyPak is a great way to manage Adobe applications.  As mentioned previously, it integrates third party applications into group policy, allowing you the ability to deliver and lock down most configuration settings in the applications they support.  The GUI interface emulates the application itself, making it super easy to select and configure the settings you want.  Yes, it is a commercial solution but as the previous post mentioned, it's  available in two free modes, trial mode and community mode so it costs you nothing to check it out. 

    Here is a link to how it integrates with Adobe Flash.

    http://www.policypak.com/products/manage-flash-player-using-group-policy.html

    April 28, 2011

    updating thread

    eidnolb

    New Participant
    March 9, 2011

    If you're still receiving the "installax.exe" error, through deployment or manual installation, I've found a resolution that can be tried, documented here

    :

    http://faultbucket.ca/2010/12/adobe-flash-gpo-deploy-error-installax-exe/

    This has been successful for myself, and confirmed for a couple others as well.

    New Participant
    April 27, 2011

    I've been having a bit of a nightmare with this recently.  Both the Flash ActiveX and Flash Plugin's have been causing me a proper headache!

    I support a mix of Windows XP and Windows 7 (32 and 64 bit) OS's and deploy Flash via GPO's.  I noticed some of the Flash updates were not being installed.  When I tried to manually remove them I was getting the message:

    Error 2753.  The File 'InstallPlugin.exe' is not marked for installation. (Flash plugin)

    or
    Error 2753.  The File 'Installax.exe' is not marked for installation. (Flash ActiveX).

    Anyway what I found was it was the previous version of either ActiveX/Plugin that caused the problem.  For example if 10.2.152.32 was showing as the version in add/remove programs,  I had to reinstall the previous version e.g. 10.102.1.64 before I could go forward.

    I'd already tried all the above mentioned fixes, none of which helped. As soon as I installed the previous version it then allowed me to remove it.  I then rebooted the machine (having run gpupdate /force)  and the latest version was then installed via GPO.

    The bad news is this is a manual process and I havent got a way to automate it so if you have thousands of machines its a tricky one.  That said I'm sure someone can come up with a script to find the version and reinstall the previous version.

    I hope that makes sense and it helps someone out!

    New Participant
    May 5, 2011

    Tully, I feel your pain.

    I have exact the same issue, I have deployed Flash via MSI over the years without issues.

    I for some reason have got the Installax.exe error.

    Not sure what the exact problem is but haven't been able to fix with, have tried creating custom MSI's with Orca, using scripts from here etc.

    I have found that I can

    1. re-install old version via GP

    2. Then update to latest via GP

    But I think you would need to find the first version of Flash MSI which you installed on the clients.

    I have deployed 4 versions, one which is 10.0, another 10.1 and two from 10.2.

    Along the way one of these versions has somehow messed up, am not sure what but it has.

    The major issue is, that when deploying the latest version, it uninstalls the previous version, errors with the "InstallAX.exe" and then leaves the clients without flash installed.

    I have registered the bug with Adobe on their bug system, on the 26/04/2011, but so far have had no reply, but the bug has been marked for "Internal Review", hopefully when 10.3 is released as an MSI we can roll out succesfully.

    New Participant
    February 10, 2011

    Had the same problem as described by the TP; the solution that worked for me was this bit from above:

    - Remember to assign the correct rights to the path and to the MSI file. If you're using a computer GPO the account that will be used to access it's the computer account (nor the user account). You need to add the account "Domain Computers" (remember to press Object Type button and add the "Computers" group after clicking of the check button).

    Thanks to eveyrone that contributed to this!

    New Participant
    February 16, 2011

    I'm seeing the same thing --  Flash Player (Active X) GPO deployment failing.  The local computer log error shows "cannot find the specified file".  The problem seems to be the msi available via the distribution site.  I was unable to install using this msi even when I copied the downloaded file to a client and attempted installation locally.  When I tried to install on the client the message was "Error 2753:  The File 'InstallAX.exe' is not marked for installation."

    The problem is NOT rights or or the failure to use a network path in the GPO as an installation point.

