Superfreak3 wrote:
> On Jul 5, 10:39 am, Superfreak3 <Matt.Wal...@synergis.com> wrote:
>> Earlier in our thread, you mentioned:
>>
>> "However, the Power Users group still exists in Vista, but like the
>> document says, they are not ACL'ed access to system resources, so you
>> have to run the special file first to grant them extra access."
>>
>> What 'special file' do you mean? I guess I need to know what exactly
>> do I have to do to mimic the Power Users group of XP.
>> I don't know if I mentioned this before, but I'm getting the no access
>> to Program Files messages with UAC Disabled. If I install with my
>> Power User with UAC enabled, I simply have to apply credentials
>> currently.
>>
>> Any more info in setting up Power Users as in XP on VISTA would be
>> GREATLY APPRECIATED!
>>
>> Thanks for the help/great information so far!!- Hide quoted text -
>>
>> - Show quoted text -
>
> Also, if I write a service to launch our silent updates, what would I
> have to set ALLUSERS to, I wonder?
>
I would like to strongly discourage you from putting your users into the
legacy role of power users to solve this problem.
It is simply not necessary for this.
If you have the kind of control over your users' computers to make them
power users (admin privileges), then it would be much easier for you
just to authorize your MSI to be installed.
That being said, I had assumed from the technet document you referenced
that there was a security template available somewhere that would set up
power user permissions on Vista. However, I couldn't find it. This means
you would have to roll your own security template to change the
permissions that you need (i.e., allow power users access to the
appropriate registry keys, files, and privileges).
I found some more good sites that deal with MSI's and UAC that you might
find useful:
http://msdn2.microsoft.com/en-us/library/aa372468.aspx http://blogs.msdn.com/rflaming/archi...log-posts.aspx
As for allusers, launching the MSI from a service account has
administrator privileges, so I believe it should work out as long as it
isn't null.
--
-JB
Microsoft MVP - Windows Shell/User
Windows Vista Support FAQ -
http://www.jimmah.com/vista/