What permissions should we set

[Guest David Thielen]

Hi;

 

In our installer we want to make sure all users can read the registry

entries we set in HKCR & HKLM. Our app is an Office AddIn and these

are the settings needed for Office to load the AddIn.

 

It's not sufficient to use the currently running user because in many

cases it's an admin installing the program and a different user

running it. We also cannot use domain groups because the user may not

be on a domain.

 

Should we just give "Everyone" read permission?

 

thanks - dave

 

david@at-at-at@windward.dot.dot.net

Windward Reports -- http://www.WindwardReports.com

me -- http://dave.thielen.com

 

Cubicle Wars - http://www.windwardreports.com/film.htm

[Guest FromTheRafters]

"David Thielen" <thielen@nospam.nospam> wrote in message

news:69f5s4pk8kuhr02ilko0cflgcdouhfbitj@4ax.com...<span style="color:blue">

> Hi;

>

> In our installer we want to make sure all users can read the registry

> entries we set in HKCR & HKLM.</span>

 

When setting the entries, Vista may be setting them in a virtualized key

and directing actual key read attempts to the virtualized key. When

reading values from the virtualized key, they take precedence over the

values in the actual key if present there. Values present in the actual

key will be used if no other value for that key is there in the

virtualized key. Is this program supposed to be for Vista? Maybe a

compatibility shim can help? Maybe a different IPC mechanism is needed?

<span style="color:blue">

> Our app is an Office AddIn and these

> are the settings needed for Office to load the AddIn.</span>

 

Does the application write values to those keys while running in user

mode? If so, I believe those new values should be persistent for that

user but have no effect on the actual key or the virtualized keys of

other users.

<span style="color:blue">

> It's not sufficient to use the currently running user because in many

> cases it's an admin installing the program and a different user

> running it. We also cannot use domain groups because the user may not

> be on a domain.

>

> Should we just give "Everyone" read permission?</span>

 

Virtualization can be turned off for selected programs, but that may not

produce the results you want either.