Vista: Installing as Admin - UAC on
Hi folks -
can anyone shed any light on the following?
Doing vendor msi install onVista. UAC is ON. Some custom actions fail. With UAC OFF the msi installs fine.
The problem CAs run as 'Impersonate User' in deferred execution.
I've already been prompted for an admin username\password when I start the install so why don't these CAs run with the privileges of the admin? (I've already proved I am an admin by supplying username and password)...
Only option to 'fix' these is to set then to 'No Impersonate User' i.e. run as Deffered Exection - System Context. Sometimes this is not ideal as the custom actions simply can't accomplish what they need to because of system context problems (no user profile etc).
BUT - if your deployment tool installs packages in the system context (as most do AFAIK ) do the CAs that have 'Impersonate User' set, run as the system account or as the actual logged in user at the time of install?
Basically, should one bother to change these CAs to 'system context' in the first place? - sure, they will fail doing a manual install on a Vista machine with UAC = ON, but when sent for deployment via e.g. Zenworks, they may well run with the permissions of the user that's installing the app i.e. the system.
Anyone?
can anyone shed any light on the following?
Doing vendor msi install onVista. UAC is ON. Some custom actions fail. With UAC OFF the msi installs fine.
The problem CAs run as 'Impersonate User' in deferred execution.
I've already been prompted for an admin username\password when I start the install so why don't these CAs run with the privileges of the admin? (I've already proved I am an admin by supplying username and password)...
Only option to 'fix' these is to set then to 'No Impersonate User' i.e. run as Deffered Exection - System Context. Sometimes this is not ideal as the custom actions simply can't accomplish what they need to because of system context problems (no user profile etc).
BUT - if your deployment tool installs packages in the system context (as most do AFAIK ) do the CAs that have 'Impersonate User' set, run as the system account or as the actual logged in user at the time of install?
Basically, should one bother to change these CAs to 'system context' in the first place? - sure, they will fail doing a manual install on a Vista machine with UAC = ON, but when sent for deployment via e.g. Zenworks, they may well run with the permissions of the user that's installing the app i.e. the system.
Anyone?
0 Comments
[ + ] Show comments
Answers (2)
Please log in to answer
Posted by:
nheim
16 years ago
Posted by:
sh79
16 years ago
Cheers Nick - there's a wealth of information there - it will keep me reading for a while.
In the meantime..ahem...I don't suppose anyone has a 'shortcut' to the knowledge I seek i.e. specifically a quick explanation.
I'm in a bit of a hurry to get an answer to this.. I can see the blog shedding light on the issues I experience but I don't see (or haven't come across yet) any solutions to the problems.
In the meantime..ahem...I don't suppose anyone has a 'shortcut' to the knowledge I seek i.e. specifically a quick explanation.
I'm in a bit of a hurry to get an answer to this.. I can see the blog shedding light on the issues I experience but I don't see (or haven't come across yet) any solutions to the problems.
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
so that the conversation will remain readable.