Action - Install Msp; Section E.16, "Action - Install Msp - Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - SOFTWARE DISTRIBUTION REFERENCE 10.3 30-03-2010 Management Manual

If the logged-in user's security level does not provide sufficient rights and file access to run the
application, you can configure the application to run in the "system" space or as a dynamic
administrator, as described below:
Run as logged in user: The MSI application inherits the logged-in user's credentials. For
example, the application has the same rights to the registry and the file system as the logged-in
user.
Select the application's display mode: Normal, Minimized, Maximized, or Hidden. In Hidden
mode, the application runs normally without a user interface available. This is useful if you
want the application to process something, then go away without user intervention.
Select Grant administrator privilege to user during installation to provide administrator
privileges to the logged-in user. However, providing administrator privileges to a user might
pose security risks. If this option is selected, the user on the managed device is prompted to
enter the password when the MSI is installed on the device. To install the MSI, the user must
log in to the device with a user account that has a password configured.
NOTE: On a Vista device, if the administrator is logged in to the device and the Grant
administrator privilege to user during installation is selected, the action is performed in the
quiet mode.
Run as secure system user (Don't allow system to interact with desktop): The application
is run under the Local System user and inherits Administrator-level credentials. For example,
the application has full rights to the registry and the file system. Because the security level is
set to Secure, the application's interface is not displayed to the user and the application is only
visible in the Task Manager. This option is useful when running applications that require full
access to the workstation but require no user intervention.
Run as dynamic administrator: A dynamic administrator is an administrator account that is
created on the fly to perform certain procedures, such as installing applications. Using a
dynamic administrator is helpful when installing applications (some MSI applications, for
example) that cannot be installed in the system space. When you select this action, the dynamic
administrator is created, it performs the required tasks, and then the account is deleted.
NOTE: Performing this action as dynamic administrator on a Windows domain controller fails
because Microsoft does not allow the use of local administrator accounts on domain
controllers.
E.16 Action - Install MSP
The Action - Install MSP dialog box lets you specify the location of the MSP file, command line
parameters, and executable security level.
140 ZENworks 10 Configuration Management Software Distribution Reference