Setting Registry Key Permissions

Products

• Symantec Products

Issue/Introduction

 

Resolution

Question

How do I add NTFS security permissions to registry entries installed by my .msi installation?

Answer

During an installation, you may need to give additional file, folder, or registry access rights to a user in order for the application to function properly. The LockPermissions table in Windows Installer lets you set specific security permissions for your installation. By using the tips provided in this article, you can define security settings for files, folders, and registry keys with ease.

By configuring the permissions for files, folders, or registry keys, you are actually replacing the computer's or user's current permission settings. If you need to add to the current security permissions for files, folders, or registry keys, you must specify the current information as well as the permission changes.

Setting Registry Permissions:

1. Open Wise Installation Studio/Express or Windows Installer Editor in Wise Package Studio.
2. In Installation Expert, open the Registry page.
3. In the bottom right pane, select the registry key to which you want to set permissions and click the Details button. The Registry Details dialog appears.
   
   Note:You must select a registry key as permissions can only be set on registry keys. Windows does not permit permissions to be set on registry values.
    
4. On the Permissions tab click the Add button. The Lock Permissions Details dialog appears.
5. Enter the following information in the fields on the Lock Permissions Details dialog:
   
   Domain: Enter the appropriate domain. To set rights for a local computer user, enter [ComputerName], or to specify the current user's domain, enter [%USERDOMAIN].
   
   User: Enter the appropriate user. You can specify a group name, such as Users or Everyone, or a specific username. To specify the current user's ID, enter [LogonUser].
    
6. Click OK to save your changes.

During an installation, registry permissions are added when the keys are installed. Because Windows Installer does not let you control the order in which registry keys install, inheritance does not work. If a user is not permitted access to specific registry keys used by the installed application, the application will not run properly. To avoid registry access issues, when setting permissions for an entire segment of registry keys, be sure to give every key in that segment explicit security permission settings.

Using the above information, you can add and modify any permissions that Windows Installer allows you to define. By setting security permissions, you can make certain that your installed application runs affectively and properly.