/build/static/layout/Breadcrumb_cap_w.png

REMOVING ADMIN PREVILEDGE IN MSI

Is there a way to make msi install as standard user. This application comes up wiv admin right error.

0 Comments   [ + ] Show comments

Answers (24)

Posted by: FrankSpierings 16 years ago
Orange Senior Belt
0
I'm not sure if I understand your question correctly, therefore two solutions will follow.

- It is possible to tell an MSI that it should be installed as a standard user under Windows Vista. Requirement is obviously that the MSI package will only write to locations where the user has write access.
Word Count Summary Property Property - http://msdn2.microsoft.com/en-gb/library/aa372870.aspx

- To install a MSI which requires elevated priviliges, under a normal user account, either use a distribution system that can set the AlwaysInstallElevated policy, or do it manually.
AlwaysInstallElevated - http://msdn2.microsoft.com/en-us/library/aa367561.aspx

Hope this helps,
Posted by: gizmolala 16 years ago
Third Degree Blue Belt
0
Thanks Frank. I've set the AlwaysInstallElevated key and still coming up with same error. Is there a tool i can use to make the msi install as standard user on Windows 2000 environment.
Posted by: anonymous_9363 16 years ago
Red Belt
0
Have you checked whether the MSI has Launch Conditions which are checking for admin privilege. Check the LaunchConditions tabel and the Privileged and AdminUser properties.
Posted by: gizmolala 16 years ago
Third Degree Blue Belt
0
See below the msi log. I copied the area dat has s return value 3


Action ended 11:59:14: LaunchConditions. Return value 3.
MSI (s) (A4:54) [11:59:14:546]: Doing action: ISCleanUpFatalExit
Action 11:59:14: ISCleanUpFatalExit.
Action start 11:59:14: ISCleanUpFatalExit.
MSI (s) (A4:A4) [11:59:14:562]: Invoking remote custom action. DLL: C:\WINNT\Installer\MSI3E.tmp, Entrypoint: CleanUp
1: Shutting down the PRC server...
1: RPC server shut down.
Action ended 11:59:14: ISCleanUpFatalExit. Return value 1.
Action ended 11:59:14: INSTALL. Return value 3.
1: MsiServerStartup ends
Action ended 11:59:14: ISMsiServerStartup. Return value 0.
Posted by: FrankSpierings 16 years ago
Orange Senior Belt
0
Gizmolala,

- Are there any entries in the LaunchConditions table (use orca.exe) ?
Posted by: gizmolala 16 years ago
Third Degree Blue Belt
0
I've removed entries in the launch condition table.
Posted by: anonymous_9363 16 years ago
Red Belt
0
I've removed entries in the launch condition table.Why? You would be better advised to fix the property which the particular condition is evaluating.

Oh, BTW, can I make a polite suggestion? This forum is a global resource so it's best to avoid "text-speak" and to use proper English.
Posted by: gizmolala 16 years ago
Third Degree Blue Belt
0
VBSCAB. Hmmm! Quite polite. If u can't offer any suggestion can you just don't bother to paste some crap in here.
Posted by: anonymous_9363 16 years ago
Red Belt
0
Ah, you must mean my suggestion to edit the property rather than removing the table. Try increasing the font size in your browser: it'll make posts easier to read.
Posted by: FrankSpierings 16 years ago
Orange Senior Belt
0
Relax guys,

I'm sure flaming each other won't help either. Although it made me laugh a bit ;)

So there are no conditions and there are no custom actions which could set the condition. This is the second time I see a post lile this --> http://itninja.com/question/migrate-2000-professional-workstation-snmp700
Kardock has not replied to my final question in that post yet, so I don't know if he found a solution.

I agree with VBSCab that when encountering such a property it is normally better to improve it rather than to delete it. Although for testing purposes, I can't see a problem with it.

So I understand correctly there are no LaunchConditions, but it still quits? In that case can I see the parts of the log where it says elevated (just to be sure).

