Repacking VPN
I am trying to repackage a Forticlient VPN to distribute out through KACE and upgrade users VPN clients they have installed. AppDeploy creates the msi just fine but when I test it on a clean machine, I get an error that I cannot open the VPN with admin rights. I am the domain admin and I am signed in as such so that isnt the problem. Could someone give me some kind of idea on what could be wrong? I have to get this out to 100+ users and I really dont want to manually upgrade all their machines.
3 Comments
[ + ] Show comments
Answers (4)
Please log in to answer
Posted by:
SMal.tmcc
8 years ago
I figure you are talking about distributions using the k1000. If you are trying to deploy this as a MI it runs as system not admin. If you need to distribute as an admin you need to use a kscript
Posted by:
lulapolvo80
7 years ago
Hi i need help configuring the settings to VPN only. does any one now how to do it with Orca?
Posted by:
rileyz
8 years ago
Just to be clear - you're just testing the package and still having problems?
Do you have a support contract with FortiClient? If you do, you will have access to there Offline Installers, you should be able to use this for deployment (hopefully). Don't reinvent the wheel if you don't need too.
Its basicly a MSI wrapped in a exe, I think they did it so they could trigger a virus scan to make sure the system is clean before the VPN get layed down, good security i guess.
Or, you can download it from here, its just uploading now, so give it some time.
https://www.dropbox.com/sh/liiq6e46vtgrkxl/AAAeC1D3dgyC37-Trz25Vf_Ma?dl=0
The msi is signed, so will be safe/tamper poof - Signed by Forti Something Canada Whatever.
I will delete this file after a few days.
Do you have a support contract with FortiClient? If you do, you will have access to there Offline Installers, you should be able to use this for deployment (hopefully). Don't reinvent the wheel if you don't need too.
**Update
Download the online installer and start it, when you get to the install stage, the MSI bit where you click next, choose what you want etc - stop. Have a look in C:\ProgramData\Applications\Cache\{B5E0B33F-91D4-408B-BE40-46BCA75F3914}\5.4.0.0780 for the MSI. You can use that to deploy, come back to us if you need a hand configuring the settings, ie VPN or Complete.
Download the online installer and start it, when you get to the install stage, the MSI bit where you click next, choose what you want etc - stop. Have a look in C:\ProgramData\Applications\Cache\{B5E0B33F-91D4-408B-BE40-46BCA75F3914}\5.4.0.0780 for the MSI. You can use that to deploy, come back to us if you need a hand configuring the settings, ie VPN or Complete.
At a basic deployment, you can go
msiexec /i FortiClient.msi /qb
Change the /qb to qn when adding to KACE, use /qb when testing so you can see msi errors, otherwise you wil need to read logs. You can add logging with
msiexec /i FortiClient.msi /qb
Change the /qb to qn when adding to KACE, use /qb when testing so you can see msi errors, otherwise you wil need to read logs. You can add logging with
/l*vx C:\Windows\Logs\NameofYour.log
Its basicly a MSI wrapped in a exe, I think they did it so they could trigger a virus scan to make sure the system is clean before the VPN get layed down, good security i guess.
Or, you can download it from here, its just uploading now, so give it some time.
https://www.dropbox.com/sh/liiq6e46vtgrkxl/AAAeC1D3dgyC37-Trz25Vf_Ma?dl=0
The msi is signed, so will be safe/tamper poof - Signed by Forti Something Canada Whatever.
I will delete this file after a few days.
Comments:
-
Yeah, just testing. The problem comes is while testing the package on a clean machine. After it packages up great, when I try it on the clean machine it installs but when you try to click on the icon and open it, it says you must have admin rights to do it. Its weird since I am signed in as a domain admin. - droehrig 8 years ago
-
Read my updated post pls. - rileyz 8 years ago
-
Ok thank you for your help. I will take a look at this (I downloaded the file). We have support for our Fortigate but we are using the free Forticlient that we can get from Fortinet through our Fortigate. I am sure I will need more help so I will be back as soon as I can. Thank you so much for all your help! - droehrig 8 years ago
-
Ok update, the MSI pushes out fine through KACE but it doesnt upgrade the current version that is on the machine. So all the users will have to manually do the configuration. Unless someone knows how to push out the configuration to the users like using the registry setting for it (although tried copying it to a clean machine and import it and it wouldnt let me). Just trying to find a easy way to upgrade all the remote users VPN without having to hold hands and walk them through it. - droehrig 8 years ago
-
What do you mean by it does not upgrade the current version? A) both versions are installed at the same time. B) It was upgraded by the new version but missing settings.
Whooa, upgrade over VPN is a bit of risk, if it goes wrong... lol. Anyway, I recommend a support doc for users so they can reconfig if the update goes wrong.
If you let me know the registry settings I can whip you up a mst (transform) for the installer. You must give me the correct setting tho - what i mean by that is TEST the settings! ie if you do a reg import of the settings, will it set it up correctly.
*im not working at moment, lucky for you I have free time. - rileyz 8 years ago
Posted by:
droehrig
8 years ago
Ok, gotcha on that. Yes we are using k1000. Not trying to sound stupid but what is a kscript? Is it a KACE script? This is my first time using the AppDeploy so I am just learning.
Comments:
-
yes use the scripts page and you can specify the user to push with in the "Windows Run As" section. The same holds true for scripts if you use the default settings it pushes as system. - SMal.tmcc 8 years ago
I've done this but need to get VPN only. Any Help? - swilliams83 7 years ago