According to http://msdn.microsoft.com/en-us/library/aa369774.aspx, you cannot specify the "Users" group, only "Administrators" or "Everyone" as the username for a Permission element. My first try for this was to use the WIX_ACCOUNT_USERS property, which is set as part of the WixQueryOsWellKnownSID custom action. This works great on Windows XP and Windows Vista. The problem is that under Windows 2000, the LocalService and NetworkService accounts don't exist, so the CA fails, even though I'm not referencing those properties (they get set in the same CA). I see two solutions... Either split the CA into WixQueryOsWellKnownSID and WixQueryOsWellKnownServiceSIDs so that if you don't need those ones, they won't run on Windows 2000 and won't have a problem. OR... Looking at the source code for CaExecSecureObjects which processes the PermissionEx element, it will properly lookup the SIDs for "Users" group, etc. So is WiX's PermissionEx as reliable as MSI's native LockObjects t able? If so, I can just use that and not worry about the CA working or failing.
Cody Cutrer ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users