Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 380
  • Last Modified:

Need help with creating MSI

I made a MSI to distrubute to my sales department through active directory group policy. I can distrubute it and if I log into the machene it was installed on as an administrator I can use the program. If I log into the computer as a regular user The program doesn't run. I have to go to the program files folder and find the software folder and give permission to the user that logs in. I make the Msi with veritas wininstall. I need to know how to give permission to the user to the folder without going to the pc. Thanks
0
oddessy
Asked:
oddessy
  • 3
  • 3
  • 2
  • +1
1 Solution
 
JamesDSCommented:
oddessy

Set a machine policy GPO:
Administrative Templates\Windows Components\Windows Installer - Always install with elevated privileges

this sets the following reg key:
HKLM\Software\Policies\Microsoft\Windows\Installer - AlwaysInstallElevated

Cheers

JamesDS
0
 
oddessyAuthor Commented:
I tried this and I still get and error when I'm logged in as the user.
The Error is

3051 the microsoft jet database engine cannot open the file C:program files\filename
already opened exclusively by another user, or you need permission to view its data.

If I log in as admin it works.
0
 
JamesDSCommented:
oddessy
This sounds like permissions on the file itself, compare your file permissions to that of something the user can run, like explorer.exe

Cheers

JamesDS
0
Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
oddessyAuthor Commented:
well if I go into the program file directory and find the folder for the program and right click it and go to the security tab and then add the user I want to use it it works fine. There's got to be another way to do this though.
0
 
W2k-UserCommented:
Isn't that the point of the whole security concept though?  [Well, one of...]  

Paul
0
 
JamesDSCommented:
oddessy

Right then there is your issue, permissions on the folder it installs to.

You can use Group Policy to set permissions on specific directories:

Machine Policy
Windows Settings\Security Settings\File System

Add the relevant folder there and assign the permissions.

I have to say that this will work, but it is hardly an ideal solution. I am not a packaging expert but you might get more help from the programming chaps at http://www.experts-exchange.com/Programming/Programming_Platforms/Win_Prog/
Cheers

JamesDS
0
 
W2k-UserCommented:
I'm sorry, I did not mean to be as abrupt as I was.  What I meant was, if it is due to the security settings in Windows, then it might not be possible to make it so that a program can install in an area where it is not allowed.  This would be an issue for the administrator (you?) to make it possible for users who should be able to install the package to have the appropriate permissions in their profiles.  
However, I am not an expert, and am simply posting what I have (hopefully) learned from the administrators here.  

HTH,

Paul.  
0
 
hehewithbracketsCommented:
I think that you may have to repackage the .msi and give permissions to domain users for the install folder located in the Program Files folder.
0
 
W2k-UserCommented:
What I said...

Paul.
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 3
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now