Packeting and distribution SAP GUI 7.3

[former_member283158]

Hi Guys,

i need to change the 'SAP GUI' from 7.20 to 7.30 for 50 users.

I'm trying for create an autoinstall package, I already got the program to  make it.

I need to know if i can insert parametrization kind of security for example to set the 'grant always allows' for the file,

in the way that the user not need to choose it.

There is something else i need to know when i create the autoinstall file ?

Any kind of suggestion is well done.

Thx

Rino

[Former Member · Accepted solution]

Hi Rino

You can, as Jude stated out, disable the security feature. I did this via batch script which we published via policy and set the following entry in the registry:

[HKEY_LOCAL_MACHINE\Software\SAP\SAPGUI Front\SAP Frontend Server\Security] (for 32 bit systems) or [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SAP\SAPGUI Front\SAP Frontend Server\Security] (for 64 bit systems)

with REG_DWORD SecurityLevel = 0

You can also create an on-end-install script on your installation server:

NwEngine.Shell.SetRegValue “HKEY_LOCAL_MACHINE\SOFTWARE\SAP\SAPGUI Front\SAP Frontend Server\Security\SecurityLevel”, “REG_DWORD”, “0″

Please keep in mind the path is different on 64 bit-systems (add Wow6432Node).

You can also have a look at note 1483525 and the security guide.

Hope this helps.

Regards

Jann

[former_member283158 · Accepted solution]

Thx Jann,

i don't have the sciprt that you describe in HKEY_Local_Machine, I have it only in HKEY_Current_User.

What is the command if I need to add a row in the registry key?

For my curiosity what kind of language has used by event script?

Thx

Rino

[Former Member · Accepted solution]

Hi Rino

All configuration settings for the system connections are stored in the registry. Individual user settings are in HKEY_CURRENT_USER

Configuration settings which have been set up by an administrator for a group of users are under HKEY_LOCAL_MACHINE

You can only save information in HKEY_LOCAL_MACHINE if you have administrator authorization. Values here take precedence over user values.

I guess the scipt is written in some kind of VB, but I am not a coder. I just took this one from the documentation of the installation server.

However, the following scipt (I run it as an "on-end-install" script) adds the value to your registry:

NwEngine.Shell.SetRegValue “HKEY_LOCAL_MACHINE\SOFTWARE\SAP\SAPGUI Front\SAP Frontend Server\Security\SecurityLevel”, “REG_DWORD”, “0″

If you need further help, please let me know.

Kind regards

Jann

[bonnie_mu · Accepted solution]

Hi Rino,

Jann is right, you can add the script into the GUI installation package, then dispatch the package to end users.

And you can click the "Insert Script Sample" to get the example script.

The default action of the GUI security option is stored in the following  registry:
[HKEY_CURRENT_USER/Software/SAP/SAPGUI Front/SAP Frontend  Server/Security]

DefaultAction(Type:DWORD)
0 allow
1 ask
2 deny

SecurityLevel(Type:DWORD)
0 disabled
1 customized
2 strick deny

Best Regads,

Bonnie

[former_member283158]

Solved!

I added this string:  NwEngine.Shell.SetRegValue “HKEY_LOCAL_MACHINE\SOFTWARE\SAP\SAPGUI Front\SAP Frontend Server\Security\SecurityLevel”, “REG_DWORD”, “0″    both in "on end installation" and in "on end update" in way that, if the string does not exist in the registry key, the installation write it.

Thx for all for your cooperation.

Rino

[Former Member]

I am glad I could help you!

Jann

[Sriram2009]

Hi Rino

1. We have installed the New SAPGUI by using the below script more than 1000 pc's in our network(By using SCCM & ADS) Kindly go thru the below mention bat  file

__________________________________________________

cd\
c:
taskkill /IM saplogon.exe /F
taskkill /IM saplgpad.exe /F

# used for kill the SAPGUI logon pad

cd Program Files\sap\SapSetup\setup

nwsapsetup /uninstall /all /nodlg

# Stop the all Old sapgui
cd\

cd program files\sap
move FrontEnd old1_FrontEnd1

# rename the old folder

net use s: /delete
net use s: \\(server share)\SAPGUI_730 (Example share volume )

S:\SAPGUI730\NW_7.0_Presentation\PRES1\GUI\WINDOWS\WIN32\Setup\NwSapSetup.exe /Silent /Package="SAPGUI_730"

# Create the New installation package

net use s: /delete

________________________________________________________________

2. SAPGUI Security

  Disable the security settings

Thanks

Sriram

[jude_bradley]

Hello Rino,

There is the security guide as part of the documentation of the SAPGUI install.

You can either disable the security option altogether, or customize it.as you are doing above.

The SAP GUI Security Guide   ( SAP_GUI_Security_Guide.pdf )

you will find in the   DOCU   folder on the SAP GUI Installation CD.