I found out how to get a property out of the running MSI file. If you want to know, read the following link:
http://www.installshield.com/news/newsletter/0302-articles/msiaccess.asp

In your msi call a vbs action en copy the vbs in to it
with de MMC create a sec.inf file en set the extra key's you want the user te modify and put this inf file in youre msi

at the end sec edit wil purce these rights good luck!!!


Dim objShell, objFso '// Declaring object variables
Set objShell = CreateObject("WScript.Shell") '// Creates Shell object
Set objFso = CreateObject("Scripting.FileSystemObject") '// Creates File System object
Set strSystemPath = objFso.GetSpecialFolder(1)
objShell.Run strSystemPath & "\secedit.exe /configure /db secedit.sdb /cfg " & _
"""%WINDIR%\security\templates\APPLICATIONNAME.inf"" /log " & _
"""%WINDIR%\security\logs\Appicationname.inf.log"" /quiet", 0, true

Thanks, this methode I didn't knew ..
I am using SetACL.exe now, a handy util that does the job fine. There is also a W2k resource kit utill named Dacl.exe, I've heard this can be helpfull too.

Thanks for the inside![:D]

I like to use reggrant and secedit with inf files.

I find them both very good.

I have looked around here a bit for working with file permissions and found that this looks the best option.

I am not much of a VB person so I would like to know if this script is OK. You know the old fat finger syndrome. What is with the underscores after the &

I tried this in a msi and it did not seem to want to work.

THanks for the help


ORIGINAL: Mooijr

In your msi call a vbs action en copy the vbs in to it
with de MMC create a sec.inf file en set the extra key's you want the user te modify and put this inf file in youre msi

at the end sec edit wil purce these rights good luck!!!


Dim objShell, objFso '// Declaring object variables
Set objShell = CreateObject("WScript.Shell") '// Creates Shell object
Set objFso = CreateObject("Scripting.FileSystemObject") '// Creates File System object
Set strSystemPath = objFso.GetSpecialFolder(1)
objShell.Run strSystemPath & "\secedit.exe /configure /db secedit.sdb /cfg " & _
"""%WINDIR%\security\templates\APPLICATIONNAME.inf"" /log " & _
"""%WINDIR%\security\logs\Appicationname.inf.log"" /quiet", 0, true

Have you made an inf file with security templates?
You must add the inf file into the package under c:\windows\security\templates.
You also have to modify the APPLICATIONNAME.inf name in the script with the name of your inf filename.
After that it will lauch secedit.exe to apply the inf file to set permissions.

ps: the underscores is just an end of line sign