none
"Allow user control over installs"

    Question

  • Can any one tell me the functionality of this policy "Allow user control over installs" .

    Standard user can change the  directory of installation path ie -c: to d: and able to install the software or some thing else.

     
    Wednesday, October 12, 2016 8:41 PM

Answers

  • Hi,

    Thanks for your post.

    Here is the description of this policy setting:

    Permits users to change installation options that typically are available only to system administrators.

    This policy bypasses some of the security features of Windows Installer. It permits installations to complete which otherwise would be halted due to a security violation.

    The security features of Windows Installer prevent users from changing installation options typically reserved for system administrators, such as specifying the directory to which files are installed. If Windows Installer detects that an installation package has permitted the user to change a protected option, it stops the installation and displays a message. These security features operate only when the installation program is running in a privileged security context in which it has access to directories denied to the user.

    This policy is designed for less restrictive environments. It can be used to circumvent errors in an installation program that prevent software from being installed.

    Enable user control over installs

    https://msdn.microsoft.com/en-us/library/ms815211.aspx

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, October 13, 2016 6:19 AM
    Moderator

All replies

  • Hi,

    Thanks for your post.

    Here is the description of this policy setting:

    Permits users to change installation options that typically are available only to system administrators.

    This policy bypasses some of the security features of Windows Installer. It permits installations to complete which otherwise would be halted due to a security violation.

    The security features of Windows Installer prevent users from changing installation options typically reserved for system administrators, such as specifying the directory to which files are installed. If Windows Installer detects that an installation package has permitted the user to change a protected option, it stops the installation and displays a message. These security features operate only when the installation program is running in a privileged security context in which it has access to directories denied to the user.

    This policy is designed for less restrictive environments. It can be used to circumvent errors in an installation program that prevent software from being installed.

    Enable user control over installs

    https://msdn.microsoft.com/en-us/library/ms815211.aspx

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, October 13, 2016 6:19 AM
    Moderator
  • Hi,

    Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, October 19, 2016 8:25 AM
    Moderator