Hope we can figure this one out.
Posted by: gizmolala 16 years ago
Third Degree Blue Belt
0
Will end up using SetAcl. Will write a batch file that will set the permissions and then install the app.
Posted by: FrankSpierings 16 years ago
Orange Senior Belt
0
That wouldn't be my personal favorite, since it drops out after LaunchConditions. So on what object(s) are you going to give extra permissions
Posted by: anonymous_9363 16 years ago
Red Belt
0
...plus it won't be any good if it's looking for admin privilege rather than simply requiring write access somewhere. As Frank says, if it's bailing after LaunchConditions, it hasn't even started to do anything which might require write access.
Posted by: gizmolala 16 years ago
Third Degree Blue Belt
0
I agree with you VB. Its actually bailing when evaluating LAUNCHCONDITION.
Posted by: nheim 16 years ago
10th Degree Black Belt
0
Hi Giz,
this is an Installshield based MSI. The problem lies not in the actions you have posted the log from. Please post the the next say 50 lines above the part you already did.
However, the best way (IMHO) to do this would be to install with a user GPO.
BTW: What app are we talking about here?
Regards, Nick
Posted by: gizmolala 16 years ago
Third Degree Blue Belt
0
Thanks Nick. the app am talking about here is Symantec Client Security.
Posted by: anonymous_9363 16 years ago
Red Belt
0
Ade, we still need the previous 50 or so lines from your log file to troubleshoot your issue.
Posted by: gizmolala 16 years ago
Third Degree Blue Belt
0
=== Verbose logging started: 20/09/2007 10:18:08 Build type: SHIP UNICODE 3.01.4000.2435 Calling process: C:\WINNT\system32\MSIEXEC.EXE ===
MSI (c) (C4:A8) [10:18:08:015]: Resetting cached policy values
MSI (c) (C4:A8) [10:18:08:015]: Machine policy value 'Debug' is 0
MSI (c) (C4:A8) [10:18:08:015]: ******* RunEngine:
******* Product: P:\Portable\National\105335_SCS\3.1.6.R3\Install\Symantec Client Security.msi
******* Action:
******* CommandLine: **********
MSI (c) (C4:A8) [10:18:08:703]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (C4:A8) [10:18:08:968]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (C4:A8) [10:18:18:953]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (C4:A8) [10:18:18:984]: Cloaking enabled.
MSI (c) (C4:A8) [10:18:18:984]: Attempting to enable all disabled priveleges before calling Install on Server
MSI (c) (C4:A8) [10:18:19:000]: End dialog not enabled
MSI (c) (C4:A8) [10:18:19:000]: Original package ==> P:\Portable\National\105335_SCS\3.1.6.R3\Install\Symantec Client Security.msi
MSI (c) (C4:A8) [10:18:19:000]: Package we're running from ==> C:\DOCUME~1\UTEST1\LOCALS~1\Temp\c26a8.msi
MSI (c) (C4:A8) [10:18:19:078]: APPCOMPAT: looking for appcompat database entry with ProductCode '{D0E46FF4-2775-4BD9-9467-B62B702D470E}'.
MSI (c) (C4:A8) [10:18:19:078]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (C4:A8) [10:18:19:078]: MSCOREE not loaded loading copy from system32
MSI (c) (C4:A8) [10:18:19:078]: Machine policy value 'TransformsSecure' is 0
MSI (c) (C4:A8) [10:18:19:078]: User policy value 'TransformsAtSource' is 0
MSI (c) (C4:A8) [10:18:19:078]: Machine policy value 'DisablePatch' is 0
MSI (c) (C4:A8) [10:18:19:078]: Machine policy value 'AllowLockdownPatch' is 0
MSI (c) (C4:A8) [10:18:19:078]: Machine policy value 'DisableMsi' is 0
MSI (c) (C4:A8) [10:18:19:078]: Machine policy value 'AlwaysInstallElevated' is 1
MSI (c) (C4:A8) [10:18:19:078]: User policy value 'AlwaysInstallElevated' is 1
MSI (c) (C4:A8) [10:18:19:078]: Running product '{D0E46FF4-2775-4BD9-9467-B62B702D470E}' with elevated privileges: All apps run elevated.
MSI (c) (C4:A8) [10:18:19:078]: Machine policy value 'DisableLUAPatching' is 0
MSI (c) (C4:A8) [10:18:19:078]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (c) (C4:A8) [10:18:19:078]: APPCOMPAT: looking for appcompat database entry with ProductCode '{D0E46FF4-2775-4BD9-9467-B62B702D470E}'.
MSI (c) (C4:A8) [10:18:19:078]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (C4:A8) [10:18:19:078]: Transforms are not secure.
MSI (c) (C4:A8) [10:18:19:078]: Command Line: SETUPEXEDIR=P:\Portable\National\105335_SCS\3.1.6.R3\Install CURRENTDIRECTORY=P:\Portable\National\105335_SCS\3.1.6.R3\Install CLIENTUILEVEL=1 CLIENTPROCESSID=1476 %HOMEPATH=\ %HOMEDRIVE=C: %HOMESHARE=
MSI (c) (C4:A8) [10:18:19:078]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{CDB24C4D-C533-4339-B9BE-E43B097A69D5}'.
MSI (c) (C4:A8) [10:18:19:078]: Product Code passed to Engine.Initialize: '
MSI (c) (C4:A8) [10:18:19:078]: Product Code from property table before transforms: '{D0E46FF4-2775-4BD9-9467-B62B702D470E}'
MSI (c) (C4:A8) [10:18:19:078]: Product Code from property table after transforms: '{D0E46FF4-2775-4BD9-9467-B62B702D470E}'
MSI (c) (C4:A8) [10:18:19:078]: Product not registered: beginning first-time install
MSI (c) (C4:A8) [10:18:19:078]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (C4:A8) [10:18:19:078]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (C4:A8) [10:18:19:078]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (C4:A8) [10:18:19:078]: Adding new sources is allowed.
