Adobe Flash GPO Deploy error “InstallAx.exe”

Update: An updated script has been posted with some improvements, here.

“The file ‘installax.exe’ is not marked for installation”

This post details how to fix this issue, when Flash won’t uninstall correctly from a GPO deployment.

Adobe Flash PlayerThe Problem

I deploy the latest Flash versions through Group Policy, because it’s quick and simple. Some time ago, there was a version of Adobe Flash Player (10.1.5xx I think) that began causing problems with later versions.

What would happen is upon upgrades to Flash being pushed out, when updating the previous version an error would be logged. The GPO would successfully update the player, however it would continue to try updating every day, every time the computer started.

This occurred for both Windows 7 and Windows XP, and got to be quite annoying for my users.

When trying to update manually, the error that appeared was:

"The file 'installax.exe' is not marked for installation"

Here’s how I resolved it:

Based on various forum reports (http://forums.adobe.com/message/3124297) it seemed to be a problem with Flash leftovers.

On a test machine, I uninstalled all Flash versions, and then did a registry search, and removed these items:

[HKEY_CLASSES_ROOT\Installer\Features\4E867BFF724E3554CB631AF1E5269AD4]
[HKEY_CLASSES_ROOT\Installer\Features\6D98A6046E9005543B07D873D6BD65EB]
[HKEY_CLASSES_ROOT\Installer\Products\4E867BFF724E3554CB631AF1E5269AD4]
[HKEY_CLASSES_ROOT\Installer\Products\6D98A6046E9005543B07D873D6BD65EB]
[HKEY_CLASSES_ROOT\Installer\Features\00B86459180C72B4CA69A0A21353E906]
[HKEY_CLASSES_ROOT\Installer\Products\00B86459180C72B4CA69A0A21353E906]

These keys are a mix between Windows 7 x64 and Windows XP.

After that I manually installed the latest version, and it was successful. Now I needed to write a script that would remove these values and install the latest version.

The Script

I wanted to run this as a Shutdown script through group policy, rather than trying to push it out to all our clients through a scheduled task or something. This way it would eventually get applied to everyone. I think I’ll wait a period of time, and then disable this script and go back to a GPO msi install.

I made extensive use of echo and pause statements to ensure it was being applied correctly. Because I didn’t want a script for Windows 7 x64 and a separate one for Windows XP, there’s a bit of logic thrown in to check for version.

Here’s the script:

:: Adobe flash giving "installax" errors when updating from GPO :: This batch file will remove those errors and install 10.1.102.64
:: This batch file should be run from a shutdown or startup script

:: Check if Windows 7 or Windows XP, and goes to the proper section IF EXIST "C:\Program Files (x86)" goto :Win7Check
goto :WinXPCheck

:Win7Check
:: Check if the latest version is installed already in Windows 7. If so, exit. Otherwise install Set "AdobeVersion=" & setlocal & Set "$V="
:: Look in the Uninstall area of registry, where the installed version of Flash player is listed Set "RegKey=HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX"
Set "RegItem=DisplayVersion"
:: Take the output of a REG QUERY to the location above, and put it into the AdobeVersion variable
For /f "tokens=3*" %%! in (
   '2^>nul Reg.exe QUERY "%RegKey%" /v "%RegItem%" ^|(
   Findstr.exe /ri "\<%RegItem%\>"^)') Do Set "$V=%%!"
endlocal & call Set "AdobeVersion=%$V%"

:: If what is currently installed matches latest version, exit. Otherwise, go to install section
if "%AdobeVersion%" == "10.1.102.64" goto :exit
goto :Install

