>> I know for a fact that the implementation is incomplete. In Windows >> Installer, there is no way (that I know of) to create an MSI file >> that conditionally turns on UAC, only when the installation actually >> needs privilege elevation. > > You cannot turn on (or turn off) UAC for a single application or > operation. That's the whole point of UAC.
The installer runs in two phases: the UI phase, and the actual installation phase. They are separate processes, and UAC is invoked only in the middle (when it switches to the "server" phase). It would well be possible to invoke UAC conditionally, depending on what the UI phase learned. > Are you sure it worked with UAC enabled and a non-privileged account? > Anyway, here are some links regarding UAC: > > * http://www.codeproject.com/KB/vista-security/MakingAppsUACAware.aspx > * http://en.wikipedia.org/wiki/User_Account_Control#Requesting_elevation Unfortunately, these are irrelevant, since they talk about UAC wrt. applications. However, an MSI file is not an application, so all these settings and APIs don't apply. Regards, Martin -- http://mail.python.org/mailman/listinfo/python-list