Using Software Delivery › Using the Software Package Library › Registering MSI Packages in the Software Package Library › Using Windows Installer with Elevated Privileges

Using Windows Installer with Elevated Privileges

For the Windows Installer to run with elevated privileges, use the System Policy Editor (poledit.exe for Windows NT) or the Group Policy Editor (gpedit.msc and the Active Directory for Windows 2000/2003/XP) to enable 'Always install with elevated privileges for the Windows Installer'. Both the Computer and User configurations must be changed.

If you enable 'Always install with elevated privileges for the Windows Installer' in this way, it overrides any CA ITCM settings, as CA ITCM never lowers Windows Installer privileges. It only raises them.

If you do not want to enable 'Always install with elevated privileges for the Windows Installer', you still have the option of working with two other CA ITCM tools:

• If you do not check the box 'Do not install with elevated privileges', the property 'sdprop_installelevated' is set for all install, uninstall, and configure procedures that are registered for the current software item. In other words, the property is set for all procedures registered with the item except for Administrative install, Remove admin install, Detect, and Verify.
• If you check the box 'Do not install with elevated privileges', you still have the option of installing with elevated privileges by setting the property 'sdprop_installelevated' for the appropriate install, uninstall, and configure procedures that are registered for the current software item. You can do this by not sealing the item and using Properties for the procedures in which you are interested after registration. Select the Embedded File tab first and then select the MSI Properties tab, on which you can add or remove MSI properties.