Hi, I'm currently having issues with setting registry security on XP with a setacl custom action in wise.

I have to give the USERS group rights to SET VALUE on a class id. The custom action runs fine and sets the permissions when I've installed it. However when I log out of the PC and log in as a USER account and run the shoftcut for the application and the MSI repairs, it seems the permissions have been changed again without any custom action being run

This is the command I'm using in the Custom action :
-on "HKEY_CLASSES_ROOT\CLSID\{32A73FAD-CB45-4384-9F8C-6D2B6483FB84}" -ot reg -actn ace -ace "n:users;p:set_val;m:grant;w:dacl" -rec yes -silent
with a condition of "NOT Installed"

Is this correct?
0 Comments   [ + ] Show comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.


Hey Ditch - hows it goin?!

Not sure it will work like this cos HKEY_CLASSES_ROOT is a combination of HKLM\SOFTWARE\Classes and HKCU\Software\Classes...

Give this a try - fire up regedit on your machine and look in each hive to find your class ID then try changing the SetACL command to set permissions via that key - e.g. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32A73FAD-CB45-4384-9F8C-6D2B6483FB84}

Hope this makes sense [;)] Sure some one out there will correct me anyway... haha

Answered 09/28/2005 by: MSIPackager
Third Degree Black Belt

Please log in to comment
hey ditch

try using m:set instead of m:grant

-on "HKEY_CLASSES_ROOT\CLSID\{32A73FAD-CB45-4384-9F8C-6D2B6483FB84}" -ot reg -actn ace -ace "n:users;p:set_val;m:set;w:dacl" -rec yes -silent

set will discard any existing rights thus allowing the specified rights where as grant combines the specified rights with exisiting rights.
Answered 09/28/2005 by: artiahc_elay
Senior Yellow Belt

Please log in to comment
Thanks artiahc_elay I figured that out last night and it worked. Thanks Anyways
And Robbo ... you rule also :) hermens sux, james is a plonker
Answered 09/29/2005 by: ditch_nz
Purple Belt

Please log in to comment
Nice one.

Don't talk to me about those guys - they're not even packagers, they're slackagers! [;)]

Have a good day,
Answered 09/29/2005 by: MSIPackager
Third Degree Black Belt

Please log in to comment