I believe the process will execute at the credentials given (the ones with 
admin credentials). In this case we are talking about an installer. The 
installer needs admin privileges so a standard user cannot execute it. It 
doesn't make sense to automatically start anything on behalf of the user (at 
least to me).

Edwin G. Castro
Software Developer - Staff
Electronic Banking Services
Fiserv
Office: 503-746-0643
Fax: 503-617-0291
www.fiserv.com
Please consider the environment before printing this e-mail

> -----Original Message-----
> From: i...@roadrunner.com [mailto:i...@roadrunner.com]
> Sent: Monday, June 21, 2010 6:46 PM
> To: Castro, Edwin G. (Hillsboro)
> Subject: RE: [WiX-users] Can this be done with WiX?
> 
> > I think you are confusing privileges with accounts. I can be logged
> on my machine as UserX. When I run the installer (bootstrapper/what-
> have-you) it will execute as UserX. Any processes that the installer
> launches can be made to impersonate UserX. If the installer needs admin
> privileges (say to install files in ProgramFiles and create registry
> keys in HKLM:\SOFTWARE\What-Have-You) then we need to author the
> installer to be per-machine. That will make the Windows Installer
> engine elevate *at the right time* so the system can be appropriately
> modified. If UserX does NOT have admin privileges (is not part of the
> Administrators group) then Windows Installer will prompt for
> credentials for a user that does have admin privileges (again, at the
> right time). If UserX DOES have admin privileges (is part of the
> Administrators group) then Windows Installer will prompt for elevation
> at the right time (without asking for credentials) because all users
> run in least privilege mode by default. The key to all of this is that
> we can ignore admin privileges when you are trying to answer the
> question of whether you can launch a process as UserX. The answer to
> that question is yes. If UserX happens to have admin privileges then
> that's great but irrelevant for the question at hand.
> 
> I am looking specifically at the case when UserX is a standard user.
> When UserX does something that requires elevation (let's say runs
> programA that needs to mess with ProgramFiles), then he will be
> prompted for admin credentials (let's say userAdmin/password1234). Will
> then programA run as userX (but somehow elevated), or as userAdmin? In
> other words, what will be the value of APPDATA for example?
> C:\Users\UserX\AppData or C:\Users\UserAdmin\AppData?
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to