Group:  English: Windows Vista ยป microsoft.public.windows.vista.security
Thread: VISTA and Windows Installer ALLUSERS property....

DotNetBag
.NET Development Newsgroups

HTVi
TV Discussion Newsgroups

Our Hot Pick: Rising Antivirus 2006 - Certified by TUV & Checkmark! Get 10% discount by entering this coupon code: ONDISCOUNT10
Rising Antivirus 2006

VISTA and Windows Installer ALLUSERS property....
Superfreak3 <Matt.Walker[ at ]synergis.com> 10.07.2007 20:23:34
I've read in several places that for VISTA installations, ALLUSERS
should be set to 1 and the User Information dialog bypassed on Vista.
I just want to examine what I should do in prepping for VISTA.

Currently with our installation, if a Standard User tries to install
with UAC disabled, the installation fails due to lack of privileges to
\Program Files, etc. During the UI, the controls on the User
Information dialog are not displayed as the installing user is not
Privileged. This seems to be an out-of-the-box condition in our
authoring tool

If I install as Admin, all OK, or if UAC is enabled all is OK if Admin
or if credentials are supplied.

It's easy enough to do I would think. I could possibly condition the
dialog with VersionNT<>600 and set the property with a Custom Action
or possibly on the next button on the install dialog. If I do set
ALLUSERS to 1, that would basically suggest that all would have to be
Admin to install. When I tested this as a Standard User, no UAC,
ALLUSERS=1, the install errored and none too gracefully. The log
didn't really point to anything much either. I would have suspected a
permissions message of some kind.

Any thoughts, pointers would be Greatly Appreciated!

Re: VISTA and Windows Installer ALLUSERS property....
Superfreak3 <Matt.Walker[ at ]synergis.com> 13.07.2007 12:45:57
On Jul 10, 4:23 pm, Superfreak3 <Matt.Wal...[ at ]synergis.com> wrote:
[Quoted Text]
> I've read in several places that for VISTA installations,ALLUSERS
> should be set to 1 and the User Information dialog bypassed on Vista.
> I just want to examine what I should do in prepping for VISTA.
>
> Currently with our installation, if a Standard User tries to install
> with UAC disabled, the installation fails due to lack of privileges to
> \Program Files, etc. During the UI, the controls on the User
> Information dialog are not displayed as the installing user is not
> Privileged. This seems to be an out-of-the-box condition in our
> authoring tool
>
> If I install as Admin, all OK, or if UAC is enabled all is OK if Admin
> or if credentials are supplied.
>
> It's easy enough to do I would think. I could possibly condition the
> dialog with VersionNT<>600 and set the property with a Custom Action
> or possibly on the next button on the install dialog. If I do setALLUSERSto 1, that would basically suggest that all would have to be
> Admin to install. When I tested this as a Standard User, no UAC,ALLUSERS=1, the install errored and none too gracefully. The log
> didn't really point to anything much either. I would have suspected a
> permissions message of some kind.
>
> Any thoughts, pointers would be Greatly Appreciated!

I've just found this from Microsoft, but I guess it really doesn't
amount much to a recommendation....


"Windows Vista: Windows Installer version 4.0 complies with User
Account Control (UAC). If the user has user access privileges, and
ALLUSERS=2, the installer performs a per-machine installation only if
Admin credentials are provided to the UAC dialog box. If UAC is
enabled and the correct Admin credentials are not provided, the
installation fails with an error stating that administrator privileges
are required. If UAC is disabled by the registry key, group policy, or
the control panel, the UAC dialog box is not displayed and the
installation fails with an error stating that administrator privileges
are required."

Re: VISTA and Windows Installer ALLUSERS property....
Superfreak3 <Matt.Walker[ at ]synergis.com> 13.07.2007 12:55:19
On Jul 13, 8:45 am, Superfreak3 <Matt.Wal...[ at ]synergis.com> wrote:
[Quoted Text]
> On Jul 10, 4:23 pm, Superfreak3 <Matt.Wal...[ at ]synergis.com> wrote:
>
>
>
>
>
> > I've read in several places that for VISTA installations,ALLUSERS
> > should be set to 1 and the User Information dialog bypassed on Vista.
> > I just want to examine what I should do in prepping for VISTA.
>
> > Currently with our installation, if a Standard User tries to install
> > with UAC disabled, the installation fails due to lack of privileges to
> > \Program Files, etc. During the UI, the controls on the User
> > Information dialog are not displayed as the installing user is not
> > Privileged. This seems to be an out-of-the-box condition in our
> > authoring tool
>
> > If I install as Admin, all OK, or if UAC is enabled all is OK if Admin
> > or if credentials are supplied.
>
> > It's easy enough to do I would think. I could possibly condition the
> > dialog with VersionNT<>600 and set the property with a Custom Action
> > or possibly on the next button on the install dialog. If I do setALLUSERSto 1, that would basically suggest that all would have to be
> > Admin to install. When I tested this as a Standard User, no UAC,ALLUSERS=1, the install errored and none too gracefully. The log
> > didn't really point to anything much either. I would have suspected a
> > permissions message of some kind.
>
> > Any thoughts, pointers would be Greatly Appreciated!
>
> I've just found this from Microsoft, but I guess it really doesn't
> amount much to a recommendation....
>
> "Windows Vista: Windows Installer version 4.0 complies with User
> Account Control (UAC). If the user has user access privileges, andALLUSERS=2, the installer performs a per-machine installation only if
> Admin credentials are provided to the UAC dialog box. If UAC is
> enabled and the correct Admin credentials are not provided, the
> installation fails with an error stating that administrator privileges
> are required. If UAC is disabled by the registry key, group policy, or
> the control panel, the UAC dialog box is not displayed and the
> installation fails with an error stating that administrator privileges
> are required."- Hide quoted text -
>
> - Show quoted text -

And I guess this might be the answer...

"Marking the Privileges for an MSI

Before Windows Vista, the ALLUSERS property was used to mark whether
an MSI file would install an application's shortcuts to the user
location or for all users on the machine. These shortcuts included the
DesktopFolder, ProgramMenuFolder, StartMenuFolder, and StartupFolder.
Because there was no analogous per-user Program Files directory, the
application binaries generally were still written to the Program Files
directory.

Unfortunately, for app compatibility reasons Windows Installer could
not determine whether the user should be prompted for credentials
based solely on the ALLUSERS property. Instead, an additional bit was
allocated in the MSI file to determine whether to prompt the user.
This is bit 3 in the Word Count Summary property. If this bit is set
to 1, the package is assumed to be a per-user MSI and the user will
not be prompted for an Administrator token.

To specify that a package can only be installed by an administrator
into the Public profile, set ALLUSERS="1" or ALLUSERS="2" and set bit
3 of the Word Count Summary property to 0. To specify that a package
is a per-user installation that can be installed by a standard user,
set ALLUSERS="" or don't define the property, and set bit 3 of the
Word Count Summary property to 1."


Home | Search | Terms | Imprint | Contact
Newsgroups Reader - provided by WiredBox.Net