Unfortunately, using a bootstrapper .exe or the like isn't an option for the environment I'll be deploying to. I've decided to just use the LogonUser in the advapi32 dll. Still some teaks to make it work as smooth as I want, but the logon process itself doesn't need to be elevated and all I'm really trying to do (atm) is verify that the user credentials are corrrect. So far, I'm able to do this as an immediate action and no longer have to run it as a deferred action. I may still go that route though. The concrete is still wet.
On Sun, Mar 21, 2010 at 8:46 AM, dB. <dbl...@dblock.org> wrote: > I couldn't get elevation to happen programmatically, but my installers run > in a bootstrapper, so I got the bootstrapper to elevate (dotnetinstaller, > http://dotnetinstaller.codeplex.com supports a custom manifest). It seems > like this is the only easy option, because from my understanding elevation > is per process. Maybe someone can implement an elevated server piece, do the > checks and come back with the result? > > If you don't want to reinvent the wheel, http://msiext.codeplex.com has > all this stuff nicely implemented in a wix UI extension. The CAs are C++. > Screenshots: > http://msiext.codeplex.com/wikipage?title=Common%20UI%20Wix%20Extension > > Hope this helps, > dB. > > > dB. @ dblock.org > Moscow|Geneva|Seattle|New York > > > -----Original Message----- > From: Stryder Crown [mailto:stryde...@gmail.com] > Sent: Friday, March 19, 2010 2:04 PM > To: General discussion for Windows Installer XML toolset. > Subject: [WiX-users] UAC, InstallService, verify user account... > > Getting all three to work together isn't...well, working. Hoping somebody > might have a suggestion as to how this could work better... > > I've got a complete handle on the actual service installation and start up > (and tear down) and can even have the user enter account information to run > the service as via an install dialog. > > But, if the account information isn't correct, when the service is > installed > (and started) I get the 'insufficient privileges' dialog box with only > 'retry' and 'cancel' buttons. The user has no opportunity (at that point) > to re-enter the account information (user name and password). > > So, I thought I'd be clever and execute a custom action that uses > SSPI/Logon > to validate the users information at the installer dialog, before the > service is installed. And this works too! Except under UAC conditions > (Vista/windows 7). If I have UAC disabled, I have no problems. So, this > means I have to elevate the custom action...but since we're talking UAC, I > have to defer it to InstallInitialize/InstallFinalize...At which point > there's no dialog entry available. And at that point, I can't even get a > dialog going from the Custom Action (via winforms/WPF) from which I > would've > set the verified and set the Properties being used by the ServiceInstall > element. > > So, any ideas? Did any of that make sense? Anybody else out there try to > tackle User Authentication/Impersonation during an install? I'm about to > see if I can't push the custom action back to the end of the installation > process, and update the service at that point, but I'm not feeling too > confident (or proud) of this sort of hackery. > > Stryder > > ------------------------------------------------------------------------------ > Download Intel® Parallel Studio Eval > Try the new software tools for yourself. Speed compiling, find bugs > proactively, and fine-tune applications for parallel performance. > See why Intel Parallel Studio got high marks during beta. > http://p.sf.net/sfu/intel-sw-dev > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > > > ------------------------------------------------------------------------------ > Download Intel® Parallel Studio Eval > Try the new software tools for yourself. Speed compiling, find bugs > proactively, and fine-tune applications for parallel performance. > See why Intel Parallel Studio got high marks during beta. > http://p.sf.net/sfu/intel-sw-dev > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
