Groupwise 2012 client deployment with Zenworks 7


We're trying to deploy the Groupwise 2012 Windows client with Zenworks and we get an error during the installation of the msi : "Registry Editing has been Disabled by Your Administrator". The workstations are locked down by policies and users don't have access to registry.

By reading a TID (3919348) of Novell, we can read this :
"MSIs are made up of Standard Actions and Custom Actions (so are MSPs). Most MSIs are only using Standard Actions, and these are performed using the Windows Installer service when AlwaysInstallElevated is set to 1. However, there are some MSIs that will utilize Custom Actions."

And guess what : Novell theirself are using custom actions in their msi. We had to suppress 2 custom actions (with Orca) to get the msi installed : "BackupRegistrySettings" and "RestoreRegistrySettings".

We can read further in the TID :
"To do this, you can either ask the MSI author to change the Custom Action attribute that defines elevation..."

Is it possible in 2013 to get a msi for Groupwise which could be installed without problem??? Until now, every Groupwise msi has problems when you try to install it without administrator privileges. Please Novell, can you provide us a msi which could be installed on every platform without hacking!

Hope it helps somebody to get this stupid msi to be installed.



  • Nicolas,

    When installing the GroupWise client, the installer must have Administrator rights to the box. You can accomplish this in ZENworks by having the application run as a secure system user. Simply check the box that enable it to install as a secure system user on one of the tabs.. I'd have to install a ZEN 7 server since I no longer run that During the install it will elevate the privileges to a system user who has full access to the box.

    This has been the requirement for GroupWise due to it needed to write to the registry.

    You really should upgrade your ZEN environment to ZCM 11.x

    Paul Lamontagne
  • nicolas,

    1- I deployed gwclient 2012 on many computers. Novell put a video on Youtube to show how to deploy Gw2012 and we can find many pdf about it on Google.

    2- if you have trouble to deploy some regedit... probably your administrator use a GPO to block regedit.exe but he use the silent mode

    3- The best way to deploy gw client with UAC windows7 is to use the dynamic administrator to deploy... (you never spoke about UAC, do you use it?)
    Novell GroupWise 2012 Deployed Using ZCM 11 SP1 Part 1 - YouTube

    4- novell make gwtuner on cd to build your own mst ! Why you used Microshit Orca ?
  • Hi,

    I know that Groupwise client needs administrator rigths, but as explained before, it doesn't work as a (secure) system user : Custom actions are run as logged user (standard users with no access to registry).

    Upgrade to ZCM 11.x is on the road, but it'll take some months before being ready for production.

    Best regards,
  • Hi,

    1 : Yes, I found many pdf to deploy gw 2012, but only for zcm 1x.x (with dynamic administrator), not for zen 4,6,7.
    2 : Yes gpo blocks access to registry for standard users (and hopefully it should stay like that)
    3 : No dynamic administrator with zen 4,6,7. We are deploying on Windows XP without UAC.
    4 : We use gwtuner to customize the client, but it is very limited and cannot remove custom actions in msi (only orca or adminstudio could do this)

    Everyhting is working fine now (without these 2 custom actions) and the client will be deployed with zen7 within the following weeks...

    Best regards,