Software Deployment

hi xaviorpl,

if youve got Installshield, it's no problem (like setting permissions on a folder)

if not...

found that at the altiriswebsite:

In order to set permissions for all registry keys under a folder, modify the permissions for the folder. To do this, locate the row in the Registry table that corresponds to the key folder and note the value in the Registry column. In the Lock Permissions table, create a row that reads:

LockObject - <Registry column value>
Table - Registry
Domain - (blank)
User - Everyone
Permission - 268435456

Note that this permission value gives all permissions available for the registry to every user. If you need different permissions, please see the Windows Installer SDK topic 'LockPermissions'


Martin

Windows Installer natively supports setting file and registry permissions via the LockPermissions table but this generally not advised due to the way it works (completely re-writing the ACL) and it's also not very reliable. You can set permissions using this method using WPS.

I'd suggest using something like setacl.exe (free 3rd party util) or secedit (part of the windows OS) as a custom action during your install. There is plenty of info already on this forum about these tools...

There is another util called regini.exe which also comes with windows but again this is not widely used by packagers. Saying that, I have used it once before and it did the job fine...

Regards,
Rob.

Best way is to use a custom action that runs setacl or regdacl registry permission tool. Lockpermissions table is another way but it replaces the ACL on the key rather than editing it. It also doesnt propagate down to sub keys.

SetAcl works very well I find. Include it in your installation and pass a command line to it.

Thanks guys,

I was able to solve it using the subinacl.exe from microsoft. After i got subinacl i created the custom action to give the folder full rights.

[subinacl_directory] subinacl.exe /keyreg "REGISTRY_KEY_FOLDER" /GRANT=EVERYONE=F