Jump to content


DigitalJay

Application Catalog will not allow non-admins to install applications

Recommended Posts

Greetings all. I have used this site for months with our SCCM roll out, and I love this page. I hate asking for help, as I like to solve problems myself, but I am completely stumped on this issue.

 

We have the following servers (all are running Server 2012 R2) :

SCCMPS01 = Primary SCCM Current Branch server (upgraded from SCCM 2012 R2)

SCCMDP01 = Distribution Point

SCCMSC01 = WSUS & Application Catalog (both services)

 

I am trying to get the Application Catalog to work. On my laptop (Windows 10 1511), if I sign into the catalog website (IE 11) and try to install software, I get "You can browse the list of software in the Application Catalog and view your list of software requests. However, to install or request applications from the Application Catalog, the Configuration Manager client must be correctly configured on your computer and you must use a browser that is compatible with the Application Catalog".

 

I checked the Deafult Client Settings, which are the only ones we have currently. I checked and ensures that All Users are allowed to install software, that Silverlight was elevated, and that the URL of the website was trusted. The url for the AppCatalog is using the Netbios name, but I have tried that and the FQDN over the past few days. I also have ensured that both versions are in the Trusted Site Zone list.

 

In the ConfigMgrSoftwareCatalog.log, I see "ApplicationDetailViewModel.InstallAppProgression-Error:Progress step CanUserinstall: Could not communicate with the client control properly. The application does not have elevated permissions. Unable to communicate with the client." followed by "ApplicationDetailViewModel.UpdatePageView:PageViewMode changed to:FastInstallError" every time I try to install an application in the store (currently only have the latest Notepad++ msi in there).

 

My standard account does not have local admin rights. But from my understanding, this is not required if "All Users" is selected in the Client Settings.

 

In my research, I read on https://technet.microsoft.com/en-us/library/gg682070.aspx#BKMK_CertificatesSilverlight5that in SCCM 2012 R2, when you install the Application Catalog website point site system role, the client also installs a Microsoft signing certificate in the Trusted Publishers computer certificate store on each Configuration Manager client computer. I checked my laptop's Trusted Publisher store and do not have any certs in that store.

 

Has anyone got any ideas that I can try? I have removed and installed the AppCat points a couple of times over the past few weeks with no success. I have followed the step by steps on this page for installation, as well as technet and still have had no success. I know I am missing something.

 

Thank you all in advance for your help.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...


×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.