Beiley
28th October 2009 00:33 UTC

launch program at completion without admin permissions
I'm using this to launch my app when the setup finishes:

!define MUI_FINISHPAGE_RUN "$INSTDIR\RemindMe.exe"

The problem is that my setup program is running with admin permission level (which I need), but it then launches my program with these elevated permission levels. I want to launch my program with the permission levels manifested in the application (regular).

I tried using MUI_FINISHPAGE_RUN_FUNCTION with Exec or ExecShell instead, but both of those also launched my app with admin permissions.

Any ideas how to do this?

Thanks,
Mark

pengyou
28th October 2009 01:56 UTC

I use the UAC plugin to do this. Some of my installer runs with administrator privileges and some at the user's normal level; at the end the installer runs a program with the user's privileges.

http://nsis.sourceforge.net/UAC_plug-in

Be sure to read the UAC plugin's documentation and look at the example scripts before trying to use it.

Beiley
28th October 2009 02:17 UTC

I found/tried the SAFER plug-in. This seems to work for me, but I had 2 questions/concerns:

1) Since the SAFER.dll is dependent on CreateProcessAsUser() and that function isn't available until XP, how will this be able to work on OS's like 98? Even if you use SAFER::SupportsSAFER it seems the DLL won't be able to load for even this call on 98? I don't have easy access to 98 to test it.

2) I have to specify a permission level (NORMAL/CONSTRAINED). Is this starting my app exactly the same way as I have manifested in my app?

Thanks,
Mark

Beiley
28th October 2009 02:26 UTC

Hi pengyou,

Thanks for the pointer to UAC. I'll check it out...

Mark

Anders
28th October 2009 13:57 UTC

Beiley: CreateProcessAsUser also exists on 2000, the SAFER api itself does not IIRC, but that is besides the point, the SAFER api was not updated for Vista and it will not do what you want on NT6+, so, if you want to enter a world of pain, use the UAC plugin, or if you want to take the easy way out, just disable the run checkbox

Beiley
28th October 2009 15:56 UTC

Thanks Anders. I think I'll just leave it as is, and let my app launch as admin. It works fine as admin too, but I just thought it cleaner to launch with normal permissions.

Thanks again,
Mark