visual studio生成的msi vs gpo:由于可能不安全，因此不会安装此广告应用程序 [英] visual studio generated msi vs gpo: This advertised application will not be installed because it might be unsafe

问题描述

我的Outlook vsto加载项带有与MSI捆绑在一起的oneclick安装程序(vsto清单等).这样做是为了能够使用组策略安装它(据我了解，oneclick不能真正与GPO一起部署，它需要MSI.)

I have outlook vsto addin with oneclick installer (vsto manifests etc) that is bundled with MSI. This is done to be able to install it with Group Policy (as I learned oneclick cannot be really deployed with GPO, it needs MSI).

如果我从受限帐户(UAC提示)或管理员帐户运行此msi，它会正常工作. 问题是，如果它是通过GPO部署的，则会显示:

This msi works fine if I run it from limited account (UAC prompts) or admin account. Problem is that if it is deployed via GPO it shows:

由于此广告应用程序可能不安全(...)，因此将无法安装"

"This advertised application will not be installed because it might be unsafe (...)"

我查看了stackoverflow，发现它可以用/qb开关运行-但不起作用:(.

I looked to stackoverflow and found that it could be run with /qb switch - but it doesn't work :(.

在互联网上的某个地方，我发现这与此有关:ERRCA_UIANDADVERTISED http://board.issociate.de/线程/401848/Advertised-application-will-not-be-installed.html

Somewhere in internet I found this is related to this: ERRCA_UIANDADVERTISED http://board.issociate.de/thread/401848/Advertised-application-will-not-be-installed.html

http://www.creativedocs.net/blog/index.php?serendipity%5Baction%5D=search&ser​​endipity%5BsearchTerm%5D=versionmax

但是说实话，我不明白为什么Visual Studio几乎不支持MSI不能真正用GPO进行部署. 为了使它正常工作，我应该在Visual Studio的MSI中修复什么?

but to be honest I don't understand why visual studio almost defaul msi is not really deployable with GPO. What exactly should I fix in my MSI in visual studio to make it working?

推荐答案

您可以使用GPO部署每用户软件，而不会出现任何问题.基本上，您可以在使用GPO之前通过静默安装软件包进行测试:

You can deploy a per-user software using GPO without any issues. Basically, you can do tests before using GPO by silently installing your packages:

msiexec /i productname.msi /quiet

问题在于将MSI发布到可能没有特权的用户的系统，因此无法提供对话框，因为允许有限的用户控制特权运行的安装，因为该特权已发布且正在以管理方式安装.

The issue is in publishing the MSI to a system where the user may not be privileged, so dialog boxes cannot be offered because that allows a limited user to control an install running privileged because it was published and is being installed in admin mode.

请参见以获取更多信息.

See "This advertised application will not be installed because it might be unsafe. Contact your administrator to change the installation user interface option of the package to basic." for more information.

这篇关于visual studio生成的msi vs gpo:由于可能不安全，因此不会安装此广告应用程序的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！