Environment
Novell ZENworks Configuration Management 11.2
Situation
In bundle configuration, using the "Grant administrator privilege to user during installation" option is demoting users that were previously part of the Administrator group.
Cause
After the bundle installation, the user gets removed from the Administrator group. It was seen in the debug zmd-messages.log with 'Reducing privileges for user admin1' as below:
[DEBUG] [12/12/2012 16:22:15.214] [1860] [ZenUserDaemon] [5] [] [ZMD] [] [Adding new serializer: MsiActionHandlerOptions] [] []
[DEBUG] [12/12/2012 16:22:15.292] [1860] [ZenUserDaemon] [5] [] [MsiActionHandler] [] [Password obtained is correct for user admin1] [] []
[DEBUG] [12/12/2012 16:22:15.292] [1860] [ZenUserDaemon] [5] [] [MsiActionHandler] [] [Launching: msiexec /i "C:\Program
Files\Novell\ZENworks\cache\zmd\ZenCache\c611557a-6602-40f0-8fb4-ed0d5dbd9c98\CodeBlocks.msi" /qn] [] []
[DEBUG] [12/12/2012 16:22:15.558] [1860] [ZenUserDaemon] [5] [] [MsiActionHandler] [] [Reducing privileges for user admin1] [] []
[DEBUG] [12/12/2012 16:22:15.558] [1860] [ZenUserDaemon] [5] [] [ZenCommon] [] [GroupName in getLocalizedGroupName : Administrators, wellKnownGroup : 1] [] []
[DEBUG] [12/12/2012 16:22:15.573] [1860] [ZenUserDaemon] [5] [] [ZenCommon] [] [Localized group name is 'Administrators'] [] []
[DEBUG] [12/12/2012 16:22:43.435] [1860] [ZenUserDaemon] [5] [] [MsiActionHandler] [] [Finished (err: 0) waiting for: msiexec /i "C:\Program
Files\Novell\ZENworks\cache\zmd\ZenCache\c611557a-6602-40f0-8fb4-ed0d5dbd9c98\CodeBlocks.msi" /qn] [] []
[DEBUG] [12/12/2012 16:22:44.012] [1860] [ZenUserDaemon] [5] [] [ZMD] [] [Adding new serializer: ActionResult] [] []
[DEBUG] [12/12/2012 16:25:29.013] [1792] [explorer] [16] [] [NalRedir] [] [GetAppManager() called - False False (thread 16)] [] []
[DEBUG] [12/12/2012 16:22:15.214] [1860] [ZenUserDaemon] [5] [] [ZMD] [] [Adding new serializer: MsiActionHandlerOptions] [] []
[DEBUG] [12/12/2012 16:22:15.292] [1860] [ZenUserDaemon] [5] [] [MsiActionHandler] [] [Password obtained is correct for user admin1] [] []
[DEBUG] [12/12/2012 16:22:15.292] [1860] [ZenUserDaemon] [5] [] [MsiActionHandler] [] [Launching: msiexec /i "C:\Program
Files\Novell\ZENworks\cache\zmd\ZenCache\c611557a-6602-40f0-8fb4-ed0d5dbd9c98\CodeBlocks.msi" /qn] [] []
[DEBUG] [12/12/2012 16:22:15.558] [1860] [ZenUserDaemon] [5] [] [MsiActionHandler] [] [Reducing privileges for user admin1] [] []
[DEBUG] [12/12/2012 16:22:15.558] [1860] [ZenUserDaemon] [5] [] [ZenCommon] [] [GroupName in getLocalizedGroupName : Administrators, wellKnownGroup : 1] [] []
[DEBUG] [12/12/2012 16:22:15.573] [1860] [ZenUserDaemon] [5] [] [ZenCommon] [] [Localized group name is 'Administrators'] [] []
[DEBUG] [12/12/2012 16:22:43.435] [1860] [ZenUserDaemon] [5] [] [MsiActionHandler] [] [Finished (err: 0) waiting for: msiexec /i "C:\Program
Files\Novell\ZENworks\cache\zmd\ZenCache\c611557a-6602-40f0-8fb4-ed0d5dbd9c98\CodeBlocks.msi" /qn] [] []
[DEBUG] [12/12/2012 16:22:44.012] [1860] [ZenUserDaemon] [5] [] [ZMD] [] [Adding new serializer: ActionResult] [] []
[DEBUG] [12/12/2012 16:25:29.013] [1792] [explorer] [16] [] [NalRedir] [] [GetAppManager() called - False False (thread 16)] [] []