I'll just add (and risk stating the obvious) that if a limited user could 
actually perform an install that changed areas on the system that are 
restricted to administrators, then that would be one heck of a security hole.  
Administrator credentials have to be supplied somewhere, whether it's an "over 
the shoulder" install or a group policy push to the machine from a server 
somewhere. 

Phil Wilson 

-----Original Message-----
From: Blair [mailto:os...@live.com] 
Sent: Friday, September 11, 2009 2:04 PM
To: 'General discussion for Windows Installer XML toolset.'
Subject: Re: [WiX-users] Vista Standard User and perMachine install

Per-machine is exactly that: all users on that machine. Anything that
affects more than the current user is supposed to require admin privileges
to accomplish (that is why opening the clock/calendar in the task bar on XP
requires admin privileges) as a basic tenant of machine stability (and
reducing the impact of viruses and other malware).

As a result, all workarounds, in order to maintain basic machine security,
require administrative privilege to setup, which means successfully
navigating the UAC prompt as part of your installation routine.

If you author your application in such a way as to be completely per-user
(and not ever need anything that is a protected per-machine resource) you
can do pure per-User installations and each installation will be completely
independent of all others (as if they were on separate computers). Of
course, some things can't be done this way (drivers, services, GAC, native
SxS) but most probably software can (in fact, OneClick is based entirely on
a per-User model) even though as an industry we aren't used to it.

Of course this also means installing your code somewhere other than
ProgramFiles. It also means not using the Windows Firewall APIs or other
similar things. It also means not installing the MSM version of the native
C/C++ libraries. OTOH, if you are not using Windows/Microsoft Update to
service your application (and non-MSFT groups that are not distributing
drivers currently can't AFAIK) that won't be an issue. It also means that
each user that installs your application will have separate copies (but disk
space isn't the issue it once was for most users). COM has a per-user
variation, and most hosts don't care, so you can even deploy COM (even in
Internet Explorer) per-user. .NET can run full trust without being installed
to the GAC from a per-user installation as well, and start menu
items/desktop icons/quick-launch-bar icons are all available to you from
those installations.

-----Original Message-----
From: warne warne [mailto:warne...@hotmail.com] 
Sent: Friday, September 11, 2009 12:49 PM
To: wix-users@lists.sourceforge.net
Subject: [WiX-users] Vista Standard User and perMachine install


 

Hi there,

My setup is a perMachine (ALLUSERS=1) install which I set in the 'Package'
element and thats fine.

Just wondering then, is there any way to get round vista's UAC for users
without admin rights ie 'Standard Users' ? They get the old  "You do not
have sufficient priviliges etc" message during install.

I understand that is entirely by design but, nonetheless, I would still like
them to be able to install. I dont want to allow a 'perUser' install for
possible upgrade/uninstall problems later on down the road that I read all
about. 

I set InstallPrivileges="limited" in the Package element also but that just
gets over the initial setup part.

Is there an MSIEXEC command I could use as part of a bootstrap for example?


thanks very much,

 

 

 


 

_________________________________________________________________
View your other email accounts from your Hotmail inbox. Add them now.
http://clk.atdmt.com/UKM/go/167688463/direct/01/
----------------------------------------------------------------------------
--
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus
on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users



------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to