I found out that when setting the InScript execution type of the managed CA 
from Deferred in System Context to Deferred Terminal Server Aware, then it 
works.

Jacob, Christian wrote:
> After some research I found out that the user who calls LoadUserProfile needs 
> the SeTcbName privilege (Act as part of the Operating System). However, since 
> the custom action is run deferred in System context, I thought, it already 
> HAS all necessary privileges. 

Not necessarily. MSI gives up some privileges on Windows Vista and 
later. From 
http://blogs.msdn.com/windows_installer_team/archive/2006/10/30/preview-of-upcoming-kb-articles-windows-installer-4-0-on-windows-vista.aspx:

*KB Title:* Windows Installer (MSI) packages only have access to the 
specific privileges of the Windows Installer service on Windows Vista.

*Summary:* Software developers should be aware that, starting with 
Windows Vista, the Windows Installer service only has privileges 
required for software installation. Custom actions that require 
additional privileges will fail.

*More Information:* The Windows Installer service has the following 
specific privileges: 
SeTcbPrivilege,SeCreatePagefilePrivilege,SeLockMemoryPrivilege,SeIncreaseBasePriorityPrivilege,SeCreatePermanentPrivilege,SeAuditPrivilege,SeSecurityPrivilege,SeChangeNotifyPrivilege,SeProfileSingleProcessPrivilege,SeImpersonatePrivilege,SeCreateGlobalPrivilege,SeAssignPrimaryTokenPrivilege,SeRestorePrivilege,SeIncreaseQuotaPrivilege,SeShutdownPrivilege,SeTakeOwnershipPrivilege,SeLoadDriverPrivilege.
 
Since Custom Actions inherit the same privileges of the Windows 
Installer service, custom actions will have only these privileges, even 
when running in an elevated context. If your application installation 
requires configuration that requires other privileges, it can not be 
done though a Custom Action.

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to