Re: Installer and Security
From: Karl Levinson [x y] mvp (jamescagney90210@excite.com)
Date: 01/29/03
- Next message: Mike W: "560 errors"
- Previous message: David: "Installer and Security"
- In reply to: David: "Installer and Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Karl Levinson [x y] mvp" <jamescagney90210@excite.com> Date: Wed, 29 Jan 2003 08:16:42 -0500
First, you have to import the template into a security database before you
can apply the database to the computer. You can do this by running MMC, and
adding the Security Configuration snapin. You can also use this snapin to
apply the database, though this is the manual way of doing this, one machine
at a time.
You can script this using the SECEDIT command to automate applying
databases - do Start, Run, SECEDIT, OK to get more details. You can use the
AT command or the Task Scheduler folder in Control panel to schedule
remotely across the network [you can drag and drop task scheduler jobs into
this folder, as long as the files have all been copied to the local hard
drive first and the task is set to run as System... if you want the task to
access files on the network, you have to enter an ID and password, and I'm
not sure that this information gets copied when you copy the task, I think
you have to manually re-enter it after copying the icon representing the
scheduled task.
I think SECEDIT will also import the template to a database too, but I find
it easier and less redundant to do that grapically one time than to script
this to happen on every computer.
I believe you can also import these settings into Group Policy on the
domain. Never done it, but I would expect it to be in the MMC, Active
Directory Users and Computers snapin [only available on Win2000 servers,
unless you find and run the ADMINPAK.MSI file to install the extra MMCs].
>From there you would probably right-click on the OU where you want to import
the policy to. Group policy settings here would be re-applied on every
reboot and again at intervals, which can be good or bad, depending on how
many permissions and files you're talking about. I think sometimes
extensive NTFS file permissions in a group policy can sometimes cause the
"applying group policy..." message at login time to take a while.
"David" <david@ramdor.co.il> wrote in message
news:0a0901c2c795$826d7060$d2f82ecf@TK2MSFTNGXA09...
> Hello there!
> Im buildng windows installer setup (using Wise solutions)
> for my application. Install is executed by adminstrator of
> the machine (Win2K). Users will login as member of "Users"
> group. While install I must give full control permissions
> for "Users" members on some files, directories and
> registry entries. Otherwise my app won't run. I guess
> (perhaps Im wrong) that I should prepare security template
> with custom security setings and import it during
> installation. I have security template - *.Inf file with
> needed settings. Question: how is it possible to import
> and applay template during setup? Wimdows installer has no
> such feature. Any other way ?
> Thanx in advance, David
--- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.449 / Virus Database: 251 - Release Date: 1/27/2003
- Next message: Mike W: "560 errors"
- Previous message: David: "Installer and Security"
- In reply to: David: "Installer and Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