:WinXPCheck
:: Check if the latest version is installed already in Windows XP. If so, exit. Otherwise install Set "AdobeVersionXP=" & setlocal & Set "$T="
:: Look in the Uninstall area of registry, where the installed version of Flash player is listed Set "RegKeyXP=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX"
Set "RegItemXP=DisplayVersion"
:: Take the output of a REG QUERY to the location above, and put it into the AdobeVersion variable For /f "tokens=3*" %%! in (
   '2^>nul Reg.exe QUERY "%RegKeyXP%" /v "%RegItemXP%" ^|(
   Findstr.exe /ri "\<%RegItemXP%\>"^)') Do Set "$T=%%!"
endlocal & call Set "AdobeVersionXP=%$T%"

:: If what is currently installed matches latest version, exit. Otherwise, go to install section
if "%AdobeVersionXP%" == "10.1.102.64" goto :exit
goto :Install

:Install ::Uninstall current versions of Flash from DFS share start /wait \\domain.com\apps\Public\General\adobeflash\uninstall_flash_player.exe -uninstall

:: Remove offending registry entries causing the error (mentioned below) regedit /s \\domain.com\apps\Public\General\adobeflash\flash_remove_fix.reg

:: Install latest version of Flash start /wait \\domain.com\apps\Public\General\adobeflash\install_flash_player_10.1.102.64.exe -install
goto :exit


:exit

The registry file mentioned contains this (what is at the top of this post, with the removal switch):

[-HKEY_CLASSES_ROOT\Installer\Features\4E867BFF724E3554CB631AF1E5269AD4]
[-HKEY_CLASSES_ROOT\Installer\Features\6D98A6046E9005543B07D873D6BD65EB]
[-HKEY_CLASSES_ROOT\Installer\Products\4E867BFF724E3554CB631AF1E5269AD4]
[-HKEY_CLASSES_ROOT\Installer\Products\6D98A6046E9005543B07D873D6BD65EB]
[-HKEY_CLASSES_ROOT\Installer\Features\00B86459180C72B4CA69A0A21353E906]
[-HKEY_CLASSES_ROOT\Installer\Products\00B86459180C72B4CA69A0A21353E906]

This script successfully runs on Windows 7 and Windows XP, and merely exits when the latest version is already done.

Check what version of Adobe Flash Player you have, and what is current:

http://www.adobe.com/software/flash/about/

Uninstall Utility used to remove Flash Player

http://kb2.adobe.com/cps/141/tn_14157.html

28 thoughts to “Adobe Flash GPO Deploy error “InstallAx.exe””

  1. Hi, just wanted to say thanks for the script, this problem only just reared its head on a small network I look after – the above saved me a while doing it manually.

  2. We don’t have any Windows 7 32bit machines, so it hasn’t been tested on that. However, the version check only compares the name of the Program Files directory, and then only matters for the relevant registry check.

    Because of this, I would assume Windows 7 32bit would work exactly the same as Windows XP, since the paths are the same. Its all the same executable for Flash.

  3. Thanks for sharing, had the same problem!

    The simple way to remove the registry entries is with “Group Policy Preferences” (run once), no scripts.

  4. This looks like it should resolve our issue here! I have one quick question though. Do we need to update the .reg file with the IDs for newer versions of Adobe Flash as they are released so that it can remove them from the registry properly? I searched for all of those and they are not located on my computer. Or is that .reg file containing only the versions of Adobe Flash with the bungled uninstaller and thus never needs to be updated?

  5. I can’t say for all cases, but I know in my case those registry entries applied to the specific version with the problem.

    I let the shutdown script run for a few weeks to make sure it applied to all my desktops and laptops that were coming and going, and then disabled it and went back to the standard Flash msi install through GPO. I’ve been keeping Flash up to date since then, and the problem hasn’t reoccurred.

    Since those entries aren’t there for you, I’d search the HKCR\Installer key for any reference to either “Adobe” or “Flash”, make note of those keys, and then remove them one by one to determine which one is the culprit.

  6. This worked for me on 10.2.159.1 (attempting to uninstall 10.2.153.1) – at least in manual testing. I have yet to roll it out via GP.

