The solution is to use a NT service. If your application installs a service already, you can piggy-back on that, or create a new service. The service will listen on some form of interprocess communication (memory mapped files, named mutex/semaphore, msgs, pipes, TCPIP connection, whatever). The application should be running as LocalSystem or some security context that has enough permissions to run a MSI. In your application (running in the restricted security context), you check for an update on the web and download if necessary. Once downloaded, you signal your service, the service runs the MSI using the proper MSI API calls. This side-steps the security issues involving restricted users.
This approach has some drawbacks. First, the possibly extra service running all the time. Also, if you use custom actions in the MSI that rely on user-specific information or the current user security context, they may not work correctly.
"Wilson, Phil" <[EMAIL PROTECTED]> wrote:
I don't believe this is supported until MSI 4.0 - see the User Account
Control (UAC) Patching topic:
http://windowssdk.msdn.microsoft.com/en-us/library/ms710366.aspx
Phil Wilson
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Petr Vones
Sent: Thursday, September 14, 2006 9:41 AM
To: wix-users@lists.sourceforge.net
Subject: [WiX-users] Automatic updating an MSI installation under
restricteduser account
Hi,
what is the recommended way of updating/patching existing installation
running the application under restricted user account only ? I don't
have any experiences with it.
The scenario is:
- First version of the product is standard MSI package installed by an
administrator (to ProgramFiles folder)
- The administrator logs off
- An user logs on (under restricted account) and use the application
The application (running under restricted user account) checks for a web
update. If there is an update it must be able to update application
files in ProgramFiles folder without logging as an administrator. But
the user does not have write access to the ProgramFiles folder. Only
files will be updated (that's mean no registry access etc. is required).
Can MSI installer (which is running as a service) do this ?
Thanks, Petr
------------------------------------------------------------------------
-
Using Tomcat but need to do more? Need to support web services,
security?
Get stuff done quickly with pre-integrated technology to make your job
easier Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
