[wix-users] EXT: Re: Running elevated functions from non-elevated UI

Wed Feb 23 11:54:08 PST 2022

Hi Rob,

When (approximately) will WiX 3.14 be released?

Cheers,

Steve

> -----Original Message-----
> From: wix-users <wix-users-bounces at lists.wixtoolset.org> On Behalf Of Rob
> Mensching via wix-users
> Sent: February 23, 2022 2:25 PM
> To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>; Nir Bar
> <nir.bar at panel-sw.com>
> Cc: Rob Mensching <rob at firegiant.com>
> Subject: Re: [wix-users] EXT: Re: Running elevated functions from non-
> elevated UI
> 
> All of our focus is on WiX v4. If it doesn't land this year, I'm going to be very
> disappointed in myself.
> 
> WiX v3.14 exists to help migrate a codebase to WiX v4.
> 
> -----Original Message-----
> From: wix-users <wix-users-bounces at lists.wixtoolset.org> On Behalf Of
> Vanniekerk, Tyrel (GE Healthcare) via wix-users
> Sent: Wednesday, February 23, 2022 11:12 AM
> To: Nir Bar <nir.bar at panel-sw.com>; WiX Toolset Users Mailing List <wix-
> users at lists.wixtoolset.org>
> Cc: Vanniekerk, Tyrel (GE Healthcare) <tyrel.vanniekerk at ge.com>
> Subject: Re: [wix-users] EXT: Re: Running elevated functions from non-
> elevated UI
> 
> I am curious if any of the fixes/changes listed for this NuGet package have
> been implemented for the official WiX toolset code?  It seems like those are
> useful fixes and should probably end up in the main WiX code.
> 
> I am currently running v3.11.2 of WiX, released way back in 2019.  The current
> unreleased build is v3.14.0.5722.  I am curious if there is a summary of
> changes between those two versions and when we might see a new official
> release of version 3?  I have looked at version 4 and it seems promising, but I
> am guessing it might be years yet to see a full v4 release with build support,
> VS studio templates etc.
> 
> From: Nir Bar <nir.bar at panel-sw.com>
> Sent: Wednesday, February 23, 2022 1:29 AM
> To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
> Cc: Vanniekerk, Tyrel (GE Healthcare) <tyrel.vanniekerk at ge.com>
> Subject: Re: [wix-users] EXT: Re: Running elevated functions from non-
> elevated UI
> 
> WARNING: This email originated from outside of GE. Please validate the
> sender's email address before clicking on links or attachments as they may
> not be safe.
> You can use my custom WiX build
> https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww
> .nuget.org%2Fpackages%2FPanelSW.Custom.WiX%2F&data=04%7C01%
> 7Cstogilvie%40genetec.com%7C82c48d6558914fe41b2a08d9f702311c%7C7ba
> 8d2fb46604a19802e4d015a17e167%7C0%7C0%7C637812411070835141%7CUn
> known%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6
> Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2B5acridEyzagkvdowTSU
> kQVYrsJzn9yFitAB7olTy1A%3D&reserved=0
> Bundle/@RunAsAdmin="yes" attribute creates a bootstrapper that requires
> elevation when launched
> 
> 
> --
> Nir Bar
> WiX Expert
> 
> 
> ---- On Tue, 22 Feb 2022 20:11:45 +0200 Vanniekerk, Tyrel (GE Healthcare) via
> wix-users <wix-users at lists.wixtoolset.org<mailto:wix-
> users at lists.wixtoolset.org>> wrote ----
> 
> It would be nice. In the end, just allowing the installer to run elevated (or
> elevate when it starts) would solve the issue. There are just too many calls,
> regular checks and looking up a list of certificates or if a web site is running in
> IIS etc. that require elevated permissions.
> 
> Using named pipes, remoting, web API etc. all have issues. They would likely
> be blocked or disabled and they open up various security concerns. You could
> write to a file and have the exe check the file and write to another file, but
> that also has issues.
> 
> One could create your own setup.exe that escalates, then calls the WiX
> setup.exe, but that also would fail when you run modify mode for instance. I
> have noticed that some OS'es (not sure which) will elevate when you click
> modify, but most will not. So for us that means you have to get the
> setup.exe on your ISO, run that as administrator and then click modify
> instead of running through the Windows UI.
> 
> All these workarounds because of a requirement.
> 
> My thought is that there is no bullet proof way to run an elevated exe and
> communicate with it that would not get blocked at some companies.
> 
> -----Original Message-----
> From: wix-users <wix-users-bounces at lists.wixtoolset.org<mailto:wix-users-
> bounces at lists.wixtoolset.org>> On Behalf Of Sean Hall via wix-users
> Sent: Tuesday, February 22, 2022 11:50 AM
> To: WiX Toolset Users Mailing List <wix-
> users at lists.wixtoolset.org<mailto:wix-users at lists.wixtoolset.org>>
> Cc: Sean Hall <r.sean.hall at gmail.com<mailto:r.sean.hall at gmail.com>>