    I was getting errors in GP on install of %%1274 and the ‘not marked for install’ running the MSI. The existing version was uninstalled, so all I had to do was remove the reg keys and install.

    FYI, for the flash plugin installer for firefox to work you need to add:
    [-HKEY_CLASSES_ROOT\Installer\Products\371245C90F69D5349AC564C8AA7CE50A]
    to the reg key remove list.

  7. Thank you for pointing me in the right direction Mr Miles.
    I found the entries for our problems were different ones. Most of our computers were fine but some had problems with Flash Plugins and some with Activex and some both.
    The best way to fix a computer or set of computers is to first uninstall all Flash and then note all remaining Flash entries in HKEY_CLASSES_ROOT\Installer\Products.
    These entries can vary based on what versions got corrupted on your systems.
    I found that Installer\Features entries didn’t matter for us.
    This ended up being the fix for us for both Plugin and Activex. We tested it and are deploying it via GPO.

    Windows Registry Editor Version 5.00

    [-HKEY_CLASSES_ROOT\Installer\Products\371245C90F69D5349AC564C8AA7CE50A]
    [-HKEY_CLASSES_ROOT\Installer\Products\6205276E056AC94498B76D7B5AEE0A85]
    [-HKEY_CLASSES_ROOT\Installer\Products\6F8CE5C1F5C5F12458EB19B9D5C0DAC4]
    [-HKEY_CLASSES_ROOT\Installer\Products\FB0D7F53BA803E244A30FA7927CA12A6]

    [-HKEY_CLASSES_ROOT\Installer\Products\30D9D84132D5F4D45B0DAB06034CD5FC]
    [-HKEY_CLASSES_ROOT\Installer\Products\C460100B160DEAB4091314A638D85563]
    [-HKEY_CLASSES_ROOT\Installer\Products\4E867BFF724E3554CB631AF1E5269AD4]

  8. I second what Mark wrote. For us it was also neither the Installer\Features but rather a legacy Installer\Products entry that was corrupted. Once it was deleted, the install went perfect.

  9. This post definitely got me going in the right direction. For me, it was a custom transform I’d applied to the Flash installer for a previous version, and it was also in HKCR\Installer\Features. Once I removed that I was able to install a new version of Flash.

    I second Frodo’s comment, by the way. Group Policy Preferences has the option for a one-time Scheduled Task which will work quite well for this.

  10. I am currently in the process of fixing this for my environment which is XP 32-bit and 7 32-bit so I am having to make some changes to the way the script above works.

    As we’re fully 32-bit the OS checks need to be slightly different.

    This is what needs to be added to the script kindly posted by jwmiles.

    @echo off
    REM Check Windows Version
    ver | findstr /i "5\.1\." > nul
    IF %ERRORLEVEL% EQU 0 goto ver_XP
    ver | findstr /i "6\.1\." > nul
    IF %ERRORLEVEL% EQU 0 goto ver_Win7
    goto warn_and_exit

    :ver_Win7
    :Run Windows 7 specific commands here
    echo OS Version: Windows 7 (debug line)
    goto end

    :ver_XP
    :Run Windows XP specific commands here
    echo OS Version: Windows XP (debug line)
    goto end

    :warn_and_exit
    echo Machine OS cannot be determined.

    :end

    You would basically need to replace the “echo OS Version…” line with the version specific code found above.

    If I get time, I might post my completed script later.

    By the way:

    This will work for ANY version of Windows. All you need to know is the version number and add another entry accordingly. For example, Vista would be ver | findstr /i "6\.0\." > nul.

    You could even combine the architecture checks in the original script with my code above so if you have multi-OS and multi-architecture something like:

    ver | findstr /i "6\.1\." > nul
    IF %ERRORLEVEL% EQU 0 goto ver_Win7_check

    :ver_Win7_check
    IF EXIST "C:\Program Files (x86)" goto :x64_Win7_check

    You get the idea 🙂

  11. Ok, here’s my completed script which works.

    I have made some changes.

