\
Tips and Tricks
Tools
MSI (Windows Installer) Platform SDK
SDK SAMPLE MSI VB SCRIPTS
SDK: WiPolicy.vbs
| WiPolicy.vbs (SDK Sample Script) |
This is an sample VBSCRIPT installed into the "C:\Program Files\Microsoft Platform SDK\Samples\SysMgmt\Msi\Scripts" directory via the "Platform SDK".
Windows Installer utility to manage installer policy settings
If no arguments are supplied, current policy settings in list will be reported
The 1st argument specifies the policy to set, using a code from the list below
The 2nd argument specifies the new policy setting, use "" to remove the policy
If the 2nd argument is not supplied, the current policy value will be reported
: ()
LM: Logging(HKLM) Logging modes if not supplied by install, set of iwearucmpv
DO: Debug(HKLM) OutputDebugString: 1=debug output, 2=verbose debug output, 7=include command line
DI: DisableMsi(HKLM) 1=Disable non-managed installs, 2=disable all installs
WT: Timeout(HKLM) Wait timeout in seconds in case of no activity
DB: DisableBrowse(HKLM) Disable user browsing of source locations if 1
AB: AllowLockdownBrowse(HKLM) Allow non-admin users to browse to new sources for managed applications if 1 - use is not recommended
AM: AllowLockdownMedia(HKLM) Allow non-admin users to browse to new media sources for managed applications if 1 - use is not recommended
AP: AllowLockdownPatch(HKLM) Allow non-admin users to apply small and minor update patches to managed applications if 1 - use is not recommended
DU: DisableUserInstalls(HKLM) Disable per-user installs if 1 - available on Windows Installer version 2.0 and later
DP: DisablePatch(HKLM) Disable patch application to all products if 1
UC: EnableUserControl(HKLM) All public properties sent to install service if 1
ER: EnableAdminTSRemote(HKLM) Allow admins to perform installs from terminal server client sessions if 1
LS: LimitSystemRestoreCheckpointing(HKLM) Turn off creation of system restore check points on Windows XP if 1 - available on Windows Installer version 2.0 and later
SS: SafeForScripting(HKLM) Do not prompt when scripts within a webpage access Installer automation interface if 1 - use is not recommended
TP: TransformsSecure(HKLM) Pin tranforms in secure location if 1 (only admin and system have write privileges to cache location)
EM: AlwaysInstallElevated(HKLM) System privileges if 1 and HKCU value also set - dangerous policy as non-admin users can install with elevated privileges if enabled
EU: AlwaysInstallElevated(HKCU) System privileges if 1 and HKLM value also set - dangerous policy as non-admin users can install with elevated privileges if enabled
DR: DisableRollback(HKCU) Disable rollback if 1 - use is not recommended
TS: TransformsAtSource(HKCU) Locate transforms at root of source image if 1
SO: SearchOrder(HKCU) Search order of source types, set of n,m,u (default=nmu)
DM: DisableMedia(HKCU) Browsing to media sources is disabled
Copyright (C) Microsoft Corporation. All rights reserved.