Unable to set security descriptor on global package files on App-V client upgrade

in Applications on App-v

If you are deploying the App-V ADM Template to manage your App-V 4.5 clients you may need to consider the timing of deploying of Group Policy settings versus deployment of the client. The App-V ADM Template whitepaper recommends deploying the template after you have deployed the client.

If you deploy the 4.5 client settings to existing 4.2 clients, you may encounter this dialog box when upgrading to 4.5:

The message appears to be completely unrelated to the cause, but if you remove the registry settings from HKLM\SOFTWARE\Microsoft\SoftGrid\4.5, the upgrade will complete successfully.

There are a couple of ways to avoid this scenario:

  1. Add KEEPCURRENTSETTINGS=1 to the command line when installing the client, as recommended in the whitepaper. This will ensure that setup honours any pre-existing settings.
  2. Use a WMI filter to ensure that the Group Policy object that manages the App-V 4.5 clients, does not apply until after the client has been installed.

Create a new WMI filter in the GPMC with this query:

SELECT * FROM Win32_Product WHERE (Caption = "Microsoft Application Virtualization Desktop Client" AND Version = "4.5.0.1485")

Your WMI filter should look something like this and your GPO will only apply once the App-V 4.5 client has been installed: