Phil, I checked and you are correct, the msiexec.exe that is the parent process is running with limited privileges. But isn't the purpose of "deferred" mode to run with elevaged privileges? Or are you saying that it will only elevate as far as msiexec's privileges are?
I ran msiexec.exe from a SYSTEM (full privileged) command prompt, and msiexec.exe still downgrades its privileges. Is this something being done by the OS or the binary itself? I'm hoping there is some way to force msiexec to run with full privileges. Thanks, Jeff On Mon, Feb 21, 2011 at 3:00 PM, Wilson, Phil <phil.wil...@invensys.com>wrote: > The system account is irrelevant here. What matters is the list of rights > that the msiexec process is running with, and it does not have all possible > rights enabled all of the time. I think you've already discovered that, so I > don't know what to advise. I forget where this is documented, but that code > (and therefore your custom action) is running with a limited list of rights > (something that started on MSI 4.0) that does not include the one required > to terminate processes. > > Phil Wilson > > -----Original Message----- > From: Jeff Wisgo [mailto:locksl...@gmail.com] > Sent: Sunday, February 20, 2011 3:32 PM > To: General discussion for Windows Installer XML toolset. > Subject: Re: [WiX-users] Running a custom action with elevated privileges > > Umesh, > > Thanks for responding to my question. > > I am using OpenProcess(PROCESS_TERMINATE, ...). When I execute the same > exact code from a system account with elevated privileges using PSEXEC, it > works, so I know there is something wrong with the privileges when my code > runs as a Custom Action. I also have verified this by looking at the > privileges with Process Explorer. > > Any other ideas? > > Thanks, > > Jeff > > On Sat, Feb 19, 2011 at 12:56 AM, Umeshj <umesh_jogle...@hotmail.com> > wrote: > > > > > > > What access level are you using for OpenProcess() ? > > > > A simple PROCESS_TERMINATE is sufficient. If you are using > > PROCESS_ALL_ACCESS it will fail. > > I had experienced the same problems and after changing the > dwDesiredAccess > > param it worked well. > > > > Umesh > > -- > > View this message in context: > > > http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Running-a-custom-action-with-elevated-privileges-tp6041158p6042577.html > > Sent from the wix-users mailing list archive at Nabble.com. > > > > > > > ------------------------------------------------------------------------------ > > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: > > Pinpoint memory and threading errors before they happen. > > Find and fix more than 250 security defects in the development cycle. > > Locate bottlenecks in serial and parallel code that limit performance. > > http://p.sf.net/sfu/intel-dev2devfeb > > _______________________________________________ > > WiX-users mailing list > > WiX-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/wix-users > > > > ------------------------------------------------------------------------------ > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: > Pinpoint memory and threading errors before they happen. > Find and fix more than 250 security defects in the development cycle. > Locate bottlenecks in serial and parallel code that limit performance. > http://p.sf.net/sfu/intel-dev2devfeb > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > > > *** Confidentiality Notice: This e-mail, including any associated or > attached files, is intended solely for the individual or entity to which it > is addressed. This e-mail is confidential and may well also be legally > privileged. If you have received it in error, you are on notice of its > status. Please notify the sender immediately by reply e-mail and then delete > this message from your system. Please do not copy it or use it for any > purposes, or disclose its contents to any other person. This email comes > from a division of the Invensys Group, owned by Invensys plc, which is a > company registered in England and Wales with its registered office at 3rd > Floor, 40 Grosvenor Place, London, SW1X 7AW (Registered number 166023). For > a list of European legal entities within the Invensys Group, please go to > http://www.invensys.com/legal/default.asp?top_nav_id=77&nav_id=80&prev_id=77 > . > > You may contact Invensys plc on +44 (0)20 3155 1200 or e-mail > recept...@invensys.com. This e-mail and any attachments thereto may be > subject to the terms of any agreements between Invensys (and/or its > subsidiaries and affiliates) and the recipient (and/or its subsidiaries and > affiliates). > > > > > ------------------------------------------------------------------------------ > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: > Pinpoint memory and threading errors before they happen. > Find and fix more than 250 security defects in the development cycle. > Locate bottlenecks in serial and parallel code that limit performance. > http://p.sf.net/sfu/intel-dev2devfeb > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > ------------------------------------------------------------------------------ Index, Search & Analyze Logs and other IT data in Real-Time with Splunk Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. Free Software Download: http://p.sf.net/sfu/splunk-dev2dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
