How do I set registry permissions in an msi ?

I am trying to create a package using Wininstall LE, Orca, and other free tools. I've used the lockpermissions-table to set directory/file-permissions and so on.

However, I need to grant all users (Local Machine\Users) write/modify permissions to the Key: HKEY_Local_Machine\Software\My_app and all sub-keys/strings . In lockpermissions it seems that I can only set permissions on individual strings and not on a Key ?

I've found a lot of references to "Custom Actions", scripting and "setacl" in various editions, but I'm kind ‘a new to this msi-stuff, and I'm not a programmer....don't know much about scripting and stuff.

Any pointers to scripting examples or other relevant tips would be greatly appreciated !

Kenneth Hempkins
0 Comments   [ + ] Show Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.


This is a problem when dealing with the lockpermissions table, and I remember solving this myself once. I don't remember exactly if I solved it without resorting to custom actions, though. Is it not possible to just specifiy the key like you would any other object? Remember it is also (most likely) dependent on what order the registry keys are created when the installation runs.

  • The docs on msdn arent specific on this:
  • InstallShield has some info:

I'm sorry, but if you are serious about packaging you really need to read up on custom actions [8|] It is a very sprawling topic which requires a good understanding of windows fundamentals. This is a good post to get you started:
Answered 02/21/2007 by: jib
Purple Belt

Please log in to comment
Hi Kenneth,
look at this:

There i have explained, how to use setacl for file permissions.

With the setacl docu, its no big deal to do it with registry permissions.

Hope, this gives you a start.

Regards, Nick
Answered 02/21/2007 by: nheim
Tenth Degree Black Belt

Please log in to comment
have a look at the forum I have demonstrated how to use custom actions and setacl to set permissions on files, folders and reg keys and it works a great deal
Answered 02/21/2007 by: cygan
Fifth Degree Brown Belt

Please log in to comment
try look for RegDacl as works too
Answered 02/22/2007 by: dinozilla
Orange Senior Belt

Please log in to comment
Answer this question or Comment on this question for clarity