    The fact that the msi couldn't even successfully install when copied to a client indicates that the msi is the problem.

    Has anyone made a successful install using the msi installer available through the distribution site?

    NetVicious
    Participating Frequently
    February 17, 2011

    The problem it's the installer needs to uninstall the previous version first. For the uninstallation it needs the .exe of the old version. If you deleted it or you uses always the same name for the installer it will fail to uninstall and it won't install the new version.

    I tried to uninstall using the flash player uninstaller [1] and in the next boot the new flash player was successfuly installed within the GPO.

    [1] http://kb2.adobe.com/cps/141/tn_14157.html

    New Participant
    September 27, 2010

    why its so hard to get Flash Player Downloads

    NetVicious
    Participating Frequently
    September 27, 2010

    When you created the GPO what type of install you selected: publish or assign.

    Publish: Publish it on the Add/Remove programs for *MANUAL* installation.

    Assign: Install it on every machine of the related GPO.

    If you see it on the Add/Remove Programs I'm sure you selected Publish.

    Participating Frequently
    September 27, 2010

    NetVicious wrote, sometime around 27/09/10 16:12:

    When you created the GPO what type of install you selected: publish or assign.

    >

    Publish: Publish it on the Add/Remove programs for MANUAL installation.

    Assign: Install it on every machine of the related GPO.

    >

    If you see it on the Add/Remove Programs I'm sure you selected Publish.

    They were both Assigned

    Software installed via GPO still shows up in add/remove programs in my

    experience.

    --

    Russell Howe, IT Department <systems@bmtmarinerisk.com>

    BMT Marine & Offshore Surveys Ltd

    September 27, 2010

    I don't think this is a GPO issue personally as we are deploying using Altiris and having the same exact issues.  I'm curious to the admins that are seeing this problem, what anti-virus are you using?

    ACM-HLMAuthor
    Participating Frequently
    September 21, 2010

    Just a thought. I wonder if using Group Policy to manually set the permissions of the c:\windows\system32\macromed\flash folder to give Full Control to Everyone would allow the MSI installer to delete flash10h.ocx during the course of it's installation (as this file has deny permissions preventing it from being deleted by default)?

    September 21, 2010

    We're actually not deploying via group policy but Altiris.  Regardless, I've been deploying it the same way every month or so for the last couple years (as the patches are released by Adobe) and this is the first time I've seen this.  If it is a permissions issue, I wish Adobe would step up and tell us that they have changed the way the latest installer works and that is what's causing the issue.  Support is horrendous on the forums and on the phone (except for community that posts on these forums which is great). Has anyone trying installing regmon to monitor what is going on with the install/uninstall?  I might have to give that a try...

    September 21, 2010

    I knocked up a quick powershell script to compare the permissions on registry keys/files system to what adobe 'fix' - however, it's probably also a good indication of state of registry after a (failed) gpo install. i.e. in short, permissions look ok, and lack of errors would suggest no corruption.

    In terms of registry monitor - i've done a procmon on bootup - out of a million+ line log file, there's no ACCESS DENIED errors being generated by msiexec - so I'm assuming it's either finding or missing a file/registry entry that's causing it to go down a wrong path...

    Wondering at the moment whether to give up on deplying via GPO, and look at using a powershell script in a computer start up script (hence the work below)

