sccm: don't downgrade zoom

js2010 191 Reputation points
2021-01-22T16:53:42.207+00:00

How do I keep sccm from downgrading zoom? It's an application under \Software Library\Overview\Application Management\Applications

I only want it to install if the current version on the client is older or not there.

Microsoft Configuration Manager Application
Microsoft Configuration Manager Application
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Application: A computer program designed to carry out a specific task other than one relating to the operation of the computer itself, typically to be used by end users.
474 questions

5 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Amandayou-MSFT 11,056 Reputation points
    2021-01-28T05:19:07.757+00:00

    Hi @js2010 ,

    Thanks for your feedback. Based on my testing, to achieve our goal, we could use multiple clauses to build up the detection method. For example, if we want to deploy Zoom 5.3, we would put the product code of Zoom 5.3 and above (using OR Connector) together.

    Here is the testing screenshot for your reference:

    61281-1282.png

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.
  2. Amandayou-MSFT 11,056 Reputation points
    2021-01-25T07:27:12.157+00:00

    Hi @js2010 ,

    We could use detection rule to install application on the specific clients.

    Please install the zoom application on the client which the version is older or does not install the application, and check the key and the value in registry.
    Here is the screenshot we could refer to:

    60125-1256.png

    About detection rule, kindly refer to this article:
    https://video2.skills-academy.com/en-us/mem/configmgr/apps/deploy-use/create-applications#bkmk_detect-rule

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments
  3. js2010 191 Reputation points
    2021-01-25T20:01:21.177+00:00

    Thanks. I was doing it as msi, but I had "version -ge 5.3". It seem tedious that I would have to do this for every software so nothing gets downgraded.

    60362-image.png

    0 comments
  4. js2010 191 Reputation points
    2021-01-25T21:41:07.267+00:00

    It still downgraded it. I don't get it.

  5. js2010 191 Reputation points
    2021-02-02T16:40:44.007+00:00

    Why can't I edit my responses?

    Does powershell script application autodetection simply not work?

    EDIT: I fixed it by changing the client settings powershell executionpolicy to bypass. I would set it to remotesigned, but that's not an option. I don't think whoever made this setting understands what executionpolicy is for, to prevent the accidental execution of scripts. Powershell scripts in the "run script" area run with execution policy remotesigned, which makes more sense.

    63540-image.png 

    Procmon:  "C:\WINDOWS\system32\WindowsPowerShell\v1.0\PowerShell.exe" -NoLogo -Noninteractive -NoProfile  -ExecutionPolicy AllSigned "& 'C:\windows\CCM\SystemTemp\b61b4fc1-20c9-488c-b87d-6012638b9868.ps1'"  
  
AppDiscovery.log:  C:\windows\CCM\SystemTemp\b61b4fc1-20c9-488c-b87d-6012638b9868.ps1 is not digitally signed. You cannot run this script  

AppDiscovery.log: Deployment type detection failed with error 0x87d00327

    Here's an example of a script from c:\windows\ccm\systemtemp. It doesn't look like it's signed.

    EDIT: This powershell script works now. 

    get-package zoom