Makes sense.  I thought about the 'per user' scenario shortly after I sent
the email.

Thanks


On Tue, Dec 3, 2013 at 1:39 PM, Phil Wilson <[email protected]> wrote:

> Being picky, the elevated deferred custom actions in a per system install
> run with the system account. If you have code that needs to do something on
> behalf of the installing user (an example might be access/administer a
> database or go to the network or a user profile mapped drive) the system
> account can't do those things because it typically has no network or
> database privilege and can't see network drives that belong to a user, not
> the system. The installing user can have the rights to do these things. I'm
> not saying that doing these things is always a good idea, but people do
> need them sometimes.  Plus an impersonated custom action can be elevated if
> launched from an elevated process, and I suspect that some bundled installs
> such as SQL use that capability.
>
> Phil Wilson
>
>
> On Tue, Dec 3, 2013 at 7:37 AM, Tony <[email protected]> wrote:
>
> > Is there something in the logs that would indicate that an action is
> being
> > executed with/without this impersonate flag set?
> >
> > It is nice that we have the options, but why would I want Impersonate set
> > to 'yes'?  Isn't the whole point of deferred actions to run with system
> > privileges?
> >
> >
> > On Tue, Dec 3, 2013 at 8:20 AM, Tony <[email protected]> wrote:
> >
> > > Thanks.
> > >
> > >
> > > On Tue, Dec 3, 2013 at 8:03 AM, Blair Murri <[email protected]> wrote:
> > >
> > >> msidbCustomActionTypeNoImpersonate in the Type column of the
> > CustomAction
> > >> table.
> > >>
> > >> http://msdn.microsoft.com/library/aa368069.aspx
> > >>
> > >> -Blair
> > >>
> > >> > Date: Tue, 3 Dec 2013 07:43:08 -0500
> > >> > From: [email protected]
> > >> > To: [email protected]
> > >> > Subject: Re: [WiX-users] Deferred <CustomAction Impersonate="y/n" />
> > >> vs.      elevation
> > >> >
> > >> > Thanks.
> > >> >
> > >> > What flag/option get set in Windows Installer tables when
> @Impersonate
> > >> is
> > >> > set to 'no'?
> > >> >
> > >> >
> > >> > On Mon, Dec 2, 2013 at 11:35 PM, Blair Murri <[email protected]>
> wrote:
> > >> >
> > >> > > @Impersonate='yes' is the default, so you do need to "turn off
> > >> > > impersonation" by explicitly saying "no".
> > >> > >
> > >> > > -Blair
> > >> > >
> > >> > > > Date: Mon, 2 Dec 2013 15:32:58 -0500
> > >> > > > From: [email protected]
> > >> > > > To: [email protected]
> > >> > > > Subject: [WiX-users] Deferred <CustomAction Impersonate="y/n" />
> > vs.
> > >> > >  elevation
> > >> > > >
> > >> > > > I have a deferred custom action that is failing **UNLESS** I
> > launch
> > >> the
> > >> > > > install "Run as Administrator".  Any ideas why this is
> happening?
> > >> > > >
> > >> > > > <Package InstallerVersion="500" InstallPrivileges="elevated"
> .../>
> > >> > > >
> > >> > > > <CustomAction Id="CustomInstall" Execute="deferred"
> Return="check"
> > >> > > > DllEntry="Install"  BinaryKey="MyCustomActions" />
> > >> > > >
> > >> > > > <InstallExecuteSequence>
> > >> > > >   ...
> > >> > > >   <Custom Action="CustomInstall" Before="InstallServices">NOT
> > >> > > > Installed</Custom>
> > >> > > >   ...
> > >> > > > </InstallExecuteSequence>
> > >> > > >
> > >> > > >
> > >> > > > Do I need to add the 'Impersonate="no"' attribute to make this
> > work
> > >> (is
> > >> > > > _assume_ "yes" is the default)?
> > >> > > >
> > >> > > > >From the logs...
> > >> > > >
> > >> > > > ...
> > >> > > > MSI (c) (D4:60) [19:24:20:051]: Machine policy value
> 'DisableMsi'
> > >> is 1
> > >> > > > MSI (c) (D4:60) [19:24:20:051]: Machine policy value
> > >> > > > 'AlwaysInstallElevated' is 0
> > >> > > > MSI (c) (D4:60) [19:24:20:051]: User policy value
> > >> 'AlwaysInstallElevated'
> > >> > > > is 0
> > >> > > > MSI (c) (D4:60) [19:24:20:051]: Running product
> > >> > > > '{BACFF966-3CEF-4CD7-BE12-D8F6D89D2BE3}' with user privileges.