    PS C:\foo> .\audit.ps1
    Checking Flash File Permissions...
    BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash
    NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash
    BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashPlayerTrust
    NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashPlayerTrust
    BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx
    NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx
    BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashAuthor.cfg
    NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashAuthor.cfg
    BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashInstall.log
    NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashInstall.log
    BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.dll
    NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.dll
    BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe
    NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe
    BUILTIN\Administrators has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashPlayerTrust\AcrobatConnect.cfg
    NT AUTHORITY\SYSTEM has FullControl on C:\WINDOWS\system32\Macromed\Flash\FlashPlayerTrust\AcrobatConnect.cfg
    Checking Flash Registry Permissions...
    WARNING: HKCR:\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2} does not exist
    WARNING: HKCR:\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000} does not exist
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}\InprocServer32
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}\InprocServer32
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}\Programmable
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}\Programmable
    WARNING: HKCR:\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4} does not exist
    WARNING: HKCR:\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9} does not exist
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\0
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\0
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\0\win32
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\0\win32
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\FLAGS
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\FLAGS
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\HELPDIR
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\HELPDIR
    WARNING: HKCR:\.spl does not exist
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\.swf
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\.swf
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\.swf\OpenWithList
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\.swf\OpenWithList
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\.swf\OpenWithList\IExplore.exe
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\.swf\OpenWithList\IExplore.exe
    WARNING: HKCR:\.mfp does not exist
    WARNING: HKCR:\.sol does not exist
    WARNING: HKCR:\.sor does not exist
    WARNING: HKCR:\FlashFactory.FlashFactory does not exist
    WARNING: HKCR:\FlashFactory.FlashFactory.1 does not exist
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp\CurVer
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp\CurVer
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp.1
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp.1
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp.1\CLSID
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\FlashProp.FlashProp.1\CLSID
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\DefaultIcon
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\DefaultIcon
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell\open
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell\open
    BUILTIN\Administrators has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell\open\command
    NT AUTHORITY\SYSTEM has FullControl on HKEY_CLASSES_ROOT\ShockwaveFlash.ShockwaveFlash\shell\open\command
    WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.1 does not exist
    WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.3 does not exist
    WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.4 does not exist
    WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.5 does not exist
    WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.6 does not exist
    WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.7 does not exist
    WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.8 does not exist
    WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.9 does not exist
    WARNING: HKCR:\ShockwaveFlash.ShockwaveFlash.10 does not exist
    WARNING: HKCR:\MacromediaFlashPaper.MacromediaFlashPaper does not exist
    WARNING: HKCR:\MIME\Database\Content Type\application/futuresplash does not exist
    WARNING: HKCR:\MIME\Database\Content Type\application/x-shockwave-flash does not exist
    BUILTIN\Administrators has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash
    NT AUTHORITY\SYSTEM has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash
    BUILTIN\Administrators has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\DefaultIcon
    NT AUTHORITY\SYSTEM has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\DefaultIcon
    BUILTIN\Administrators has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\shell
    NT AUTHORITY\SYSTEM has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\shell
    BUILTIN\Administrators has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\shell\open
    NT AUTHORITY\SYSTEM has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\shell\open
    BUILTIN\Administrators has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\shell\open\command
    NT AUTHORITY\SYSTEM has FullControl on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\shell\open\command
    WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1 does not exist
    WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3 does not exist
    WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4 does not exist
    WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5 does not exist
    WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6 does not exist
    WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7 does not exist
    WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8 does not exist
    WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.9 does not exist
    WARNING: HKLM:\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10 does not exist
    WARNING: HKLM:\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000} does not exist

    September 16, 2010

    Same sort of thing here - sophos/ gpo - redeploy - app seems to deploy successfully

    installax.exe logs show:

    =O====== M/10.1.82.76 2010-09-08+16-20-16.260 ========
    0000 00000010 "C:\WINDOWS\TEMP\InstallAX.exe" -install activex -msi
    0001 00001037 SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX/ 2
    0002 00000013 C:\WINDOWS\system32\Macromed\Flash\Flash10i.ocx
    0003 00000015 C:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe
    0004 00000016 C:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_ActiveX.dll
    =X====== M/10.1.82.76 2010-09-08+16-20-17.377 ========

    However, what i'm finding is the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}  does not exist/get created

    Having said that it's kind of mixed - when we push out a flash player update, we get some PC's work, some not work ;/

    I've just been looking at one pc where i've tried manually running the flash player update (after gpo deployment), and get the following:

    MSI (s) (70:C8) [09:51:47:864]: Note: 1: 2753 2: InstallAX.exe
    Info 2835.The control ErrorIcon was not found on dialog SetupError.
    Error 2753.The File 'InstallAX.exe' is not marked for installation.
    MSI (s) (70:C8) [09:51:51:468]: Product: Adobe Flash Player 10 ActiveX -- Error 2753.The File 'InstallAX.exe' is not marked for installation.

