

- #Advanced installer custom action antivirus install
- #Advanced installer custom action antivirus software
- #Advanced installer custom action antivirus code
- #Advanced installer custom action antivirus download
' COMMENT OUT THIS SECTION IF NOT RUNNING AS AN INSTALLER CUSTOM ACTION, (yes that's a pipe delimiting them) dim XCACLS_EXEC, APPDATAFOLDER, WindowStyle
#Advanced installer custom action antivirus code
If you do that you'll want this code below and you'll want to pipe in as arguments:ĪPPDIR|CommonAppDataFolder. I ended up adding a custom action to my installer. Here is the resulting code based on Jay Michaud's suggestion.
#Advanced installer custom action antivirus download
This could be accomplished by including a command to download the xcacls.vbs script from a file share and save it locally in the same *.cmd script where your permission-setting command resides (or you could perhaps try running it directly from a file share). Note that you will also have to somehow load xcacls.vbs onto every machine if you go that route. Once you have crafted the proper command (using either tool), put it into a *.cmd script, and then add the script to a Group Policy Object in order to apply it to the machines via Group Policy. If you are running Windows Vista or later, the included icacls utility ( (WS.10).aspx) might be more appropriate. It has the ability to apply more fine-grained permissions than cacls, but read the instructions (displayed by typing the command without any options: cscript xcacls.vbs) carefully they are quite complex! It does have the ability to apply permissions only onto "This folder and subfolders" I've used it before to do exactly that.

It is a free VBScript command-line utility from Microsoft that is similar to the cacls command, but with more options.
#Advanced installer custom action antivirus software
In my MSI tool creator (Advanced Installer) I can get really close to replicating the default windows settings with the exception being the entry indicated by the green arrow below.Īny advice from the system admins on how they would go about resetting the permissions? The customer can use the Altiris management software to execute a utility of sorts if someone knows of one. This resolved the issues with antivirus software but now the permissions are insecure.
#Advanced installer custom action antivirus install
As a test we created a version of the software they could install as a patch which gave the "everyone" user full control. The permissions got changed and began causing issues for applications like antivirus software which wanted to write data to that folder. They deployed the software using Altiris.

Standard actions are sufficient to execute an installation in most cases. For a list of these actions, see the Standard Actions Reference.

The Windows Installer provides many built-in actions for performing the installation process.
