JoeAcunzo
19th January 2005 21:19 UTC
AccessControl Plugin Registry Problem
My install uses the AccessControl plugin to set the "SetValue" permission in the registry on the Winlogon area for the "Users" group, and it works fine in most cases. However, I have a few customers receiving the message from the plugin "Cannot build new access control list. Error Code 1332". I've searched for this error, and found a description, but the info is not very helpful.
Here is the script code I use (which again works most of the time):
strcpy $R0 "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"
AccessControl::GrantOnRegKey HKLM $R0 "Users" "SetValue"
Note that I require the user to be logged onto Windows with an Admin account (so I can change this registry area), otherwise I stop the install, so that's not the problem.
Does anyone have any thoughts on what could be wrong or what to try? I have had customers manually edit the registry and make this change which works fine, so it doesn't appear to be a corrupt registry.
Joe A.
kichik
20th January 2005 18:33 UTC
Seems like it doesn't know the Users group for some reasons. Have you tried using the SID instead? Is there anything special about the machines it didn't work on? The Users group might not exist on some network configurations.
JoeAcunzo
20th January 2005 20:06 UTC
I thought the "Users" group was a builtin group on all NT/2000/XP systems. Is that not the case? Hmmm...
On a related note, how do I debug an NSIS plugin using VisualStudio? I know the plugin gets compiled into the .exe when the install is built, and extracted when you run it. So I do I debug this extracted, temporary DLL? I want to play around with the AccessControl DLL to see if I can reproduce the problem changing values in the debugger.
Thanks,
Joe A.
kichik
20th January 2005 20:13 UTC
Compiling the plug-in in debug mode and calling DebugBreak in it should do the trick.
JoeAcunzo
20th January 2005 20:42 UTC
Ahhh, the old "int 3" trick (debug interrupt), I should have know. Thanks kichik, I'll give that a try.
Have there been any bug fixes to AccessControl since 2003-04-20? I just checked the NSIS Archive, and that's the latest version, and the one I've been using.
Joe A.
kichik
20th January 2005 20:52 UTC
Nope, no bug fixes. Sadly, the developer has disappeared.
JoeAcunzo
20th January 2005 23:23 UTC
I found another posting with an updated AccessControl plugin from May, 2005:
http://forums.winamp.com/showthread.php?threadid=179060
Is anyone using this update? Any problems or issues with it?
RobGrant
21st January 2005 15:52 UTC
No, but I'm hoping to start using it in 4 months.
JoeAcunzo
21st January 2005 22:26 UTC
I found the problem, and kichik you were right! The "Users" group didn't exist because these customers are NOT using the English version of Windows, thus this group is NOT called "Users". The solution is to use the SID, as you suggested, in this case "(S-1-5-32-545)" for the "Users" group. Thanks!
Joe A.