Using custom action to change users group right

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Dany C. - 24 Mar 2007 16:37 GMT

Our application is installed in the programs files directory and the
application needs to write in this directory. However, if the current windows
user has limited rights (not an administrator) the program will be fail
because of insufficient rights.

The application is deployed by an administrator through windows installer
project. How can we create a custom action in a setup project to give the
users group of the local computer the right to write in the application
directory?

Thanks,

Reply to this Message

Phil Wilson - 24 Mar 2007 18:42 GMT

1) That's not a setup question, it's a question about the APIs to use,
usually the Lsaxxx set.
2) That really is a terrible idea. Your application design is wrong if it
needs to write to the Programfiles folder and run as standard user, and
giving all the users on the machine the right to create files in that folder
is even more wrong.

Signature

Phil Wilson
[Microsoft MVP-Windows Installer]

> Our application is installed in the programs files directory and the
> application needs to write in this directory. However, if the current
[quoted text clipped - 8 lines]
>
> Thanks,

Reply to this Message

Dany C. - 24 Mar 2007 18:51 GMT

Phil,

The application is a smart client and the executable is update as required.
The application is also share by all user. Do you have a better idea?

> 1) That's not a setup question, it's a question about the APIs to use,
> usually the Lsaxxx set.
[quoted text clipped - 14 lines]
> >
> > Thanks,

Reply to this Message

Dany C. - 24 Mar 2007 18:55 GMT

Phil,

The ProgramFiles folder that i referred to is: ProgramFiles/Compagnie/Product

> 1) That's not a setup question, it's a question about the APIs to use,
> usually the Lsaxxx set.
[quoted text clipped - 14 lines]
> >
> > Thanks,

Reply to this Message

Phil Wilson - 08 Apr 2007 19:11 GMT

Limited users can't write files to the Program Files folder. The design of
the app is wrong because it's got conflicting requirements. It can't be
available for limited user accounts AND create files in ProgramFiles. Fixing
this by compomising system security is a bad idea, and it shouldn't really
be your problem (unless you authored the app).

Signature

Phil Wilson
[Microsoft MVP-Windows Installer]
Definitive Guide to Windows Installer
http://apress.com/book/bookDisplay.html?bID=280

> Our application is installed in the programs files directory and the
> application needs to write in this directory. However, if the current
[quoted text clipped - 8 lines]
>
> Thanks,

Reply to this Message

Rate this thread:

Using custom action to change users group right

Free Magazines