Update-ADTDesktop, Failed to refresh the Desktop

The Toolkit General Discussion
1

Hello,
I'm having trouble installing MSI files or other applications when the "Update-ADTDesktop" function is called on a "KIOSK" workstation with a "Service Account" user session open. Since the service account has no permissions, the installation fails:

[Pre-Install] :: Failed to refresh the Desktop and the Windows Explorer environment process block.

Error Record:

Message: Exception occurred when calling "Open" with "0" argument(s): "This program is blocked by a Group Policy. For more information, contact your system administrator."

Can this issue be addressed in future releases, or how can "Update-ADTDesktop" be disabled without adding tests throughout the script and thus requiring multiple commands to be configured with "NoDesktopRefresh"?

I think we should add a check in the module and disable the execution of Update-ADTDesktop for "KIOSK" workstations or user accounts with very restricted privileges.

Note that KIOSK workstations are managed by Intune.

2
1 Like
3

For the lazy, there is a -NoDesktopRefresh parameter for Start-ADTMsiProcess

If specified, doesn't refresh the desktop and environment after successful MSI installation.

1 Like