Hi,
You should be able to add permissions to your exe fairly easily with the
PermissionEx element.

http://wix.sourceforge.net/manual-wix3/util_xsd_permissionex.htm

Dave 

-----Original Message-----
From: Wilson, Phil [mailto:phil.wil...@invensys.com] 
Sent: 24 March 2010 16:43
To: General discussion for Windows Installer XML toolset.
Subject: Re: [WiX-users] CAQuietExec and Windows Server 2008 UAC

This might be a result of ever-tightening security. The custom action
wants to run the command prompt shell (that will try to open a command
prompt window) with the local system account. I would not be surprised
if this can't be done any more. It might be related to the session
service isolation when non-impersonated custom actions run off the
msiexec.exe service process.  Does it also fail on Vista? Windows 7? 

There might be a WiX extension for what you want to, someone might jump
in with that answer. There's also LockPermissions. 

Phil Wilson 

-----Original Message-----
From: Amy Rosewater [mailto:arosewa...@spectrumhr.com]
Sent: Wednesday, March 24, 2010 8:48 AM
To: General discussion for Windows Installer XML toolset.
Subject: [WiX-users] CAQuietExec and Windows Server 2008 UAC

Hi All,

 

I have a custom action to run CAQuietExec (using wix v 3.0.5419.0).  It
is currently set up to run as a deferred custom action with no
impersonation.

 

<CustomAction Id="AssignUserPermissionsProperty"
Property="ASSIGNUSERCOMMANDPERMISSIONS"
Value="&quot;[ICACLSEXEPATH]&quot; &quot;[COMMANDEXEPATH]&quot; /grant
[APPLICATIONUSER]:(RX)" />

<CustomAction Id="ASSIGNUSERCOMMANDPERMISSIONS" BinaryKey="WixCA"
DllEntry="CAQuietExec" Execute="deferred" Impersonate="no"
Return="ignore" />

 

When this custom action runs in Windows Server 2003 everything works
great.  When it runs in Windows Server 2008 with UAC I get the following
error in the log:

 

CAQuietExec:  C:\Windows\system32\cmd.exe: Access is denied.

 

The user running the install at the time is an administrator on the
machine.  All the information I have found out there on this subject
tells me that to get the custom action to run with elevated permissions
and avoid this error I need to run deferred with impersonate set to no.
Is there something I'm missing?

 

Thanks in advance,


Amy

 

Amy Rosewater VanMatre

SPECTRUM Human Resource Systems Corporation

707 17th Street Suite 3800

Denver CO, 80202

303.592.3403

arosewa...@spectrumhr.com

 

------------------------------------------------------------------------
------
Download Intel&#174; Parallel Studio Eval Try the new software tools for
yourself. Speed compiling, find bugs proactively, and fine-tune
applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users


*** Confidentiality Notice: This e-mail, including any associated or
attached files, is intended solely for the individual or entity to which
it is addressed. This e-mail is confidential and may well also be
legally privileged. If you have received it in error, you are on notice
of its status. Please notify the sender immediately by reply e-mail and
then delete this message from your system. Please do not copy it or use
it for any purposes, or disclose its contents to any other person. This
email comes from a division of the Invensys Group, owned by Invensys
plc, which is a company registered in England and Wales with its
registered office at Portland House, Bressenden Place, London, SW1E 5BF
(Registered number 166023). For a list of European legal entities within
the Invensys Group, please go to
http://www.invensys.com/legal/default.asp?top_nav_id=77&nav_id=80&prev_i
d=77. You may contact Invensys plc on +44 (0)20 7821 3848 or e-mail
inet.hqhelpd...@invensys.com. This e-mail and any attachments thereto
may be subject to the terms of any agreements between Invensys (and/or
its subsidiaries and affiliates) and the recipient (and/or its
subsidiaries and affiliates).



------------------------------------------------------------------------
------
Download Intel&#174; Parallel Studio Eval Try the new software tools for
yourself. Speed compiling, find bugs proactively, and fine-tune
applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users
</pre>
<BR style="font-size:4px;">
<a href = "http://www.sdl.com";><img src="http://www.sdl.com/images/email 
logo_150dpi-01.png" alt="www.sdl.com" border="0"/></a>
<BR>
<font face="arial"  size="2" "><a href = "http://www.sdl.com"; 
style="color:005740; font-weight: bold">www.sdl.com</a>
<BR>
<BR>
<font face="arial"  size="1" color="#736F6E">
<b>SDL PLC confidential, all rights reserved.</b>
If you are not the intended recipient of this mail SDL requests and requires 
that you delete it without acting upon or copying any of its contents, and we 
further request that you advise us.<BR>
SDL PLC is a public limited company registered in England and Wales.  
Registered number: 02675207.<BR>
Registered address: Globe House, Clivemont Road, Maidenhead, Berkshire SL6 7DY, 
UK.
</font>



------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to