I have some questions about how best to deal with install or setup 
configuration data. I apologies in advance if this is a repeat of something 
that's already been covered in a previous post, but I haven't really found 
anything that speaks to this subject.

At my place of work we have three approaches to deploying various parts of our 
system:

1.       Install only: no configuration parameters in installer (i.e. no new 
public MSI properties) and no setup application that is run after install.

2.       Setup wizard: an application that is launched after installer to guide 
a user through setting up a part of the application, e.g. setup a IIS website. 
The advantage with this approach is that the installer is simple; however, I do 
not believe this approach would scale or even work when deploying through 
Active Directory.

3.       Configuration in installer: common settings are built into the 
installer, which then stores the values into the registry or configuration 
files. Here are some reasons why I don't like this approach:

a.       When doing a repair or modify, a property may not be set to the value 
of the original install; I know we could store the property value to the 
registry and reload it there after for repairs, modify, and upgrade but this 
feels like a rather messy approach.

b.      To work around some of the aforementioned issue, I'm seeing support 
engineers editing the MSI property table to set property values, then giving 
the installer to customers; hence, invaliding our digital signature.

What I would like to know is if there are other approaches or if we're largely 
putting them all in practice? Is there a best practice?

Also, is it a good idea in general to just turn off the modify and repair 
options?

Cheers,
Colin

This e-mail contains IPFX information which may be privileged or confidential 
and is intended for use only by the individual(s) or entity named above. If you 
are not the intended recipient, note that disclosing, copying, distributing or 
using this information is prohibited. If you have received this e-mail in 
error, please advise immediately to the e-mail address above and permanently 
delete this message and any attachments. Please note that any views or opinions 
presented in this email are solely those of the author and do not necessarily 
represent those of the company. We monitor our e-mail system and may record 
your e-mails. Thank you.
------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to