> > >> DisableMsi
> > >> > > > policy is set to or defaulted to 1. This is the client and the
> > user
> > >> does
> > >> > > > not have full admin token. Evaulation is delayed until after
> > >> credentials
> > >> > > > provided. This install could still be blocked
> > >> > > > ...
> > >> > > > MSI (c) (D4:60) [19:24:20:067]: Note: 1: 2262 2: AdminProperties
> > 3:
> > >> > > > -2147287038
> > >> > > > MSI (c) (D4:60) [19:24:20:067]: Machine policy value
> > >> > > > 'AlwaysInstallElevated' is 0
> > >> > > > MSI (c) (D4:60) [19:24:20:067]: User policy value
> > >> 'AlwaysInstallElevated'
> > >> > > > is 0
> > >> > > > MSI (c) (D4:60) [19:24:20:067]: Running product
> > >> > > > '{BACFF966-3CEF-4CD7-BE12-D8F6D89D2BE3}' with user privileges.
> > >> DisableMsi
> > >> > > > policy is set to or defaulted to 1. This is the client and the
> > user
> > >> does
> > >> > > > not have full admin token. Evaulation is delayed until after
> > >> credentials
> > >> > > > provided. This install could still be blocked
> > >> > > > ...
> > >> > > > MSI (s) (D8:88) [19:24:24:247]: MSI_LUA: Credential Request
> return
> > >> = 0x0
> > >> > > > MSI (s) (D8:88) [19:24:24:247]: MSI_LUA: Elevated credential
> > consent
> > >> > > > provided. Install will run elevated
> > >> > > > ...
> > >> > > > MSI (s) (D8:88) [19:24:24:247]: Note: 1: 2262 2: AdminProperties
> > 3:
> > >> > > > -2147287038
> > >> > > > MSI (s) (D8:88) [19:24:24:247]: Machine policy value
> > >> > > > 'AlwaysInstallElevated' is 0
> > >> > > > MSI (s) (D8:88) [19:24:24:247]: User policy value
> > >> 'AlwaysInstallElevated'
> > >> > > > is 0
> > >> > > > MSI (s) (D8:88) [19:24:24:247]: Product installation will be
> > >> elevated
> > >> > > > because user provided elevated credentials and product is being
> > >> installed
> > >> > > > per-machine.
> > >> > > > MSI (s) (D8:88) [19:24:24:247]: Running product
> > >> > > > '{BACFF966-3CEF-4CD7-BE12-D8F6D89D2BE3}' with elevated
> privileges:
> > >> > > Product
> > >> > > > is assigned.
> > >> > > > ...
> > >> > > > MSI (s) (D8:88) [19:24:24:310]: MSI_LUA: Setting AdminUser
> > property
> > >> to 1
> > >> > > > because this is the client or the user has already permitted
> > >> elevation
> > >> > > > MSI (s) (D8:88) [19:24:24:310]: PROPERTY CHANGE: Adding
> AdminUser
> > >> > > property.
> > >> > > > Its value is '1'.
> > >> > > > MSI (s) (D8:88) [19:24:24:310]: MSI_LUA: Setting
> > MsiRunningElevated
> > >> > > > property to 1 because the install is already running elevated.
> > >> > > > MSI (s) (D8:88) [19:24:24:310]: PROPERTY CHANGE: Adding
> > >> > > MsiRunningElevated
> > >> > > > property. Its value is '1'.
> > >> > > > MSI (s) (D8:88) [19:24:24:310]: PROPERTY CHANGE: Adding
> Privileged
> > >> > > > property. Its value is '1'.
> > >> > > > ...
> > >> > > > Action 19:24:25: CustomInstall.
> > >> > > > MSI (s) (D8:88) [19:24:25:261]: Executing op:
> > >> > > >
> > >> > >
> > >>
> >
> CustomActionSchedule(Action=CustomInstall,ActionType=1025,Source=BinaryData,Target=Install,CustomActionData=CERTPROPERTY=*.
> > >> > > > mydomain.net;)
> > >> > > > MSI (s) (D8:88) [19:24:25:261]: Creating MSIHANDLE (51) of type
> > >> 790536
> > >> > > for
> > >> > > > thread 4488
> > >> > > > MSI (s) (D8:E8) [19:24:25:261]: Invoking remote custom action.
