Deploying Installshield based MSI under system account
Hi deployment experts,
i have some trouble with an isscript based application. Using isscript8, 1050, 1150 based application. Installing runs fine under Admin account (of course), but when i try to install the application under a system account in a restricted or power user context it fails. my understanding is that system account has by default elevated priviliges, so an MSI installation should work (even without setting GPO AlwaysInstallElevated for the machine or user). Is that corrcet or do i miss something?
What are your experiences with MSI setup under system accounts? Do you see similar problems for non-isscript based MSIs?
Thanks for your help!
Johannes
i have some trouble with an isscript based application. Using isscript8, 1050, 1150 based application. Installing runs fine under Admin account (of course), but when i try to install the application under a system account in a restricted or power user context it fails. my understanding is that system account has by default elevated priviliges, so an MSI installation should work (even without setting GPO AlwaysInstallElevated for the machine or user). Is that corrcet or do i miss something?
What are your experiences with MSI setup under system accounts? Do you see similar problems for non-isscript based MSIs?
Thanks for your help!
Johannes
0 Comments
[ + ] Show comments
Answers (2)
Please log in to answer
Posted by:
yarborg
18 years ago
Do you mean THE system account or a local system account. For example, the system account "NTAUTHORITY\SYSTEM" is a unique account used by services and scheduled task etc which has nearly unlimited rights on the local computer. A local account like power users is just another account with priviledges like any other (well a group technically). It might be able to install somethings but other things might fail. Only testing can tell. But don't confuse the terminology of local system accounts like power users with the "NTAUTHORITY\SYSTEM" account which has full priviledges to everything.
I hope that helps.
I hope that helps.
Posted by:
mj jomo
18 years ago
yarbong,
thanks for your answer. i am talking about the local system account.
Example:
when i open a scheduled CMD shell with:
at hh:mm /interactive cmd
and then switch to a restricted user (CMD under system context remains open) and try to install an application in this context, should it work or not?
Thanks for any additional comments.
Another question: is there a reference for MSI under which circumstances it should be able to install MSI packages?
thanks for your answer. i am talking about the local system account.
Example:
when i open a scheduled CMD shell with:
at hh:mm /interactive cmd
and then switch to a restricted user (CMD under system context remains open) and try to install an application in this context, should it work or not?
Thanks for any additional comments.
Another question: is there a reference for MSI under which circumstances it should be able to install MSI packages?
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.