> Subject: EXT: Re: [wix-users] Running elevated functions from non-elevated
> UI
> 
> https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithu
> b.com%2Fwixtoolset%2Fissues%2Fissues%2F6358&data=04%7C01%7Cs
> togilvie%40genetec.com%7C82c48d6558914fe41b2a08d9f702311c%7C7ba8d2
> fb46604a19802e4d015a17e167%7C0%7C0%7C637812411070835141%7CUnkno
> wn%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1
> haWwiLCJXVCI6Mn0%3D%7C3000&sdata=6TqoSMqbKNrANboOqO0YH
> wk2wNWVjpDktp6qRU5R%2FL4%3D&reserved=0
> 
> On Tue, Feb 22, 2022 at 11:35 AM Vanniekerk, Tyrel (GE Healthcare) via wix-
> users <wix-users at lists.wixtoolset.org<mailto:wix-
> users at lists.wixtoolset.org>> wrote:
> 
> > Hi,
> >
> > I have some time to look at this again, so I am trying to revisit the
> > elevated permissions issue in the installer UI. Our current solution
> > is that we give an error if the installer is not running with elevated
> > permissions and if they run it "As Administrator", then everything works.
> > It would be easier if one could just get the installer to elevate, but
> > that's not an option.
> >
> > Assuming then that an installer with a custom bootstrapper UI is
> > running in the prescribed WiX toolset mode, what suggestions do you
> > have to run some check that requires elevated permissions? There are
> > cases where we might have to check more than one thing per install and
> > I would prefer not to have to call another exe that will escalate, do
> > the check and return a result somehow, just to have call it again and
> > escalate again when the user goes back to the previous page or we need to
> check something else.
> >
> > I was thinking I would create an exe that I can start if I need to
> > escalate and communicate with that exe to make multiple calls for
> > various checks. Just not sure what would be a good way to talk between
> > the installer UI and the exe. Remoting is an option or web API or
> > something like that.
> >
> > Any ideas? Every solution I have though of seems rather clunky.
> >
> > Thanks,
> > Tyrel
> >
> >
> __________________________________________________________
> __________
> > WiX Toolset Users Mailing List provided by FireGiant
> >
> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.
> f
> >
> iregiant.com%2F&data=04%7C01%7Cstogilvie%40genetec.com%7C82c4
> 8d655
> >
> 8914fe41b2a08d9f702311c%7C7ba8d2fb46604a19802e4d015a17e167%7C0%7
> C0%7C6
> >
> 37812411070835141%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMD
> AiLCJQIjoi
> >
> V2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=gZYv%2F
> mSllOce
> > y5a3A7aNengGQtcAynM%2Fzu56fs2IHwA%3D&reserved=0
> >
> 
> __________________________________________________________
> __________
> WiX Toolset Users Mailing List provided by FireGiant
> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.
> firegiant.com%2F&data=04%7C01%7Cstogilvie%40genetec.com%7C82c4
> 8d6558914fe41b2a08d9f702311c%7C7ba8d2fb46604a19802e4d015a17e167%7
> C0%7C0%7C637812411070835141%7CUnknown%7CTWFpbGZsb3d8eyJWIjoi
> MC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C300
> 0&sdata=gZYv%2FmSllOcey5a3A7aNengGQtcAynM%2Fzu56fs2IHwA%3
> D&reserved=0
> 
> __________________________________________________________
> __________
> WiX Toolset Users Mailing List provided by FireGiant
> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.
> firegiant.com%2F&data=04%7C01%7Cstogilvie%40genetec.com%7C82c4
> 8d6558914fe41b2a08d9f702311c%7C7ba8d2fb46604a19802e4d015a17e167%7
> C0%7C0%7C637812411070835141%7CUnknown%7CTWFpbGZsb3d8eyJWIjoi
> MC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C300
> 0&sdata=gZYv%2FmSllOcey5a3A7aNengGQtcAynM%2Fzu56fs2IHwA%3
> D&reserved=0
> 
> 
> 
> __________________________________________________________
> __________
> WiX Toolset Users Mailing List provided by FireGiant
> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.
> firegiant.com%2F&data=04%7C01%7Cstogilvie%40genetec.com%7C82c4
> 8d6558914fe41b2a08d9f702311c%7C7ba8d2fb46604a19802e4d015a17e167%7
> C0%7C0%7C637812411070835141%7CUnknown%7CTWFpbGZsb3d8eyJWIjoi
> MC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C300
> 0&sdata=gZYv%2FmSllOcey5a3A7aNengGQtcAynM%2Fzu56fs2IHwA%3
> D&reserved=0
> 
> __________________________________________________________
> __________
> WiX Toolset Users Mailing List provided by FireGiant
> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.
> firegiant.com%2F&data=04%7C01%7Cstogilvie%40genetec.com%7C82c4
> 8d6558914fe41b2a08d9f702311c%7C7ba8d2fb46604a19802e4d015a17e167%7
> C0%7C0%7C637812411070835141%7CUnknown%7CTWFpbGZsb3d8eyJWIjoi
> MC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C300
> 0&sdata=gZYv%2FmSllOcey5a3A7aNengGQtcAynM%2Fzu56fs2IHwA%3
> D&reserved=0