Setting right to installed files.

[NewsArchive]

I need some assistance .

The system administrator runs our installation program on their users
computer.

When the user logs in they can't run the software because the files that
were installed are tagged as requiring administrator access.

How can I change this in SetupBuilder?

I am stuck....help !

michael d. brooks

[NewsArchive]

Mike,

The "Set Access Control..." function provides support for ACL. An access
control list (ACL) specifies the rules for access to a particular resource.

You can set NTFS (NT file system) permissions for files, folders and
registry keys. You set permissions for a specific user and you can create
sets of permissions for multiple users. Set permissions only if you know the
user names and domains of users who install this installation.

Does this help?

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Thanks Friedrich.

I'm not too familiar with those things and will give it a go.

Mike

[NewsArchive]

Hi Friedrich,

The ACL I don't think will help me. I have no idea about the users/domains
on the target computer.

This issue must have come up hundreds of times before. The user does not
have access to the program files so the administrator installs the software.
Then the files are flagged with access rights oonly for the admin and the
user can't even run their program.

How is this common situation usually handled?

Thank you,

Mike

[NewsArchive]

Hi Mike,

In Windows, you have to set the permissions for files and folders in your
case. Manipulating the ACL is the only way to do this!

You can do it manually (after the installation, right-click the files and
set the security attributes) or programmatically (using the Set Access
Control installer function).

Did you check the MSDN documentation? ACL is a built-in Windows feature and
not easy to understand. Domain can be empty. The user account can be
specified as relative/qualified account name or as security identifier (SID,
e.g. "(S-1-5-32-545)" for "BUILTIN\USERS").

Here is an aggressive example. You know that under Vista, only applications
with administrator execution level privileges can write to the
HKEY_LOCAL_MACHINE registry key. If you try to write to
HKEY_LOCAL_MACHINE\Software\JoeUserSoftware and the application is not
running elevated, it fails. The attached screenshot shows how to set the
ACL so it also allows non-elevated applications to write to that key. Even
under Vista! BTW, this is only an example and you should not do this under
Vista to allow non-elevated apps to write to HKLM.

Does this help?

Friedrich

[NewsArchive]

Thank you Friedrich,

So I'm going to ask for the sky here.....

If my installation folder is %_SB_INSTALL_DIR% and I have 191 files in there
that I need to allow read access to by any user how do I do it ?

Do I add a SetAcces command for every singe file? Or I just do it for the
EXE that will call all the other files?

Sorry...I'm not an MSDN guy...Clarion has poiled me.

Thank you,

Mike

[NewsArchive]

Hi Mike,

> Thank you Friedrich,
>
> So I'm going to ask for the sky here.....
>
> If my installation folder is %_SB_INSTALL_DIR% and I have 191 files in
> there that I need to allow read access to by any user how do I do it ?
>
> Do I add a SetAcces command for every singe file? Or I just do it for the
> EXE that will call all the other files?
>
> Sorry...I'm not an MSDN guy...Clarion has poiled me.

Aha, okay. I think it depends on the environment. If it really does not
allow "JoeUser" to access files, then you have to SetAcces for every single
file.

But of course, you don't have to add 191 "Set Access Control..." functions
to your project ;-) See attached screenshot for an example. These 8 lines
read all files (recursively) from c:\6 and set access control. I can send
you the test source project if you want.

Does this help?

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Exciting!

Yes..please send the few lines of test source.

michael d. brooks