Installing MSI in a Locked permission mode
[font="trebuchet ms"]Hello ,
[font="trebuchet ms"]
[font="trebuchet ms"]How can we install the MSI or any exe (Application) for the user having locked permissions
[font="trebuchet ms"]-[font="trebuchet ms"]We can deploy it using any deployment tool so that it runs in system account and do the needful.
[font="trebuchet ms"]-Runas can also be used.
[font="trebuchet ms"]-Startup scripts can also be used.
[font="trebuchet ms"]
[font="trebuchet ms"]Is there any other way?
[font="trebuchet ms"]
[font="trebuchet ms"]How can we install the MSI or any exe (Application) for the user having locked permissions
[font="trebuchet ms"]-[font="trebuchet ms"]We can deploy it using any deployment tool so that it runs in system account and do the needful.
[font="trebuchet ms"]-Runas can also be used.
[font="trebuchet ms"]-Startup scripts can also be used.
[font="trebuchet ms"]
[font="trebuchet ms"]Is there any other way?
0 Comments
[ + ] Show comments
Answers (3)
Please log in to answer
Posted by:
Scazy
14 years ago
Hi,
As your deployment tool supports installation in the system contex then there are no limitations and all files and registry keys will be installed correctly. the only issue is that they might be locked when you launch it. Fot that reason use ProcessMonitor and catch the ACCESS DENIED then grant permission to that items over the LockPermissions table
To use RunAs for a shortcut you need to uncheck the advetised shortcut option and move it out of the component that it belogs to and set a key path to HKCU. Then the option RunAs will appear in the context menu. Dont forget to adjust the ActiveSetup.
Did you thinks to use GPO for startup scripts?
As your deployment tool supports installation in the system contex then there are no limitations and all files and registry keys will be installed correctly. the only issue is that they might be locked when you launch it. Fot that reason use ProcessMonitor and catch the ACCESS DENIED then grant permission to that items over the LockPermissions table
To use RunAs for a shortcut you need to uncheck the advetised shortcut option and move it out of the component that it belogs to and set a key path to HKCU. Then the option RunAs will appear in the context menu. Dont forget to adjust the ActiveSetup.
Did you thinks to use GPO for startup scripts?
Posted by:
yuri
14 years ago
For MSI's it is also possible to allow users to always install with elevated privileges.
http://support.microsoft.com/kb/259459
So far I only worked at one company were they actually used this policy.
http://support.microsoft.com/kb/259459
So far I only worked at one company were they actually used this policy.
Posted by:
guy.forum
14 years ago
[font="trebuchet ms"]Thanks Yuri & Scazy
[font="trebuchet ms"]
[font="trebuchet ms"]Thanks for the information.It is really helpful.
[font="trebuchet ms"]
[font="trebuchet ms"]
[font="trebuchet ms"]Thanks for the information.It is really helpful.
[font="trebuchet ms"]
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.