IIRC, Windows Installer purposefully removes the Debug privilege from its custom action servers (which are what call you).I think the MSI SDK lists the priveleges removed somewhere...
On Tue, Feb 22, 2011 at 6:13 AM, Jeff Wisgo <locksl...@gmail.com> wrote: > Phil, > > I checked and you are correct, the msiexec.exe that is the parent process > is > running with limited privileges. But isn't the purpose of "deferred" mode > to > run with elevaged privileges? Or are you saying that it will only elevate > as > far as msiexec's privileges are? > > I ran msiexec.exe from a SYSTEM (full privileged) command prompt, and > msiexec.exe still downgrades its privileges. Is this something being done > by > the OS or the binary itself? I'm hoping there is some way to force msiexec > to run with full privileges. > > Thanks, > > Jeff > > On Mon, Feb 21, 2011 at 3:00 PM, Wilson, Phil <phil.wil...@invensys.com > >wrote: > > > The system account is irrelevant here. What matters is the list of rights > > that the msiexec process is running with, and it does not have all > possible > > rights enabled all of the time. I think you've already discovered that, > so I > > don't know what to advise. I forget where this is documented, but that > code > > (and therefore your custom action) is running with a limited list of > rights > > (something that started on MSI 4.0) that does not include the one > required > > to terminate processes. > > > > Phil Wilson > > > > -----Original Message----- > > From: Jeff Wisgo [mailto:locksl...@gmail.com] > > Sent: Sunday, February 20, 2011 3:32 PM > > To: General discussion for Windows Installer XML toolset. > > Subject: Re: [WiX-users] Running a custom action with elevated privileges > > > > Umesh, > > > > Thanks for responding to my question. > > > > I am using OpenProcess(PROCESS_TERMINATE, ...). When I execute the same > > exact code from a system account with elevated privileges using PSEXEC, > it > > works, so I know there is something wrong with the privileges when my > code > > runs as a Custom Action. I also have verified this by looking at the > > privileges with Process Explorer. > > > > Any other ideas? > > > > Thanks, > > > > Jeff > > > > On Sat, Feb 19, 2011 at 12:56 AM, Umeshj <umesh_jogle...@hotmail.com> > > wrote: > > > > > > > > > > > What access level are you using for OpenProcess() ? > > > > > > A simple PROCESS_TERMINATE is sufficient. If you are using > > > PROCESS_ALL_ACCESS it will fail. > > > I had experienced the same problems and after changing the > > dwDesiredAccess > > > param it worked well. > > > > > > Umesh > > > -- > > > View this message in context: > > > > > > http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Running-a-custom-action-with-elevated-privileges-tp6041158p6042577.html > > > Sent from the wix-users mailing list archive at Nabble.com. > > > > > > > > > > > > ------------------------------------------------------------------------------ > > > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio > XE: > > > Pinpoint memory and threading errors before they happen. > > > Find and fix more than 250 security defects in the development cycle. > > > Locate bottlenecks in serial and parallel code that limit performance. > > > http://p.sf.net/sfu/intel-dev2devfeb > > > _______________________________________________ > > > WiX-users mailing list > > > WiX-users@lists.sourceforge.net > > > https://lists.sourceforge.net/lists/listinfo/wix-users > > > > > > > > ------------------------------------------------------------------------------ > > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: > > Pinpoint memory and threading errors before they happen. > > Find and fix more than 250 security defects in the development cycle. > > Locate bottlenecks in serial and parallel code that limit performance. > > http://p.sf.net/sfu/intel-dev2devfeb > > _______________________________________________ > > WiX-users mailing list > > WiX-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/wix-users > > > > > > *** Confidentiality Notice: This e-mail, including any associated or > > attached files, is intended solely for the individual or entity to which > it > > is addressed. This e-mail is confidential and may well also be legally > > privileged. If you have received it in error, you are on notice of its > > status. Please notify the sender immediately by reply e-mail and then > delete > > this message from your system. Please do not copy it or use it for any > > purposes, or disclose its contents to any other person. This email comes > > from a division of the Invensys Group, owned by Invensys plc, which is a > > company registered in England and Wales with its registered office at 3rd > > Floor, 40 Grosvenor Place, London, SW1X 7AW (Registered number 166023). > For > > a list of European legal entities within the Invensys Group, please go to > > > http://www.invensys.com/legal/default.asp?top_nav_id=77&nav_id=80&prev_id=77 > > . > > > > You may contact Invensys plc on +44 (0)20 3155 1200 or e-mail > > recept...@invensys.com. This e-mail and any attachments thereto may be > > subject to the terms of any agreements between Invensys (and/or its > > subsidiaries and affiliates) and the recipient (and/or its subsidiaries > and > > affiliates). > > > > > > > > > > > ------------------------------------------------------------------------------ > > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: > > Pinpoint memory and threading errors before they happen. > > Find and fix more than 250 security defects in the development cycle. > > Locate bottlenecks in serial and parallel code that limit performance. > > http://p.sf.net/sfu/intel-dev2devfeb > > _______________________________________________ > > WiX-users mailing list > > WiX-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/wix-users > > > > ------------------------------------------------------------------------------ > Index, Search & Analyze Logs and other IT data in Real-Time with Splunk > Collect, index and harness all the fast moving IT data generated by your > applications, servers and devices whether physical, virtual or in the > cloud. > Deliver compliance at lower cost and gain new business insights. > Free Software Download: http://p.sf.net/sfu/splunk-dev2dev > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > > -- virtually, Rob Mensching - http://RobMensching.com LLC ------------------------------------------------------------------------------ Index, Search & Analyze Logs and other IT data in Real-Time with Splunk Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. Free Software Download: http://p.sf.net/sfu/splunk-dev2dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