    Key differences:

    * Only checks Windows version number (as opposed to processor architecture)
    * I couldn’t locate the relevant Adobe key within the Uninstall key in the registry, therefore I have changed the registry location which is checked for the current version number.
    * Checks for a more recent version of Flash. I’m installing 10.3.183.10
    * Uses MSIEXEC to install and uninstall the MSI package
    * Uses REG commands built into the batch file rather than calling a separate .REG
    * Finally, copies a preconfigured mms.cfg file to system32\Macromed\Flash folder to disable flash auto-updates. This prevents helpdesk calls from users who are being pestered to install Flash updates whenever they log in.

    The mms.cfg file contains one line: AutoUpdateDisable=1

    The script:

    :: Adobe flash giving "installax" errors when updating from GPO
    :: This batch file will remove those errors and install latest version
    :: This batch file should be run from a shutdown or startup script

    @echo off
    Rem Check Windows Version
    ver | findstr /i "5\.1\." > nul
    IF %ERRORLEVEL% EQU 0 goto ver_XP
    ver | findstr /i "6\.1\." > nul
    IF %ERRORLEVEL% EQU 0 goto ver_Win7

    :ver_Win7
    :Run Windows 7 specific commands here
    Set "AdobeVersion=" & setlocal & Set "$V="
    :: Look in the Uninstall area of registry, where the installed version of Flash player is listed
    Set "RegKey=HKLM\SOFTWARE\Macromedia\FlashPlayerActiveX"
    Set "RegItem=Version"
    :: Take the output of a REG QUERY to the location above, and put it into the AdobeVersion variable
    For /f "tokens=3*" %%! in (
    '2^>nul Reg.exe QUERY "%RegKey%" /v "%RegItem%" ^|(
    Findstr.exe /ri "\"^)') Do Set "$V=%%!"
    endlocal & call Set "AdobeVersion=%$V%"

    :: If what is currently installed matches latest version, exit. Otherwise, go to install section
    if "%AdobeVersion%" == "10.3.183.10" goto :exit
    goto :Install

    :ver_XP
    :Run Windows XP specific commands here
    Set "AdobeVersionXP=" & setlocal & Set "$T="
    :: Look in the Uninstall area of registry, where the installed version of Flash player is listed
    Set "RegKeyXP=HKLM\SOFTWARE\Macromedia\FlashPlayerActiveX"
    Set "RegItemXP=Version"
    :: Take the output of a REG QUERY to the location above, and put it into the AdobeVersion variable
    For /f "tokens=3*" %%! in (
    '2^>nul Reg.exe QUERY "%RegKeyXP%" /v "%RegItemXP%" ^|(
    Findstr.exe /ri "\"^)') Do Set "$T=%%!"
    endlocal & call Set "AdobeVersionXP=%$T%"

    :: If what is currently installed matches latest version, exit. Otherwise, go to install section
    if "%AdobeVersionXP%" == "10.3.183.10" goto :exit
    goto :Install

    :Install
    ::Uninstall current versions of Flash from DFS share
    msiexec /uninstall \\wqeic\netlogon\install_flash_player_10_active_x.msi /quiet

    :: Remove offending registry entries causing the error
    REG DELETE HKEY_CLASSES_ROOT\Installer\Features\4E867BFF724E3554CB631AF1E5269AD4 /F
    REG DELETE HKEY_CLASSES_ROOT\Installer\Features\6D98A6046E9005543B07D873D6BD65EB /F
    REG DELETE HKEY_CLASSES_ROOT\Installer\Products\4E867BFF724E3554CB631AF1E5269AD4 /F
    REG DELETE HKEY_CLASSES_ROOT\Installer\Products\6D98A6046E9005543B07D873D6BD65EB /F
    REG DELETE HKEY_CLASSES_ROOT\Installer\Features0B86459180C72B4CA69A0A21353E906 /F
    REG DELETE HKEY_CLASSES_ROOT\Installer\Products0B86459180C72B4CA69A0A21353E906 /F

    :: Install latest version of Flash
    msiexec /i \\domain\netlogon\install_flash_player_10_active_x.msi /quiet

    :: Copy mms.cfg to disable auto-update
    copy \\domain\netlogon\flash\mms.cfg %systemdrive%\windows\system32\Macromed\Flash

    goto :exit
    :exit

    Let me know if this helps you.

