MSI Utility

0 Likes

These utilities upgrade MSI to "AlwaysInstallElevated" in pre-distribution and then it is removed in post-distribution scripts. Eliminates the need to set the policy to allow MSI to AlwaysInstallElevated and to open a security hole.

Not everyone sets the Windows 2000 policies to allow any MSI based install to have elevated privileges; yet the Windows Installer sometimes requires this to be set when writing to a network drive.

These two utilities provide a means to set these settings temporarily during an install to avoid pushing out a policy to elevate the MSI installer.

Contains premsi.exe and aftermsi.exe.

PREMSI.EXE enables all the HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Installer keys to a value of 1

It writes the following keys and values into the registry when run:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer]
"AlwaysInstallElevated"=dword:00000001
"AllowLockDownBrowse"=dword:00000001
"AllowLockDownMedia"=dword:00000001
"AllowLockDownPatch"=dword:00000001
"EnableAdminTSRemote"=dword:00000001
"EnableUserControl"=dword:00000001
"TransformSecure"=dword:00000001

AFTERMSI.EXE removes all of the above keys and the Installer key when run.

Usage:
Add these files to the pre-distribution and post-distribution sections of the MSI install object. There are no command line parameters.

Labels:

Collateral
Comment List
Anonymous
Related Discussions
Recommended