> > DLL:
> > >> > > > C:\Windows\Installer\MSIBD8F.tmp, Entrypoint: Install
> > >> > > > MSI (s) (D8!F4) [19:24:25:277]: Creating MSIHANDLE (52) of type
> > >> 790531
> > >> > > for
> > >> > > > thread 1268
> > >> > > > SFXCA: Extracting custom action to temporary directory:
> > >> > > > C:\Users\SomeUser\AppData\Local\Temp\MSIBD8F.tmp-\
> > >> > > > MSI (s) (D8!F4) [19:24:25:277]: Closing MSIHANDLE (52) of type
> > >> 790531 for
> > >> > > > thread 1268
> > >> > > > MSI (s) (D8!F4) [19:24:25:308]: Creating MSIHANDLE (53) of type
> > >> 790531
> > >> > > for
> > >> > > > thread 1268
> > >> > > > SFXCA: Binding to CLR version v4.0.30319
> > >> > > > ...
> > >> > > > 19:24:25.464--MSI.Install -- Exception
> > >> > > System.ComponentModel.Win32Exception
> > >> > > > (0x80004005): Binding failed, see log file for details
> > >> > > > ...
> > >> > > >
> > >> > > >
> > >> > > >
> > >> > > > --
> > >> > > > Tony
> > >> > > >
> > >> > >
> > >>
> >
> ------------------------------------------------------------------------------
> > >> > > > Rapidly troubleshoot problems before they affect your business.
> > >> Most IT
> > >> > > > organizations don't have a clear picture of how application
> > >> performance
> > >> > > > affects their revenue. With AppDynamics, you get 100% visibility
> > >> into
> > >> > > your
> > >> > > > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of
> > >> > > AppDynamics Pro!
> > >> > > >
> > >> > >
> > >>
> >
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> > >> > > > _______________________________________________
> > >> > > > WiX-users mailing list
> > >> > > > [email protected]
> > >> > > > https://lists.sourceforge.net/lists/listinfo/wix-users
> > >> > >
> > >> > >
> > >> > >
> > >>
> >
> ------------------------------------------------------------------------------
> > >> > > Rapidly troubleshoot problems before they affect your business.
> Most
> > >> IT
> > >> > > organizations don't have a clear picture of how application
> > >> performance
> > >> > > affects their revenue. With AppDynamics, you get 100% visibility
> > into
> > >> your
> > >> > > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of
> > >> AppDynamics
> > >> > > Pro!
> > >> > >
> > >>
> >
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> > >> > > _______________________________________________
> > >> > > WiX-users mailing list
> > >> > > [email protected]
> > >> > > https://lists.sourceforge.net/lists/listinfo/wix-users
> > >> > >
> > >> >
> > >> >
> > >> >
> > >> > --
> > >> > Tony
> > >> >
> > >>
> >
> ------------------------------------------------------------------------------
> > >> > Rapidly troubleshoot problems before they affect your business. Most
> > IT
> > >> > organizations don't have a clear picture of how application
> > performance
> > >> > affects their revenue. With AppDynamics, you get 100% visibility
> into
> > >> your
> > >> > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of
> > >> AppDynamics Pro!
> > >> >
> > >>
> >
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> > >> > _______________________________________________
> > >> > WiX-users mailing list
> > >> > [email protected]
> > >> > https://lists.sourceforge.net/lists/listinfo/wix-users
> > >>
> > >>
> > >>
> >
> ------------------------------------------------------------------------------
> > >> Rapidly troubleshoot problems before they affect your business. Most
> IT
> > >> organizations don't have a clear picture of how application
> performance
> > >> affects their revenue. With AppDynamics, you get 100% visibility into
> > your
> > >> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of
> > AppDynamics
> > >> Pro!
> > >>
> > >>
> >
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> > >> _______________________________________________
> > >> WiX-users mailing list
> > >> [email protected]
> > >> https://lists.sourceforge.net/lists/listinfo/wix-users
> > >>
> > >
> > >
> > >
> > > --
> > > Tony
> > >
> >
> >
> >
> > --
> > Tony
> >
> >
> ------------------------------------------------------------------------------
> > Rapidly troubleshoot problems before they affect your business. Most IT
> > organizations don't have a clear picture of how application performance
> > affects their revenue. With AppDynamics, you get 100% visibility into
> your
> > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> > Pro!
> >
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> > _______________________________________________
> > WiX-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/wix-users
> >
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> _______________________________________________
> WiX-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/wix-users
>



-- 
Tony
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to