Vista - run app at end of installation

[NewsArchive]

Friedrich,

It's been pointed out that some people have security concerns about the
frequent installer behavior where at the end of the installation, the user
has the option to "Run the program now?".
If he does so, the program will run with the (presumably elevated) token of
the installer itself.
I did a simple test trying to use ShellExecute at the end of the
installation rather than 'run', but the installed program still winds up
elevated when invoked that way.
Have you come up with any suggestions to deal with this?

Jane

[NewsArchive]

Jane,

The recommendation at the moment is to not run an application at the end of
the installation. Not for the mentioned "security concerns" because
everything in an installer runs with administrator privileges if you use
requestAdministrator.

The problem is that if you run that application at the end of the
installation, it also executes this app with administrator privileges. If
your application does some user specific initializations (as recommended by
Microsoft), it will do this for the admin, not the standard user.

We are already working on a feature to execute as a non-elevated app from an
installer running elevated (this is not a trivial task).

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

If it were trivial, Friedrich, I wouldn't have asked YOU <g>

Jane

[NewsArchive]

Jane,

<BG> :)

The solution for now is something like the following:

[ Execute Programs ]

If %WINVER% Not Equals "$WIN_VISTA$" Then
Run Program %_SB_INSTALLDIR%\RTFEDIT.EXE (Always Install) [At Finish:
Launch RTFEDIT?]
End

In the soon coming SetupBuilder 6.5 we can also specify $WIN_LONGHORN$ (to
be on the safe side).

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner