SetACL In Custom Action
Hi, I'm currently having issues with setting registry security on XP with a setacl custom action in wise.
I have to give the USERS group rights to SET VALUE on a class id. The custom action runs fine and sets the permissions when I've installed it. However when I log out of the PC and log in as a USER account and run the shoftcut for the application and the MSI repairs, it seems the permissions have been changed again without any custom action being run
This is the command I'm using in the Custom action :
-on "HKEY_CLASSES_ROOT\CLSID\{32A73FAD-CB45-4384-9F8C-6D2B6483FB84}" -ot reg -actn ace -ace "n:users;p:set_val;m:grant;w:dacl" -rec yes -silent
with a condition of "NOT Installed"
Is this correct?
I have to give the USERS group rights to SET VALUE on a class id. The custom action runs fine and sets the permissions when I've installed it. However when I log out of the PC and log in as a USER account and run the shoftcut for the application and the MSI repairs, it seems the permissions have been changed again without any custom action being run
This is the command I'm using in the Custom action :
-on "HKEY_CLASSES_ROOT\CLSID\{32A73FAD-CB45-4384-9F8C-6D2B6483FB84}" -ot reg -actn ace -ace "n:users;p:set_val;m:grant;w:dacl" -rec yes -silent
with a condition of "NOT Installed"
Is this correct?
0 Comments
[ + ] Show comments
Answers (4)
Please log in to answer
Posted by:
MSIPackager
18 years ago
Hey Ditch - hows it goin?!
Not sure it will work like this cos HKEY_CLASSES_ROOT is a combination of HKLM\SOFTWARE\Classes and HKCU\Software\Classes...
Give this a try - fire up regedit on your machine and look in each hive to find your class ID then try changing the SetACL command to set permissions via that key - e.g. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32A73FAD-CB45-4384-9F8C-6D2B6483FB84}
Hope this makes sense [;)] Sure some one out there will correct me anyway... haha
Cheers,
Robbo.
Not sure it will work like this cos HKEY_CLASSES_ROOT is a combination of HKLM\SOFTWARE\Classes and HKCU\Software\Classes...
Give this a try - fire up regedit on your machine and look in each hive to find your class ID then try changing the SetACL command to set permissions via that key - e.g. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32A73FAD-CB45-4384-9F8C-6D2B6483FB84}
Hope this makes sense [;)] Sure some one out there will correct me anyway... haha
Cheers,
Robbo.
Posted by:
artiahc_elay
18 years ago
hey ditch
try using
-on "HKEY_CLASSES_ROOT\CLSID\{32A73FAD-CB45-4384-9F8C-6D2B6483FB84}" -ot reg -actn ace -ace "n:users;p:set_val;m:set;w:dacl" -rec yes -silent
set will discard any existing rights thus allowing the specified rights where as grant combines the specified rights with exisiting rights.
try using
m:setinstead of
m:grant
-on "HKEY_CLASSES_ROOT\CLSID\{32A73FAD-CB45-4384-9F8C-6D2B6483FB84}" -ot reg -actn ace -ace "n:users;p:set_val;m:set;w:dacl" -rec yes -silent
set will discard any existing rights thus allowing the specified rights where as grant combines the specified rights with exisiting rights.
Posted by:
ditch_nz
18 years ago
Thanks artiahc_elay I figured that out last night and it worked. Thanks Anyways
And Robbo ... you rule also :) hermens sux, james is a plonker
And Robbo ... you rule also :) hermens sux, james is a plonker
Posted by:
MSIPackager
18 years ago
Nice one.
Don't talk to me about those guys - they're not even packagers, they're slackagers! [;)]
Have a good day,
Robbo.
Don't talk to me about those guys - they're not even packagers, they're slackagers! [;)]
Have a good day,
Robbo.
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.