Lockdown Browser LAB SCCM deployment

I needed to update from Respondus LockDown Browser Lab version to version This is how I've done it as an SCCM application. This could probably be modified to be used in some other deployment solution, but I've tested it with SCCM 2012 R2 and Windows 7 clients running 32 and 64 bit versions.

After was activated this error shows on

Install Shield files and installer folder

First, you'll need to create setup.iss files. Instructions can be found here: http://www.respondus.com/update/2009-11-d.shtml

Here's their instructions for convenience:

First, be sure that Respondus LockDown Browser isn’t already installed on the computer. If it is, then un-install it before continuing.
  1. Download the full installer (LockDownSFX.exe) from the Respondus website. BE SURE to obtain the .exe via the admin login for your institution since the installer differs for each institution.
  2. Run the installer and select the "Click Here" link that appears next to the text, "Problems with the installation program?" This will allow you to extract the setup files to a folder on your local disk (such as "lockdown").
  3. Start the Windows Command Prompt (or run CMD.exe).
  4. Change directories to where the installer was extracted (i.e. the “lockdown” folder).
  5. From the command line run:

    setup /r

    This runs the regular installer but also creates c:\windows\setup.iss
  6. Copy the file c:\windows\setup.iss into the “lockdown” folder.
  7. Un-install Respondus LockDown Browser.
Now you now have a silent installer that can be run using this command:
setup /s /f1"%CD%\setup.iss"

Create three iss files using the same method, setup /r inside the expanded installer files. You will use each of these iss files later in SCCM; the normal silent install won't work to upgrade existing versions, and the third one will be used for uninstallation.

  1. Normal install with no other version installed - named setup.iss
  2. A re-install with version installed - named update.iss
  3. An uninstall of - named uninstall.iss

Put all of the iss files in the installer folder with setup.exe etc.

Install script

Create a bat file with the contents below named installLDB.bat. See in-line comments for what it's doing. Basically it is checking if version 1.05 is installed, running with the update iss file, and otherwise installing with the setup file. The last part is changing the registry entry for versioning because for some reason Respondus doesn't like to do this in their installer. We will also use that key in SCCM for detection.

@echo off

REM Check registry for version 1.0.5
REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3DEC3ECB-D6FB-450E-8248-D05C36AD5FA4} /f "DisplayVersion" | find "1.0.5"
IF %ERRORLEVEL% == 1 goto newinstall
IF %ERRORLEVEL% == 0 goto update

REM If doesn't exist as 1.0.5 run new install
setup /s /f1"%CD%\setup.iss"
goto registry

REM if exists with version 1.0.5 run update
setup /s /f1"%CD%\update.iss"

REM Update registry to show version instead of 1.0.5
REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3DEC3ECB-D6FB-450E-8248-D05C36AD5FA4} /f "DisplayVersion" | find "1.0.5"
IF %ERRORLEVEL% == 1 goto end
REG ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3DEC3ECB-D6FB-450E-8248-D05C36AD5FA4} /v DisplayVersion /t REG_SZ /d /f


You may want to verify that the registry key matches what actually shows when it is installed. Also create a bat file named uninstall.bat with the line below and copy to your installation folder.

setup /s /f1"%CD%\uninstall.iss"

Copy the folder to your network share or SCCM server.

SCCM Application

Create a new Application (not package). I'm not going to show how to create an application step by step here, but I've included the settings I used, everything else is default. This part is pretty straight forward if you've done it before, and these details are easily viewed for verification after the application is created by going to the application properties.

Name: Respondus LockDown Browser LAB
Administrator Comments: Will update from 1.0.5 or perform a clean install, tested on Windows 7 64 and 32 bit, might not update other versions
Publisher: Respondus
Software Version:
Localized Application Name: Respondus LockDown Browser LAB
Localized description: Respondus LockDown Browser for labs only
Deployment type: script

   Name: Lockdown Browser
   Content location: [enter UNC path to the folder you copied]
   Installation program: "InstallLDB.bat"
   Uninstall program: "uninstall.bat"
   Run as 32 bit on 64: CHECKED

Detection Method
   Setting Type: Registry
   Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3DEC3ECB-D6FB-450E-8248-    D05C36AD5FA4}
   Value: DisplayVersion
   Associated with 32-bit: CHECKED
   Data Type: String
   Operator: Equals

Install for System
Whether or not a user is logged on
Installation visibility: Normal
Max allowed run time: 20
Estimated installation: 5

It's important to check run as 32 bit on 64 bit machines, and associated with 32 bit in the detection method, or you will have problems on 64 bit Windows.

Deploy (test first) your application and you're done.

Another solution

More about reg command

Respondus LockDown Browser silent install - updated instructions

InstallShield Parameters

Create System Center Configuration Manager Application


Popular posts from this blog

Simple powershell ping log with timestamp

DNS entries needed for MLB app