[wix-users] MSI asks for credentials to remove existing products

[John Cooper]

Yes.  My experience with the Windows Security update (I'd have to look it up to get the KB) further restricts non-privileged user maintenance of installed packages.  My impression talking to Microsoft is it is their intention to completely foreclose non-privileged maintenance as they now see it as a security hole that needs closing.  Basically, they want to remove the ability to use "AlwaysInstallElevated" to allow non-privileged maintenance.

--
John Merryweather Cooper
Senior Software Engineer | Integration Development Group | Enterprise Notification Service
Jack Henry & Associates, Inc.® | Lenexa, KS  66214 | Ext:  431050 |JoCooper at jackhenry.com



-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf Of Adan
Sent: Wednesday, September 16, 2015 7:48 AM
To: wix-users at lists.wixtoolset.org
Subject: Re: [wix-users] MSI asks for credentials to remove existing products

The e-mail below is from an external source.  Please do not open attachments or click links from an unknown or suspicious origin.

John,
thank you for the quick response.
Do you mean the two steps (admin)advertise, (user) installs?
  As per https://msdn.microsoft.com/library/aa369519.aspx


On 16/09/2015 13:30, John Cooper wrote:
> I believe there was a Windows Security update that changed this behavior.
>
> --
> John Merryweather Cooper
> Senior Software Engineer | Integration Development Group | Enterprise 
> Notification Service Jack Henry & Associates, Inc.® | Lenexa, KS  
> 66214 | Ext:  431050 |JoCooper at jackhenry.com
>
>
>
> -----Original Message-----
> From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On 
> Behalf Of Adan
> Sent: Wednesday, September 16, 2015 7:24 AM
> To: wix-users at lists.wixtoolset.org
> Subject: [wix-users] MSI asks for credentials to remove existing 
> products
>
> The e-mail below is from an external source.  Please do not open attachments or click links from an unknown or suspicious origin.
>
> I have a windows desktop software that requires administration rights to install. The software is capable to auto-update itself if it finds an MSI with higher version than its own.
> To do this new installation, there is an encrypted file with credentials for an administrator on the domain and the following steps are followed:
>
> - The software will run a command to advertise the MSI with the 
> credentials provided in the file as admin. (msiexec /jm path...)
> - Then, with the current user logged into windows, it will run a 
> command to install the MSI. (msiexec /i Path...)
>
> It has been working well for many updates but in the last update, in some machines only, Windows Installer is asking for admin credentials to the user to remove the existing version. Instead of just showing an elevation prompt without login requirements.
> There is no change in the wix xml file and the upgrade section is as follow:
>
> <MajorUpgrade Schedule="afterInstallInitialize" 
> DowngradeErrorMessage="A newer version of [ProductName] is already 
> installed."/>
>
> The verbose log does not show error before the un-install, just after the user cancells. It just comes with a need for credentials:
>
> MSI (s) (60:AC) [18:41:10:512]: MSI_LUA: Elevation required to install 
> product, will prompt for credentials MSI (s) (60:AC) [18:41:27:782]: 
> MSI_LUA: Credential Request return =
> 0x800704C7
> User cancelled installation.
> C:\Windows\Installer\556ebd8.msi
> CustomAction  returned actual error code 1602 but will be translated to success due to continue marking Action ended 18:41:27: RemoveExistingProducts. Return value 2.
>
> And it also shows that the user in use is indeed the admin from the file with credentials.
>
> Could someone please lead me in a direction? I though RemoveExistingProducts action runs with server privileges.
> The other thing that is frustrating me a lot is the fact that t works in some machines well.
>
> Many thanks!
>
>
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant 
> http://www.firegiant.com/
>
> NOTICE: This electronic mail message and any files transmitted with it 
> are intended exclusively for the individual or entity to which it is 
> addressed. The message, together with any attachment, may contain confidential and/or privileged information.
> Any unauthorized review, use, printing, saving, copying, disclosure or 
> distribution is strictly prohibited. If you have received this message 
> in error, please immediately advise the sender by reply email and delete all copies.
>
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant 
> http://www.firegiant.com/
>




____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/

NOTICE: This electronic mail message and any files transmitted with it are intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged information.
Any unauthorized review, use, printing, saving, copying, disclosure or distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.