I always create a local account to run our websites under, that way I can be very explicit in what permissions it has, which of course is not many.
I do have some similar code to work out the IIS_WPG/IIS_IUsers group name though. -----Original Message----- From: Michael Osmond [mailto:mosm...@baytech.com.au] Sent: 02 June 2011 03:25 To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] IUSR Hi Here is a snipit of how I determine if I should use name\IIS_WPG (IIS6) or builtin\IIS_IUSRS (IIS7) group in our installs. It has to deal with both the domain part and the name. Gets messy because of domain controllers as well. You could take something like this as a starting point. Avoids having to write a custom action. <Property Id="IISWPGDOMAIN" Secure="yes" /> <CustomAction Id="SetIISGRPDomainLocal" Property="IISGRPDOMAIN" Value="[ComputerName]" Execute="firstSequence" /> <CustomAction Id="SetIISGRPDomainDC" Property="IISGRPDOMAIN" Value="[%USERDOMAIN]" Execute="firstSequence" /> <CustomAction Id="SetIISGRPDomainBuiltIn" Property="IISGRPDOMAIN" Value="" Execute="firstSequence" /> <CustomAction Id="SetIIS6GRP" Property="IISGRPNAME" Value="IIS_WPG" Execute="firstSequence" /> <CustomAction Id="SetIIS7GRP" Property="IISGRPNAME" Value="IIS_IUSRS" Execute="firstSequence" /> <util:Group Id="IISSecurityGroup" Domain="[IISGRPDOMAIN]" Name="[IISGRPNAME]" /> <InstallExecuteSequence> <Custom Action="SetIISGRPDomainLocal" After="AppSearch" ><![CDATA[MsiNTProductType <> 2 AND Not IISGRPDOMAIN And VersionNT = 502]]></Custom> <Custom Action="SetIISGRPDomainDC" After="AppSearch" ><![CDATA[MsiNTProductType = 2 AND Not IISGRPDOMAIN And VersionNT = 502]]></Custom> <Custom Action="SetIISGRPDomainBuiltIn" After="AppSearch" ><![CDATA[VersionNT >= 600]]></Custom> <Custom Action="SetIIS6GRP" After="AppSearch" ><![CDATA[VersionNT = 502]]></Custom> <Custom Action="SetIIS7GRP" After="AppSearch" ><![CDATA[VersionNT >= 600]]></Custom> </InstallExecuteSequence> <UI> <InstallUISequence> <Custom Action="SetIISGRPDomainLocal" After="AppSearch" ><![CDATA[MsiNTProductType <> 2 AND Not IISGRPDOMAIN And VersionNT = 502]]></Custom> <Custom Action="SetIISGRPDomainDC" After="AppSearch" ><![CDATA[MsiNTProductType = 2 AND Not IISGRPDOMAIN And VersionNT = 502]]></Custom> <Custom Action="SetIISGRPDomainBuiltIn" After="AppSearch" ><![CDATA[VersionNT >= 600]]></Custom> <Custom Action="SetIIS6GRP" After="AppSearch" ><![CDATA[VersionNT = 502]]></Custom> <Custom Action="SetIIS7GRP" After="AppSearch" ><![CDATA[VersionNT >= 600]]></Custom> </InstallUISequence> </UI> Michael -----Original Message----- From: gapearce [mailto:mr_gapea...@yahoo.com] Sent: Thursday, 2 June 2011 12:16 PM To: wix-users@lists.sourceforge.net Subject: Re: [WiX-users] IUSR I was under the impression that IUSR_USERNAME was a property available from the WiXIISExtensions. Now that I have researched this a little more, I realize this is wrong. I'm just trying to assign specific permissions to a folder for the account that IIS is running under. I was hoping to avoid writing a custom action for this, but maybe that's the way to go. If anyone has a suggestion, it would be greatly appreciated. -- View this message in context: http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/IUSR-tp6404206p 6429679.html Sent from the wix-users mailing list archive at Nabble.com. ----------------------------------------------------------------------------- - Simplify data backup and recovery for your virtual environment with vRanger. Installation's a snap, and flexible recovery options mean your data is safe, secure and there when you need it. Data protection magic? Nope - It's vRanger. Get your free trial download today. http://p.sf.net/sfu/quest-sfdev2dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ----------------------------------------------------------------------------- - Simplify data backup and recovery for your virtual environment with vRanger. Installation's a snap, and flexible recovery options mean your data is safe, secure and there when you need it. Data protection magic? Nope - It's vRanger. Get your free trial download today. http://p.sf.net/sfu/quest-sfdev2dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users SDL PLC confidential, all rights reserved. If you are not the intended recipient of this mail SDL requests and requires that you delete it without acting upon or copying any of its contents, and we further request that you advise us. SDL PLC is a public limited company registered in England and Wales. Registered number: 02675207. Registered address: Globe House, Clivemont Road, Maidenhead, Berkshire SL6 7DY, UK. ------------------------------------------------------------------------------ Simplify data backup and recovery for your virtual environment with vRanger. Installation's a snap, and flexible recovery options mean your data is safe, secure and there when you need it. Data protection magic? Nope - It's vRanger. Get your free trial download today. http://p.sf.net/sfu/quest-sfdev2dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
