Hi, When I had a similar problem and I didn't have time to write a proper CA I used SETACL.exe to set inheritable permissions on a registry key. Ugly but fast.
http://setacl.sourceforge.net/ -----Original Message----- From: dB. [mailto:dbl...@dblock.org] Sent: 14 October 2010 21:54 To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] Need help in updating permission of a registry key If you end up going the custom action route, please do consider contributing it to http://msiext.codeplex.com. This is something we could use too and you'll get a jumpstart with a mature CA infrastructure. dB. @ dblock.org Moscow|Geneva|Seattle|New York -----Original Message----- From: Suryadeep Biswal [mailto:subis...@microsoft.com] Sent: Thursday, October 14, 2010 1:42 PM To: wix-users@lists.sourceforge.net Subject: [WiX-users] Need help in updating permission of a registry key Hi, I have an existing registry key "\HKLM\Software\Microsoft\SystemCertificates". I need to grant the account "Network Service" read access on this key. Currently I cannot find a way to solve this. Here are the things I have tried so far: 1. Using the WIX in-built tags <RegistryKey> and <Permission>, I am able to grant the account full permission, but it does come with a cost. It overwrites the key and thus erases all the sub keys and existing permission set. I deployed it multiple times and observed the same behavior. 2. I also tried a DOS command line "RegINI" which can be used to import a ".reg" file into the registry, but it has a pre-defined set of ACLs and cannot be used for individual accounts. Any pointers/solutions will be highly appreciated. Thank you Suryadeep ------------------------------------------------------------------------ ------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today. http://p.sf.net/sfu/beautyoftheweb _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------ ------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today. http://p.sf.net/sfu/beautyoftheweb _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users SDL PLC confidential, all rights reserved. If you are not the intended recipient of this mail SDL requests and requires that you delete it without acting upon or copying any of its contents, and we further request that you advise us. SDL PLC is a public limited company registered in England and Wales. Registered number: 02675207. Registered address: Globe House, Clivemont Road, Maidenhead, Berkshire SL6 7DY, UK. ------------------------------------------------------------------------------ Download new Adobe(R) Flash(R) Builder(TM) 4 The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly Flex(R) Builder(TM)) enable the development of rich applications that run across multiple browsers and platforms. Download your free trials today! http://p.sf.net/sfu/adobe-dev2dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users