Hello Clever Peoples

I have a MSI - and making af MST - and want to give Full rights on a folder = C:\Program Files\TestFolder

I can see in Wise that the Users (group) have full rights on the folder, but
when i install the MSI on Windows7 64 bit, nothing happens.

Under the security tab, the Users still havnt got the full rights.

I have also trying to use Subinacl. It works In WinXp, but when i do the same in Win7, via a custom action,
nothing happens.

I just read in google , LockPermission table dont work in Windows7 - instead MsiLockPermissionsEx , shall be used.
MsiLockPermissionsEx - doesnt exist in the MST - so how is it possible to add that instaed of Lockpermission. ?

I hope you guys can help me out.

Can you plz just explain in details.

Thnx in advance
0 Comments   [ - ] Hide Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
Answer this question or Comment on this question for clarity


you can create the table manually.

but a simpler method would be to find an MSI with the table you need in it. Use orca to extract the table to a .idt and import back into the offending msi.
Answered 07/26/2011 by: jmcfadyen
Fifth Degree Black Belt

Please log in to comment
Hello jmcfadyen

Thnx for you reply.

Can you explain in detail, how to create the table, cause isnt it anything else you have to create ?

I have tried to find an MSI, with the table, but i didnt find any, or anyone who had the exprience with it.
Have you come by an MSI with the table.

thnx in advance.
Answered 07/27/2011 by: SKS
Orange Belt

Please log in to comment
Just follow the "step" in section Step 2 – Add the MsiLockPermissionsEx Table from the Tutorial: How to Use the MsiLockPermissionsEx Table (and CSI_GetSDDLFromObject Helper Script)
Answered 07/27/2011 by: AngelD
Red Belt

Please log in to comment
You can use Setacl.

you need to have additional Setacl.exe in you folder or in target machine
Answered 07/28/2011 by: rock_star
Second Degree Black Belt

Please log in to comment
i would avoid setacl on a win7 box. May as well do things with native support where you can. better logging / error handling etc.

as for creating the table with orca is easiest. You can select a table then goto edit / export / import etc.
Answered 08/01/2011 by: jmcfadyen
Fifth Degree Black Belt

Please log in to comment