MSI (c) (C4:A8) [10:18:19:078]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (C4:A8) [10:18:19:078]: Package name extracted from package path: 'Symantec Client Security.msi'
MSI (c) (C4:A8) [10:18:19:078]: Package to be registered: 'Symantec Client Security.msi'
MSI (c) (C4:A8) [10:18:19:078]: Note: 1: 2729
MSI (c) (C4:A8) [10:18:19:109]: Note: 1: 2729
MSI (c) (C4:A8) [10:18:19:109]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (c) (C4:A8) [10:18:19:109]: Machine policy value 'AlwaysInstallElevated' is 1
MSI (c) (C4:A8) [10:18:19:109]: User policy value 'AlwaysInstallElevated' is 1
MSI (c) (C4:A8) [10:18:19:109]: Running product '{D0E46FF4-2775-4BD9-9467-B62B702D470E}' with elevated privileges: All apps run elevated.
MSI (c) (C4:A8) [10:18:19:109]: Machine policy value 'EnableUserControl' is 0
MSI (c) (C4:A8) [10:18:19:109]: PROPERTY CHANGE: Adding RestrictedUserControl property. Its value is '1'.
MSI (c) (C4:A8) [10:18:19:109]: Ignoring disallowed property SETUPEXEDIR
MSI (c) (C4:A8) [10:18:19:109]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'P:\Portable\National\105335_SCS\3.1.6.R3\Install'.
MSI (c) (C4:A8) [10:18:19:109]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '1'.
MSI (c) (C4:A8) [10:18:19:109]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '1476'.
MSI (c) (C4:A8) [10:18:19:109]: Ignoring disallowed property %HOMEPATH
MSI (c) (C4:A8) [10:18:19:109]: Ignoring disallowed property %HOMEDRIVE
MSI (c) (C4:A8) [10:18:19:109]: Ignoring disallowed property %HOMESHARE
MSI (c) (C4:A8) [10:18:19:109]: TRANSFORMS property is now:
MSI (c) (C4:A8) [10:18:19:109]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\Application Data
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\Favorites
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\NetHood
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: H:\My Documents
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\PrintHood
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\Recent
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\SendTo
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\Templates
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\Local Settings\Application Data
MSI (c) (C4:A8) [10:18:19:109]: SHELL32::SHGetFolderPath returned: H:\My Documents\My Pictures
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\Start Menu\Programs\Administrative Tools
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\Start Menu\Programs\Startup
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\Start Menu\Programs
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\Start Menu
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\UTEST1\Desktop
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Templates
MSI (c) (C4:A8) [10:18:19:140]: SHELL32::SHGetFolderPath returned: C:\WINNT\Fonts
MSI (c) (C4:A8) [10:18:19:140]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (c) (C4:A8) [10:18:19:140]: MSCOREE not loaded loading copy from system32
MSI (c) (C4:A8) [10:18:19:140]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (C4:A8) [10:18:19:140]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\DOCUME~1\UTEST1\LOCALS~1\Temp\c26a8.msi'.
MSI (c) (C4:A8) [10:18:19:140]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'P:\Portable\National\105335_SCS\3.1.6.R3\Install\Symantec Client Security.msi'.
MSI (c) (C4:A8) [10:18:19:140]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'P:\Portable\National\105335_SCS\3.1.6.R3\Install\'.
MSI (c) (C4:A8) [10:18:19:140]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'P:\Portable\National\105335_SCS\3.1.6.R3\Install\'.
MSI (c) (C4:7C) [10:18:19:156]: PROPERTY CHANGE: Adding VersionHandler property. Its value is '3.01'.
Posted by: nheim 16 years ago
10th Degree Black Belt
0
Hi Ade,
is this so hard... ?
The part of the log you just posted are 50 lines from the beginning of the file. This tells us nothing at all, regarding your problem.
But i was asking for 50 lines right in front of the part you posted in message #4.
Regards, Nick
Posted by: gizmolala 16 years ago
Third Degree Blue Belt
0
Been trying to paste it but it keeps failing.. Is there a way i can send the log file itself to u.
Posted by: anonymous_9363 16 years ago
Red Belt
0
Are you using 'Reply' button/link or the 'Fast Reply' box? If the latter, I think it has a limit...
Posted by: nheim 16 years ago
10th Degree Black Belt
0
Hi Ade,
you did it already once, but with wrong lines. Have seen posts here with hundrets of lines from a log file.
However, you could put it on web or ftp server for some time. No license problems with a log file, i guess :-)
Regards, Nick
Posted by: gizmolala 16 years ago
Third Degree Blue Belt
0
Thanks guys. I've sorted it out. Used a script that will install as an administrator.
Posted by: nheim 16 years ago
10th Degree Black Belt
0
Hi Ade,
if you can live with it, ok. But for me, this look more like a workaround then a solution.
Regards, Nick
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