    Looking at procmon.exe output %temp% points to c:\documents and settings, and the msi installer tries to open install.exe from that location where the file doesn't exist.

    In c:\windows\temp there was what looked to be an *old* version of installax.exe - however, deleting that makes no difference to the other error. In the end in this case, hade to use the MSI cleanup utility to nuke the MSI registry entries for flash and rerun the installer.

    Only other referene to installas.exe in the msi log is:

    MSI (s) (70:C8) [09:51:47:253]: Feature: FlashPlayerAXInstaller; Installed: Advertise;   Request: Absent;   Action: Absent
    MSI (s) (70:C8) [09:51:47:253]: Component: __ISRegistryComponent65; Installed: Null;   Request: Null;   Action: Null
    MSI (s) (70:C8) [09:51:47:253]: Component: ISRegistryComponent; Installed: Absent;   Request: Null;   Action: Null
    MSI (s) (70:C8) [09:51:47:253]: Component: InstallAX.exe; Installed: Absent;   Request: Null;   Action: Null

    September 16, 2010

    We are having the same exact issue here (see my other thread here http://forums.adobe.com/thread/718387?tstart=0).  Adobe Flash 10.0.45.2 was installed and now we are getting users reporting that it doesn't work though it is installed.  We are now upgrading to 10.1.87.56 and I'm concerned this will happen again.  Adobe support wasn't much help at all.  I contacted them about four times this week with different answers every time.  I sent them the log file below and they said it doesn't really tell them much (go figure). 

    Adobe Flash Player 10.0.45.2 failed installed:

    List of files under C:\WINDOWS\system32\Macromed\Flash:

    mms.cfg

    KB923789.inf

    FlashInstall.log

    Contents of FlashInstall.log:

    =O====== M/10.1.82.76 2010-09-14+12-38-19.239 ========
    0000 00000010 "C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe" /RegServer
    =X====== M/10.1.82.76 2010-09-14+12-38-21.708 ========

    =O====== M/10.1.82.76 2010-09-14+12-38-25.474 ========
    0000 00000010 "C:\WINDOWS\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe" /RegServer
    =X====== M/10.1.82.76 2010-09-14+12-38-31.755 ========

    =O====== M/10.1.82.76 2010-09-14+12-51-43.578 ========
    0000 00000010 "C:\WINDOWS\Downloaded Program Files\CONFLICT.2\FP_AX_CAB_INSTALLER.exe" /RegServer
    =X====== M/10.1.82.76 2010-09-14+12-51-45.750 ========

    =O====== M/10.1.82.76 2010-09-14+12-51-49.406 ========
    0000 00000010 "C:\WINDOWS\Downloaded Program Files\CONFLICT.3\FP_AX_CAB_INSTALLER.exe" /RegServer
    =X====== M/10.1.82.76 2010-09-14+12-51-53.187 ========

    =O====== M/10.1.82.76 2010-09-14+12-52-48.641 ========
    0000 00000010 "C:\WINDOWS\Downloaded Program Files\CONFLICT.4\FP_AX_CAB_INSTALLER.exe" /RegServer
    =X====== M/10.1.82.76 2010-09-14+12-52-51.844 ========

    =O====== M/10.1.82.76 2010-09-14+12-52-55.657 ========
    0000 00000010 "C:\WINDOWS\Downloaded Program Files\CONFLICT.5\FP_AX_CAB_INSTALLER.exe" /RegServer
    =X====== M/10.1.82.76 2010-09-14+12-53-01.235 ========

    September 16, 2010

    Spoke with our system admin who manages our A/V and he provided me with the log below.  It looks like our Access Protection rule is not currently enforced to block the flash installer.

