Clients Unable to Run EXE client - Admin Rights Required

Avatar
  • updated
  • Open

Basic scenario:

1. Support Center Rep provides code/share link for customer to join session

2. Attempts to download the client are stopped by the browser warning that this is a file that isn't commonly downloaded, are you sure you want to keep? Support has to instruct the customer on how to tell the browser to keep the file. Then it asks again are you sure you want to keep this file, with "show more options" and then "Keep anyway". 

3. Attempt to double click the exe either presents Windows Defender blocking the app from running with a message Windows Protected PC are you sure you want to run? "Run anyway" OR and more troublesome a UAC with message "This app has been blocked for your protection - An administrator has blocked you from running this app." and then no path forward but to try another client variation with "try next option".

What I see is that the exe apparently is not signed, shows Publisher - Unknown. This may be the reason that it is now being blocked. Or this combined with some security changes to browsers recently. If the user account has local admin rights, or switch to the Administrator local account the client can be successfully installed. Most of our customers do not have administrative rights to proceed.

Screenconnect version 25.2.4.9229 and 25.4.20.9295 tried, same result. 

Avatar
0
Sean Keown

If your company has a GPO that blocks unsigned MSIs like we do then you’ll get an access denied even if you’re an administrator on the computer. 


I believe the zip method works with limited users.

Connectwise said they are working on a release to fix this.

Avatar
0
daniel geddes
Quote from Sean Keown

If your company has a GPO that blocks unsigned MSIs like we do then you’ll get an access denied even if you’re an administrator on the computer. 


I believe the zip method works with limited users.

Connectwise said they are working on a release to fix this.

Thanks for the response. We have had no recent GPO changes to block unsigned MSIs that would result in the issue popping up in the last few days. But to be clear, it is not the hosts (our company reps) necessarily with the issue with the client, but our customer base attempting to install the client. We have had some luck now with the zip bypassing issues with browser and install of the client. Hoping for a quick fix to be released.



Top contributors

Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar