Good morning,

I am wondering if anyone could help me out with registry permissions in Wise Package Studio 6. I want my msi do give everyone the rights to specific registry key called let say "wise" with lots or other keys inside. I can set permission to a particular key but not the the main folder within the registry. How can it be done in wise?

0 Comments   [ - ] Hide Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
Answer this question or Comment on this question for clarity


hi xaviorpl,

if youve got Installshield, it's no problem (like setting permissions on a folder)

if not...

found that at the altiriswebsite:

In order to set permissions for all registry keys under a folder, modify the permissions for the folder. To do this, locate the row in the Registry table that corresponds to the key folder and note the value in the Registry column. In the Lock Permissions table, create a row that reads:

LockObject - <Registry column value>
Table - Registry
Domain - (blank)
User - Everyone
Permission - 268435456

Note that this permission value gives all permissions available for the registry to every user. If you need different permissions, please see the Windows Installer SDK topic 'LockPermissions'

Answered 07/11/2006 by: laszlo
Senior Yellow Belt

Please log in to comment
Windows Installer natively supports setting file and registry permissions via the LockPermissions table but this generally not advised due to the way it works (completely re-writing the ACL) and it's also not very reliable. You can set permissions using this method using WPS.

I'd suggest using something like setacl.exe (free 3rd party util) or secedit (part of the windows OS) as a custom action during your install. There is plenty of info already on this forum about these tools...

There is another util called regini.exe which also comes with windows but again this is not widely used by packagers. Saying that, I have used it once before and it did the job fine...

Answered 07/11/2006 by: MSIPackager
Third Degree Black Belt

Please log in to comment
Best way is to use a custom action that runs setacl or regdacl registry permission tool. Lockpermissions table is another way but it replaces the ACL on the key rather than editing it. It also doesnt propagate down to sub keys.

SetAcl works very well I find. Include it in your installation and pass a command line to it.
Answered 07/11/2006 by: dm1
Blue Belt

Please log in to comment
Thanks guys,

I was able to solve it using the subinacl.exe from microsoft. After i got subinacl i created the custom action to give the folder full rights.

[subinacl_directory] subinacl.exe /keyreg "REGISTRY_KEY_FOLDER" /GRANT=EVERYONE=F
Answered 07/12/2006 by: xaviorpl
Orange Belt

Please log in to comment