Matthew Moses wrote: > My initial thought was to use the PermissionEx element nested under an > appropriate RegistryKey element. However, this doesn't seem to work as > the user has not been created by the time the installer attempts to > set the permissions on the registry key. >
ConfigureUsers runs early in the sequence and SchedSecureObjects (which handles PermissionEx) runs late, so it should work. How are you determining that the users weren't created? If the CA failed to create the user, it would log the reason and fail the install, for example. > Another custom action run by our installer also relies on the user > being created, and by sequencing it after InstallFinalize, it worked. > It seems that I could write another custom action that sets the > required permissions, sequence it after InstallFinalize, and have > everything work. Am I on the right track? Did I miss something > important? Is there a better way to do this? > Immediate CAs after InstallFinalize can't be rolled back and won't get elevated permissions on Windows Vista. They should be deferred CAs (and marked no-impersonate if they need elevated permissions). -- sig://boB http://bobs.org ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users