Yeah, I am thinking that what I want is no longer allowed
programmatically.  Bummer.  I can't do it from icacls and a commmand
prompt on the machine either.

Thanks,

A

-----Original Message-----
From: Wilson, Phil [mailto:phil.wil...@invensys.com] 
Sent: Wednesday, March 24, 2010 10:43 AM
To: General discussion for Windows Installer XML toolset.
Subject: Re: [WiX-users] CAQuietExec and Windows Server 2008 UAC

This might be a result of ever-tightening security. The custom action
wants to run the command prompt shell (that will try to open a command
prompt window) with the local system account. I would not be surprised
if this can't be done any more. It might be related to the session
service isolation when non-impersonated custom actions run off the
msiexec.exe service process.  Does it also fail on Vista? Windows 7? 

There might be a WiX extension for what you want to, someone might jump
in with that answer. There's also LockPermissions. 

Phil Wilson 

-----Original Message-----
From: Amy Rosewater [mailto:arosewa...@spectrumhr.com] 
Sent: Wednesday, March 24, 2010 8:48 AM
To: General discussion for Windows Installer XML toolset.
Subject: [WiX-users] CAQuietExec and Windows Server 2008 UAC

Hi All,

 

I have a custom action to run CAQuietExec (using wix v 3.0.5419.0).  It
is currently set up to run as a deferred custom action with no
impersonation.

 

<CustomAction Id="AssignUserPermissionsProperty"
Property="ASSIGNUSERCOMMANDPERMISSIONS"
Value="&quot;[ICACLSEXEPATH]&quot; &quot;[COMMANDEXEPATH]&quot; /grant
[APPLICATIONUSER]:(RX)" />

<CustomAction Id="ASSIGNUSERCOMMANDPERMISSIONS" BinaryKey="WixCA"
DllEntry="CAQuietExec" Execute="deferred" Impersonate="no"
Return="ignore" />

 

When this custom action runs in Windows Server 2003 everything works
great.  When it runs in Windows Server 2008 with UAC I get the following
error in the log:

 

CAQuietExec:  C:\Windows\system32\cmd.exe: Access is denied.

 

The user running the install at the time is an administrator on the
machine.  All the information I have found out there on this subject
tells me that to get the custom action to run with elevated permissions
and avoid this error I need to run deferred with impersonate set to no.
Is there something I'm missing?

 

Thanks in advance,


Amy

 

Amy Rosewater VanMatre

SPECTRUM Human Resource Systems Corporation

707 17th Street Suite 3800

Denver CO, 80202

303.592.3403

arosewa...@spectrumhr.com

 

------------------------------------------------------------------------
------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users


*** Confidentiality Notice: This e-mail, including any associated or
attached files, is intended solely for the individual or entity to which
it is addressed. This e-mail is confidential and may well also be
legally privileged. If you have received it in error, you are on notice
of its status. Please notify the sender immediately by reply e-mail and
then delete this message from your system. Please do not copy it or use
it for any purposes, or disclose its contents to any other person. This
email comes from a division of the Invensys Group, owned by Invensys
plc, which is a company registered in England and Wales with its
registered office at Portland House, Bressenden Place, London, SW1E 5BF
(Registered number 166023). For a list of European legal entities within
the Invensys Group, please go to
http://www.invensys.com/legal/default.asp?top_nav_id=77&nav_id=80&prev_i
d=77. You may contact Invensys plc on +44 (0)20 7821 3848 or e-mail
inet.hqhelpd...@invensys.com. This e-mail and any attachments thereto
may be subject to the terms of any agreements between Invensys (and/or
its subsidiaries and affiliates) and the recipient (and/or its
subsidiaries and affiliates).



------------------------------------------------------------------------
------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to