  12. Thanks Chris, those are some great additions!

    I’ve made an updated post incorporating some of those, here: https://faultbucket.ca/2011/10/adobe-flash-installax-exe-update/

    I’ve added an extra line right before your :exit section, to compensate for x64 systems:
    copy \\domain\adobeflash\mms.cfg %systemdrive%\windows\SysWOW64\Macromed\Flash

    I’ve also incorporated variables to help keep it up to date without having to go through the entire file.

  13. These two keys also need to be deleted; Remnants of version (11.0.1.152)

    [-HKEY_CLASSES_ROOT\Installer\Features3797D32A1CEE534388FAABEEF25730B]
    [-HKEY_CLASSES_ROOT\Installer\Products3797D32A1CEE534388FAABEEF25730B]

  14. I didn’t read all the comments so if I’m repeating something someone else said I do apologize. Anyhow, along with removing the registry entries, I also did a search for InstallAX.exe and found it under:

    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS

    the entry for it is:
    C:\Windows\Temp\InstallAX.exe

    I changed the value to 0 and that fixed it when removing the other registry entries did not.

  15. I created a GPO and it installs flash player 11.4 successfully on some machines, however, on machines with some previous versions of flash 10.x, the GPO doesnt install version 11.4. If you reboot the computer on the problemmachines, during the GPO appying computer settings you actually see “install adobe flash player active x 11.4…” but it doesnt install. In control panel the old 10.x version that was pushed out via GPO is still there. I do not have the GPO or files\install for the 10.x version, it has been mistakenly deleted.

    This is the error in the application log on the machine:

    Product: Adobe Flash Player 11 ActiveX — Error 1714.The older version of Adobe Flash Player 11 ActiveX cannot be removed. Contact your technical support group. System Error 1612.

    ?

    ?Even if I try the manual uninstall from Adobe, I still cannot install version 11.4 from the GPO. Any ideas someone please?

    ?

    ?Adobe – It shouldnt be this hard!!!

  16. Hammy, what version of 10.x are you looking for? I’ve still got install files for:
    – 10.2.152.32
    – 10.2.153.1
    – 10.2.159.1
    – 10.3.181.14
    – 10.3.181.34
    – 10.3.183.7

    because of this very problem. Even though it’s not pushed out by GPO, occasionally the install will fail if the previous version install file isn’t found, so I keep them around.

  17. Hi Jeff,
    Thank you for your reply. I actually need versions 10.3.181.26 and then I saw 10.2.153 on another machine, so since so many machines in our domain can be different version I need somethig that can totally wipe out any existence of flash player on the computer and install the 11.4 from gpo, maybe thats the only sure way?
    Even with Windows 7 on a fresh computer the gpo works great, but if you uninstall manually and reboot the gpo will sometimes install 11.4 again and sometimes not.
    In an environment with so many different versions of flash player I need to make things standard. I would like to continue doing that with GPO, but although the GPO works in its self it doesnt always install the 11.4 msi since it probably detects the older current version on the computer or it has install files in the registry causing problems, I dont know. At this point, I’m willing to try anything to just install 11.4 accross the board. Thanks.

  18. I deleted 3 instances of “adobe flash player”on one machine in the registry and rebooted and the gpo applied. So we know that the problem resides with the remnantes of adobe in the registry that the adobe flash player uninstaller cant remove. Any ideas? I cant go around and manually delete 3 registry entries in the domain.

Leave a Reply to Jeff Miles Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.