I am working on a upgrade scenario and have to get rid of a process from one of many possible old versions. Killing the process is the only way to make sure the upgrade succeeds cleanly, as there are no hooks in the legacy code for a clean shutdown.
There *has* to be some way to force the MSI to run as the same privileges as the user I am running it from, I just cant seem to figure out what it is. Jeff On Tue, Feb 22, 2011 at 1:22 PM, Wilson, Phil <phil.wil...@invensys.com>wrote: > Exactly - the MSI team apparently uses the least privilege rule, which is > why it runs without a bunch of privileges that are considered non-essential > to an install. > > What is special about this process that you have to go into it and kill it? > Is there really no other way to get it to go away? > > Phil Wilson > > > -----Original Message----- > From: Rob Mensching [mailto:r...@robmensching.com] > Sent: Tuesday, February 22, 2011 7:54 AM > To: General discussion for Windows Installer XML toolset. > Subject: Re: [WiX-users] Running a custom action with elevated privileges > > IIRC, Windows Installer purposefully removes the Debug privilege from its > custom action servers (which are what call you).I think the MSI SDK lists > the priveleges removed somewhere... > > On Tue, Feb 22, 2011 at 6:13 AM, Jeff Wisgo <locksl...@gmail.com> wrote: > > > Phil, > > > > I checked and you are correct, the msiexec.exe that is the parent process > > is > > running with limited privileges. But isn't the purpose of "deferred" mode > > to > > run with elevaged privileges? Or are you saying that it will only elevate > > as > > far as msiexec's privileges are? > > > > I ran msiexec.exe from a SYSTEM (full privileged) command prompt, and > > msiexec.exe still downgrades its privileges. Is this something being done > > by > > the OS or the binary itself? I'm hoping there is some way to force > msiexec > > to run with full privileges. > > > > Thanks, > > > > Jeff > > > > On Mon, Feb 21, 2011 at 3:00 PM, Wilson, Phil <phil.wil...@invensys.com > > >wrote: > > > > > The system account is irrelevant here. What matters is the list of > rights > > > that the msiexec process is running with, and it does not have all > > possible > > > rights enabled all of the time. I think you've already discovered that, > > so I > > > don't know what to advise. I forget where this is documented, but that > > code > > > (and therefore your custom action) is running with a limited list of > > rights > > > (something that started on MSI 4.0) that does not include the one > > required > > > to terminate processes. > > > > > > Phil Wilson > > > > > > -----Original Message----- > > > From: Jeff Wisgo [mailto:locksl...@gmail.com] > > > Sent: Sunday, February 20, 2011 3:32 PM > > > To: General discussion for Windows Installer XML toolset. > > > Subject: Re: [WiX-users] Running a custom action with elevated > privileges > > > > > > Umesh, > > > > > > Thanks for responding to my question. > > > > > > I am using OpenProcess(PROCESS_TERMINATE, ...). When I execute the same > > > exact code from a system account with elevated privileges using PSEXEC, > > it > > > works, so I know there is something wrong with the privileges when my > > code > > > runs as a Custom Action. I also have verified this by looking at the > > > privileges with Process Explorer. > > > > > > Any other ideas? > > > > > > Thanks, > > > > > > Jeff > > > > > > On Sat, Feb 19, 2011 at 12:56 AM, Umeshj <umesh_jogle...@hotmail.com> > > > wrote: > > > > > > > > > > > > > > > What access level are you using for OpenProcess() ? > > > > > > > > A simple PROCESS_TERMINATE is sufficient. If you are using > > > > PROCESS_ALL_ACCESS it will fail. > > > > I had experienced the same problems and after changing the > > > dwDesiredAccess > > > > param it worked well. > > > > > > > > Umesh > > > > -- > > > > View this message in context: > > > > > > > > > > http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Running-a-custom-action-with-elevated-privileges-tp6041158p6042577.html > > > > Sent from the wix-users mailing list archive at Nabble.com. > > > > > > > > > > > > > > > > > > ------------------------------------------------------------------------------ > > > > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio > > XE: > > > > Pinpoint memory and threading errors before they happen. > > > > Find and fix more than 250 security defects in the development cycle. > > > > Locate bottlenecks in serial and parallel code that limit > performance. > > > > http://p.sf.net/sfu/intel-dev2devfeb > > > > _______________________________________________ > > > > WiX-users mailing list > > > > WiX-users@lists.sourceforge.net > > > > https://lists.sourceforge.net/lists/listinfo/wix-users > > > > > > > > > > > > > ------------------------------------------------------------------------------ > > > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio > XE: > > > Pinpoint memory and threading errors before they happen. > > > Find and fix more than 250 security defects in the development cycle. > > > Locate bottlenecks in serial and parallel code that limit performance. > > > http://p.sf.net/sfu/intel-dev2devfeb > > > _______________________________________________ > > > WiX-users mailing list > > > WiX-users@lists.sourceforge.net > > > https://lists.sourceforge.net/lists/listinfo/wix-users > > > > > > > > > *** Confidentiality Notice: This e-mail, including any associated or > > > attached files, is intended solely for the individual or entity to > which > > it > > > is addressed. This e-mail is confidential and may well also be legally > > > privileged. If you have received it in error, you are on notice of its > > > status. Please notify the sender immediately by reply e-mail and then > > delete > > > this message from your system. Please do not copy it or use it for any > > > purposes, or disclose its contents to any other person. This email > comes > > > from a division of the Invensys Group, owned by Invensys plc, which is > a > > > company registered in England and Wales with its registered office at > 3rd > > > Floor, 40 Grosvenor Place, London, SW1X 7AW (Registered number 166023). > > For > > > a list of European legal entities within the Invensys Group, please go > to > > > > > > http://www.invensys.com/legal/default.asp?top_nav_id=77&nav_id=80&prev_id=77 > > > . > > > > > > You may contact Invensys plc on +44 (0)20 3155 1200 or e-mail > > > recept...@invensys.com. This e-mail and any attachments thereto may be > > > subject to the terms of any agreements between Invensys (and/or its > > > subsidiaries and affiliates) and the recipient (and/or its subsidiaries > > and > > > affiliates). > > > > > > > > > > > > > > > > > > ------------------------------------------------------------------------------ > > > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio > XE: > > > Pinpoint memory and threading errors before they happen. > > > Find and fix more than 250 security defects in the development cycle. > > > Locate bottlenecks in serial and parallel code that limit performance. > > > http://p.sf.net/sfu/intel-dev2devfeb > > > _______________________________________________ > > > WiX-users mailing list > > > WiX-users@lists.sourceforge.net > > > https://lists.sourceforge.net/lists/listinfo/wix-users > > > > > > > > ------------------------------------------------------------------------------ > > Index, Search & Analyze Logs and other IT data in Real-Time with Splunk > > Collect, index and harness all the fast moving IT data generated by your > > applications, servers and devices whether physical, virtual or in the > > cloud. > > Deliver compliance at lower cost and gain new business insights. > > Free Software Download: http://p.sf.net/sfu/splunk-dev2dev > > _______________________________________________ > > WiX-users mailing list > > WiX-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/wix-users > > > > > > > -- > virtually, Rob Mensching - > http://RobMensching.com<http://robmensching.com/>LLC > > ------------------------------------------------------------------------------ > Index, Search & Analyze Logs and other IT data in Real-Time with Splunk > Collect, index and harness all the fast moving IT data generated by your > applications, servers and devices whether physical, virtual or in the > cloud. > Deliver compliance at lower cost and gain new business insights. > Free Software Download: http://p.sf.net/sfu/splunk-dev2dev > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > > > *** Confidentiality Notice: This e-mail, including any associated or > attached files, is intended solely for the individual or entity to which it > is addressed. This e-mail is confidential and may well also be legally > privileged. If you have received it in error, you are on notice of its > status. Please notify the sender immediately by reply e-mail and then delete > this message from your system. Please do not copy it or use it for any > purposes, or disclose its contents to any other person. This email comes > from a division of the Invensys Group, owned by Invensys plc, which is a > company registered in England and Wales with its registered office at 3rd > Floor, 40 Grosvenor Place, London, SW1X 7AW (Registered number 166023). For > a list of European legal entities within the Invensys Group, please go to > http://www.invensys.com/legal/default.asp?top_nav_id=77&nav_id=80&prev_id=77 > . > > You may contact Invensys plc on +44 (0)20 3155 1200 or e-mail > recept...@invensys.com. This e-mail and any attachments thereto may be > subject to the terms of any agreements between Invensys (and/or its > subsidiaries and affiliates) and the recipient (and/or its subsidiaries and > affiliates). > > > > > ------------------------------------------------------------------------------ > Free Software Download: Index, Search & Analyze Logs and other IT data in > Real-Time with Splunk. Collect, index and harness all the fast moving IT > data > generated by your applications, servers and devices whether physical, > virtual > or in the cloud. Deliver compliance at lower cost and gain new business > insights. http://p.sf.net/sfu/splunk-dev2dev > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > ------------------------------------------------------------------------------ Free Software Download: Index, Search & Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
