Using SCCM 2007 to deploy Adobe Flash Updates

Posted: 4th April 2011 by Seth Killey in SCCM

UPDATE: Starting with Flash 11.2, Adobe now has a command for silently running a background update.  You can read more at http://helpx.adobe.com/flash-player/kb/administration-configure-auto-update-notification.html

I too find Adobe’s parameter naming convention to be contradictory.  However, from what I gather you should use the following in mms.cfg to disable the annoying user prompt while enabling background updates when possible.  For the record, I think I may just keep my settings per the original post below.  This allows me to download the update once and use SCCM for reporting purposes to see what installs failed.

AutoUpdateDisable=1
SilentAutoUpdateEnable=0

==========================================================

Here’s some instructions for updating staff computers to the latest version of Adobe Flash Player using Microsoft System Center Configuration Manager 2007. These steps will allow you to silently deploy Flash and then I’ll cover how to disable automatic updates so users aren’t prompted when a new version is available.

1) Go to http://www.adobe.com/products/players/fpsh_distribution1.html and apply to distribute Flash Player
2) Once approved, follow the link to download the appropriate .msi file
3) On your SCCM server setup your software distribution package according to your environment.  As far as program parameters, make sure you specify the /qn switch for a quiet unattended installation
4) To disable future updates, navigate to %SYSTEMROOT%\System32\Macromed\Flash and create a file called mms.cfg.  Inside this text file include the following line: AutoUpdateDisable=1

Going forward you can easily refresh the package as new versions are released.

  • First thing to check is if the advertisement was created with a mandatory schedule which hasn’t expired yet.
  • Select the package and launch the Manage Distribution Points wizard, select the option to Update Distribution Points and complete the wizard. Verify if the new version of the package and the updated files have reached the distribution point.
  • Now go to the advertisement and click the action to Rerun the advertisement.
  1. Kari Kaitala says:

    Problem usually isn’t that FP announces new versions. Usually internet pages won’t simply work if you don’t have latest FP.

  2. Seth says:

    Not suggesting you don’t update Flash. However, many corporate environments keep end users on standard user accounts. Users would then be prompted to update flash which will ultimately fail without administrative privileges.

  3. Shabeer Ahamed says:

    How the updates will be installed without administrator previleges even if we set SilentAutoUpdateEnable=0.

    In our company, users do not have administrator previleges

  4. Seth says:

    Shabeer, my understanding is that if you enable background updates, administrative privileges are not needed by the end user. However, for right now I still update client computers using the SCCM client which executes the update with administrative privileges. The user just sees a brief message saying that a new program is scheduled to run in 2 minutes and then runs in the background.

  5. Harsh says:

    Hey Seth,

    I need your help, We have around 150 employees, and i want install latest version of Flash Player and Adobe Reader then I want to stop automatic update on user end.

    I have gone through ur article but I have few questions.

    Once i download latest version of flash, i will save it on our SCCM server then how can i stop automatic update on all user(150 desktop)

  6. BA says:

    For all of the people who need help installing from sccm 2007 and disable updating only need to create a package for Adobe Flash and then add a program with the follow command:

    install_flash_player_11_active_x.exe -install -au 2

    This should automatically create and update the mms.cfg. It does require the download of the exe file instead of the msi.