update Global Protect VPN using sccm

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

update Global Protect VPN using sccm

L1 Bithead

trying to deploy GP VPN client to users using sccm and I am seeing 

 

installation of global protect could not be completed because these applications were running

 

Globalprotect Client

GlobabProtect service

 

to install successfully, please these applications and then retry the installation 

Thanks
2 REPLIES 2

Cyber Elite
Cyber Elite

@gbakkali,

Sounds like you're trying to do the installation on a machine that already has GlobalProtect installed? Is that your intent here or are you trying to just have a required deployment? I have more luck doing this with PowerShell than trying to have SCCM utilize the MSI itself.
Detection

# Detect if GlobalProtect is installed, return True if yes.
$SoftwareTitle = "GlobalProtect"

$ItemProperties = Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*" | Select-Object DisplayName,UninstallString

foreach ($Item in $ItemProperties)
    {
        $DisplayName = $Item.DisplayName
        $UninstallString = $Item.UninstallString
        if($DisplayName -like "*$SoftwareTitle*")
            {
            #Write-Host "$DisplayName ------------------ $UninstallString"
            Write-Host "True"
            }
        else
            {
            }
    }

Installation

Start-Process .\GlobalProtect64.msi -wait -ArgumentList '/q'
Set-ItemProperty -Path "HKLM:\SOFTWARE\Palo Alto Networks\GlobalProtect\PanSetup" -Name "Portal" -Value "MyPortalAddress"

 * Note: Add any other registry keys that your deployment requires within the installation script. Can be helpful depending on what you're setting to restart PanGPS afterwards.

 

Uninstall

$ItemProperties = Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*" | Select-Object PSChildName,DisplayName,UninstallString

foreach ($Item in $ItemProperties)
    {
        $DisplayName = $Item.DisplayName
        $UninstallString = $Item.UninstallString
        $PSChildName = $Item.PSChildName
        if($DisplayName -like "*$SoftwareTitle*")
            {
            cmd.exe /c "MsiExec.exe /x$PSChildName /quiet"
            }
    }

L1 Bithead

I am trying to push a new updated version to clients that has already GP install 

Thanks
  • 213 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!