Hello
SCCM newb here, we're deploying an application (batch file) to a user collection. The logic behind the deployment is that the script will only run on the user's primary machine, in this case, it will add the user to the local admin group of their primary machine.
The application requirements require that it runs on the user's primary machine, we did this by adding a requirement type (Primary device=true). The script is a simple batch file, net localgroup administrators %username% /add. The installation behavior is"install for system". We're noticing that UAC is preventing the script from running, even though it's apparently set to run at the system context which should be exempt from UAC. The deployment works fine on computers with UAC disabled.
Any suggestions on how we can get around the UAC problem on this deployment without having to disable UAC all together? Many thanks in advance for everyone's time and support.