Yeah, SecureObjects (which is what PermissionEx drives) happens after all objects it secures are installed (otherwise it wouldn't be able to do its job).
-----Original Message----- From: Amy Rosewater [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 12:09 To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] grant permissions on a folder to aspecific userifthe user happens to be NT AUTHORITY\Network Service That got me looking in the right direction. Here's my issue. I am attempting to create permissions to a directory into which I place our database files. I check the identity of the user running the SQL Server Service (this is the user that needs write permissions to this directory). I want the install to add permissions for this user to the folder. However, I need this to occur before we actually attempt to create the database. When I look at where the folder is created versus when database creation is scheduled versus the setting of extended permissions with the PermissionEx element I see this: CreateFolders is Sequence 3700 in my InstallExecuteSequence InstallSqlDatabase is Sequence 4007 in my InstallExecuteSequence SchedSecureObjects is Sequence 5801 in my InstallExecuteSequence Therein lies my problem. As I understand it (correct me if I'm wrong), the CreateFolders action in the InstallExecuteSequence processes the contents of the LockPermissions table. This means I should be able to use the Permission element, but if I use PermissionEx, it doesn't get executed until well after the install attempts to create the database and fails. If I use Permission and assign to the sql service user (on my test server Network Service) as well as Administrators it goes fine. I wanted to use the PermissionEx element but I will settle for working... Thanks, Amy -----Original Message----- From: Rob Mensching [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 11:09 AM To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] grant permissions on a folder to aspecific userifthe user happens to be NT AUTHORITY\Network Service What does a verbose log file say? -----Original Message----- From: Amy Rosewater [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 09:31 To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] grant permissions on a folder to a specific userifthe user happens to be NT AUTHORITY\Network Service That was a great idea Michael, and I tried it but the PermissionEx element is still failing to add the appropriate permissions to the directory. Now instead of failing to add permissions for Network Service it fails to add permissions for the IIS_WPG. Is anyone else having a similar problems with wix v3.0.4513? A -----Original Message----- From: Michael Osmond [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 21, 2008 11:38 PM To: General discussion for Windows Installer XML toolset.; General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] grant permissions on a folder to a specific userifthe user happens to be NT AUTHORITY\Network Service Hello Amy, I actually use "[ComputerName]\iis_wpg" this is IIS Working Process Group of which network service is a member. Although that said, this group only exists if IIS is an installed windows component. This covers, system, network service, local service and I think Aspnet. Michael ________________________________ From: Amy Rosewater [mailto:[EMAIL PROTECTED] Sent: Wed 22/10/2008 1:29 PM To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] grant permissions on a folder to a specific user ifthe user happens to be NT AUTHORITY\Network Service Thanks Ian, but I need to add to permissions on the directory rather than reset them altogether. Does anyone else know what values I would need to use for user and domain in the PermissionEx element to get permissions assigned to that directory for NT AUTHORITY\NETWORK SERVICE? Just as an FYI, I am using wix v3 and I have tried empty domain with "Network Service" based on Ian's suggestion and empty domain with "NetworkService" based on several other postings on this site to no avail. Is anyone else able to get this to work? Thanks in advance for anyone that can help me. -----Original Message----- From: Ian Elliott (Excell Data Corporation) [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 21, 2008 11:54 AM To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] grant permissions on a folder to a specific user if the user happens to be NT AUTHORITY\Network Service Here is code from an installer I have that works for me: <Component Id="CID_Logs" Guid="{837A1B74-98C9-4042-B51D-58F38448CE46}" Location="local" DiskId="1"> <CreateFolder> <Permission GenericAll="yes" User="Administrators" /> <Permission GenericRead="yes" GenericWrite="yes" User="Network Service" /> </CreateFolder> </Component> -----Original Message----- From: Amy Rosewater [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 21, 2008 10:44 AM To: General discussion for Windows Installer XML toolset. Subject: [WiX-users] grant permissions on a folder to a specific user if the user happens to be NT AUTHORITY\Network Service Hi All, How do you grant permissions to a folder for a specific user if the user happens to be the built in Network Service account? I have tried: <Component Id="AssignDataDirectoryPermissionsGeneric" Guid="5A9D6D2B-CBA0-4E4C-8935-FACA2446256E"> <CreateFolder Directory="DataDirectory"> <util:PermissionEx CreateFile="yes" GenericAll="yes" Read="yes" ReadAttributes="yes" WriteAttributes="yes" User="NetworkService" /> </CreateFolder> </Component> <Component Id="AssignDataDirectoryPermissionsGeneric" Guid="5A9D6D2B-CBA0-4E4C-8935-FACA2446256E"> <CreateFolder Directory="DataDirectory"> <util:PermissionEx CreateFile="yes" GenericAll="yes" Read="yes" ReadAttributes="yes" WriteAttributes="yes" User="[SQLSERVERSERVICEUSER]" /> </CreateFolder> </Component> In this scenario SQLSERVERSERVICEUSER is equal to "NT AUTHORITY\Network Service". <Component Id="AssignDataDirectoryPermissionsGeneric" Guid="5A9D6D2B-CBA0-4E4C-8935-FACA2446256E"> <CreateFolder Directory="DataDirectory"> <util:PermissionEx CreateFile="yes" GenericAll="yes" Read="yes" ReadAttributes="yes" WriteAttributes="yes" Domain="[SQLSERVERSERVICEDOMAIN]" User="[SQLSERVERSERVICEUSER]" /> </CreateFolder> </Component> In this scenario SQLSERVERSERVICEDOMAIN = "NT AUTHORITY" and SQLSERVERSERVICEUSER = "Network Service". <Component Id="AssignDataDirectoryPermissionsGeneric" Guid="5A9D6D2B-CBA0-4E4C-8935-FACA2446256E"> <CreateFolder Directory="DataDirectory"> <util:PermissionEx CreateFile="yes" GenericAll="yes" Read="yes" ReadAttributes="yes" WriteAttributes="yes" Domain="[ComputerName]" User="[SQLSERVERSERVICEUSER]" /> </CreateFolder> </Component> In this scenario SQLSERVERSERVICEUSER = "NT AUTHORITY\Network Service" Rather than just keep trying, does anyone know the answer to this one? Thanks, Amy Amy Rosewater SPECTRUM Human Resource Systems Corporation 707 17th Street Suite 3800 Denver CO, 80202 303.592.3403 [EMAIL PROTECTED] ------------------------------------------------------------------------ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
