InstallShield 2012 Spring Express Edition User Guide

Chapter 22: Dialog Box Reference
Permissions Dialog Boxes for Registry Keys
The following table describes the different areas on the Permissions dialog box.
Table 22-34: Areas of the Permissions Dialog Box
Area Description
Name(s) In this grid, you can enter any combination of domain and user names. To add
an entry, right-click the grid and click New. You can modify or delete entries
using the same context menu.
To specify the current user’s domain, select [%USERDOMAIN] in the Domain
field. To specify the user that is currently running the installation, select
[LogonUser] in the User field. To set permissions for user accounts on a local
system, leave the Domain field blank. Note that you can enter in the Domain or
User fields any Windows Installer property that is set at run time—for example,
[MYPROPERTY].
If the custom InstallShield handling option is selected for the Locked-Down
Permissions setting in the General Information view, the User field contains a
list of well-known security identifiers (SIDs). Most of the SIDs are not supported
by the traditional Windows Installer handling option.
The custom InstallShield handling option supports localized names for all of the
SIDs that are listed in the User field. With the traditional option, if you try to use
a localized name to set permissions on a non-English system, the installation
may fail.
Tip: For more information on the custom InstallShield handling option and the
traditional Windows Installer handling option, see Securing Files, Folders, and
Registry Keys in a Locked-Down Environment.
Permissions Select a name in the Name(s) area, and then select or clear the check boxes in
the Permissions box to configure the corresponding permissions for the
registry key. Once you have selected a permission, you can click the Advanced
button to specify other associated permissions and advanced settings.
Deny Access If you want to explicitly deny the permissions that you are selecting in the
Permissions box, select this check box.
This check box is available only if the custom InstallShield handling option is
selected for the Locked-Down Permissions setting in the General Information
view. The traditional Windows Installer handling option does not include support
for this behavior.
Tip: For more information on the custom InstallShield handling option and the
traditional Windows Installer handling option, see Securing Files, Folders, and
Registry Keys in a Locked-Down Environment.
426 ISE-1900-UG00 InstallShield 2012 Spring Express Edition User Guide