Has anybody had any luck making a working elevation rule for Scribe?
When I install it in Program Files:
I receive a Policypak elevation prompt
After I create an elevation rule, I receive an error from the application: “The requested operation requires elevation”
When I install it to appdata:
I still receive a Policypak elevation prompt
When creating an elevation rule, I still receive “The requested operation requires elevation” error.
I can get it to run when I change my elevation rule to an allow-and-log rule.
Scribe does work when I run it as administrator, using the stock “Run As Administrator” in Windows. That at least lends some hope that there might be a way to get it to work. Should I be looking into custom tokens, or something along those lines?
Different application behave differently when elevated. Some apps will not run when a standard account is elevated to to run the app when it’s not designed to. Because you stated that scribe runs with an “Allow and Log” rule, it makes me think this is one of those apps.
Question: What is the “PolicyPak Elevation Prompt” you are referring to? I assume this is the Admin Approval prompt?
I’m going to make an assumption here and assume you are running both SecureRun and Admin Approval. SecureRun is blocking the application and thereby presenting the Admin Approval window. But it could also be that Admin Approval is configured to force all installers to present the Admin Approval window.
To know for sure if Scribe actually requires elevation (and not just forcing Admin Approval because of SecureRun blockage or an Admin Approval setting), run the installer on a computer without PolicyPak (or just stop the PolicyPak services). If you get a standard UAC prompt - it requires elevation. Opena ticket through the Netwrix Support Portal and we’ll help figure out what is required. If you don’t, then it’s just something forcing Admin Approval to prompt for permission to run. You should be good to stick with the Allow and Log rule.
Hopefully this helps explains what might be happening. Let us know. Thanks.
We aren’t running secure-run in our environment, and we aren’t forcing admin approval for all installers.
I can run install on a test-PC, if you’d like, but they’re pretty explicit about wanting admin rights. For example, on my “appdata” / “allow and log” install, the initial sign-in screen shows “limited installation”:
Fair enough, Brent. Thank you for that extra info. At this point we’ll need to create a support ticket to dig into what policies are required for this particular application.
When you can please open a new ticket through the Netwrix Support Portal and we’ll help you find the solution.