    9/14/2010               8:38:18 AM             Would be blocked by Access Protection rule  (rule is currently not enforced)      BLIZCORP\tfinley              C:\Program Files\Internet Explorer\iexplore.exe  C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe             Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder            Action blocked : Execute
    9/14/2010               8:38:25 AM             Would be blocked by Access Protection rule  (rule is currently not enforced)      BLIZCORP\tfinley              C:\Program Files\Internet Explorer\iexplore.exe  C:\WINDOWS\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
    9/14/2010               8:51:43 AM             Would be blocked by Access Protection rule  (rule is currently not enforced)      BLIZCORP\tfinley               C:\Program Files\Internet Explorer\iexplore.exe  C:\WINDOWS\Downloaded Program Files\CONFLICT.2\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
    9/14/2010               8:51:49 AM             Would be blocked by Access Protection rule  (rule is currently not enforced)      BLIZCORP\tfinley                C:\Program Files\Internet Explorer\iexplore.exe  C:\WINDOWS\Downloaded Program Files\CONFLICT.3\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
    9/14/2010               8:52:48 AM             Would be blocked by Access Protection rule  (rule is currently not enforced)      BLIZCORP\tfinley              C:\Program Files\Internet Explorer\iexplore.exe  C:\WINDOWS\Downloaded Program Files\CONFLICT.4\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
    9/14/2010               8:52:55 AM             Would be blocked by Access Protection rule  (rule is currently not enforced)      BLIZCORP\tfinley               C:\Program Files\Internet Explorer\iexplore.exe  C:\WINDOWS\Downloaded Program Files\CONFLICT.5\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
    9/16/2010               9:18:27 AM             Would be blocked by Access Protection rule  (rule is currently not enforced)      BLIZCORP\tfinley             C:\Program Files\Internet Explorer\iexplore.exe  C:\WINDOWS\Downloaded Program Files\CONFLICT.6\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
    9/16/2010               9:18:45 AM             Would be blocked by Access Protection rule  (rule is currently not enforced)      BLIZCORP\tfinley               C:\Program Files\Internet Explorer\iexplore.exe  C:\WINDOWS\Downloaded Program Files\CONFLICT.7\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute
    9/16/2010               9:19:57 AM             Would be blocked by Access Protection rule  (rule is currently not enforced)      BLIZCORP\tfinley               C:\Program Files\Internet Explorer\iexplore.exe  C:\WINDOWS\Downloaded Program Files\CONFLICT.8\FP_AX_CAB_INSTALLER.exe                Common Maximum Protection:Prevent launching of files from the Downloaded Program Files folder             Action blocked : Execute

    September 13, 2010

    Having the same issue, I am a sys admin at a +300 company and we use Symantec Endpoint Protection. Problem started for us mid week last week. Had a rash of people saying that the browser was telling them that Flash was not installed even though it was and had been for some time. So, I made sure we had the most current msi and re-deployed the GPO. Now instead of a handful of people not having Flash working, the entire company is broken. What a mess!! Please tell me there is a (re)deployable answer for this - not going from PC to PC.

    Thanks.

    ACM-HLMAuthor
    Participating Frequently
    September 9, 2010

    OK...I've been in to our Sophos Enterprise Console and added exceptions for Flash Player as above to our on-access scanning profile settings, as shown here:

    I waited for these settings to take affect and re-deployed Flash Player using Group Policy.

    The installation completed successfully as per the events logged on a PC I tested this afternoon:

    Changes to software installation settings were applied successfully.


    The reinstall of application Adobe Flash Player 10 ActiveX from policy London Software succeeded.


    Product: Adobe Flash Player 10 ActiveX -- Configuration completed successfully.

    However, it hasn't worked. Despite claiming to have installed successfully, Flash10h.ocx is still there - I can't delete it - and Flash Player doesn't work.

    September 9, 2010

    Hi, thanks for the screenshot and latest information. I have sent a PM to someone here and hope they will be able to assist you. I have another idea, but have to be out for awhile and will see about that as soon as I return.

    It appears that for some reason, something is blocking the Install. I have no doubt that the FlashUtil10h.exe is being Uninstalled, but I don't know what is blocking the Install of the vs 10.1.82.76.

    Thanks,

    eidnolb