Joe User 99 Posted November 8, 2006 Share Posted November 8, 2006 I've come across what appears to be a very minor bug while integrating IE7.I can't say it is caused by nlite, however, the problem does not occur if I install IE7 intoan existing XP install, only when integrating.And again, it's minor. It would only affect User accounts, not Admin users.I have integrated the Final IE7, downloaded directly from MS, no other changes, into aplain XP SP2, with no other integrations, changes, or anything.What is happening, is the rights to the registry key,HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer are being changed.On my pre-IE7 image, that key has the following permissions:Administrators - Full ControlSYSTEM - Full ControlEveryone - Read (Query Value, Enumerate Subkeys, Notify, Read Control)on my post IE7 integration, that key has the following permissions:Administrators - Read (Query Value, Enumerate Subkeys, Notify, Read Control)SYSTEM - Read (Query Value, Enumerate Subkeys, Notify, Read Control)Since there are no other rights, this triggers a couple of MSI errors (2503 followed by 2502, on EVERY MSI).Again, since most normal user accounts do not have the rights to install software via MSI's anyway,and most home users are Admin users, it's not a big issue. I only came across it because we deploy software to restricted users.Can anyone verify this? Link to comment Share on other sites More sharing options...
dijuremo Posted November 13, 2006 Share Posted November 13, 2006 (edited) What is happening, is the rights to the registry key,HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer are being changed.This is *not* just related to IE7. I slipstreamed only windows updates using nlite and found the same problem while running office for a new user because it needs to run the msi installer the first time any office application launches (see my posting). It should be a bug in the nlite slipstreaming process which does not change the registry key permissions on that key.I just checked another system that was installed by hand and the default permissions on that registry key should be:Administrators - Full ControlSystem - Full ControlEveryone - ReadWhen changing this permissions on HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer make sure you set them to propagate down by selecting the check box that reads: "Replace permission entries on all child objects ..."The permissions after using nlite patched files to install a new machine in unattended mode are:Administrators - Special (mostly read permissions)System - Full ControlThere are no permissions for "Everyone" as you mention.After changing the permissions (remember to propagate them to the child) and rebooting, I was able to log in to the machine with a new user account that had no administrator rights and launch Word for the first time without getting errors as before. The issue is not just IE7 related, must be an nlite 1.2.1 bug.Thanks for finding the problem, you made my day. Edited November 13, 2006 by dijuremo Link to comment Share on other sites More sharing options...
NetUnix Posted January 8, 2007 Share Posted January 8, 2007 What is happening, is the rights to the registry key,HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer are being changed.This is *not* just related to IE7. I slipstreamed only windows updates using nlite and found the same problem while running office for a new user because it needs to run the msi installer the first time any office application launches (see my posting). It should be a bug in the nlite slipstreaming process which does not change the registry key permissions on that key.I just checked another system that was installed by hand and the default permissions on that registry key should be:Administrators - Full ControlSystem - Full ControlEveryone - ReadWhen changing this permissions on HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer make sure you set them to propagate down by selecting the check box that reads: "Replace permission entries on all child objects ..."I can't find the values for those permissions at that registry key location. May you be more precise about where they 're located please?thanks Link to comment Share on other sites More sharing options...
nuhi Posted January 8, 2007 Share Posted January 8, 2007 Ok, this a known bug, posted 3 times already, please search if there is a solution.I will fix it even though it didn't affect me. Thank you. Link to comment Share on other sites More sharing options...
Yenun Posted January 9, 2007 Share Posted January 9, 2007 but how can i fix this in a already installed system without using nlite?, a mean how can i change de registry values? Link to comment Share on other sites More sharing options...
Speeddymon Posted January 10, 2007 Share Posted January 10, 2007 but how can i fix this in a already installed system without using nlite?, a mean how can i change de registry values?Right click on the key and click Permissions Link to comment Share on other sites More sharing options...
2forza Posted January 10, 2007 Share Posted January 10, 2007 Hi, Dont know if this is a bug or something, here it goes:"Show Desktop" icon on the quick launch is missing after intregrating IE7 with nLite.Does anybody else have that problem too? Or is it just me?Oh and a last question:My IE7 ui looks like IE6; is that normal?? Link to comment Share on other sites More sharing options...
Speeddymon Posted January 10, 2007 Share Posted January 10, 2007 Hi, Dont know if this is a bug or something, here it goes:"Show Desktop" icon on the quick launch is missing after intregrating IE7 with nLite.Does anybody else have that problem too? Or is it just me?Oh and a last question:My IE7 ui looks like IE6; is that normal?? No it isn't. If you integrated IE7 with RyanVM's 2.1.5a pack, you need to hit NO for browseui.dl_, shdocvw.dl_, and shlwapi.dl_.Please make your own thread for this, as hijacking someone else's thread can get you in trouble.Show Desktop is a known issue when integrating IE7. Link to comment Share on other sites More sharing options...
2forza Posted January 10, 2007 Share Posted January 10, 2007 (edited) No it isn't. If you integrated IE7 with RyanVM's 2.1.5a pack, you need to hit NO for browseui.dl_, shdocvw.dl_, and shlwapi.dl_.Please make your own thread for this, as hijacking someone else's thread can get you in trouble.Show Desktop is a known issue when integrating IE7.Ok thanks for your fast reply!! but still, I dont know what u mean by hit No for browseui.dl_, shdocvw.dl_, and shlwapi.dl_.Hehehe... Do you mean remove files? or keep? Please explain...I ve found the solution for the desktop iconrun:regsvr32 /s /n /i:U shell32(then reboot)Oops:P for hijacking someone else's thread Edited January 10, 2007 by 2forza Link to comment Share on other sites More sharing options...
Speeddymon Posted January 10, 2007 Share Posted January 10, 2007 No it isn't. If you integrated IE7 with RyanVM's 2.1.5a pack, you need to hit NO for browseui.dl_, shdocvw.dl_, and shlwapi.dl_.Please make your own thread for this, as hijacking someone else's thread can get you in trouble.Show Desktop is a known issue when integrating IE7.Ok thanks for your fast reply!! but still, I dont know what u mean by hit No for browseui.dl_, shdocvw.dl_, and shlwapi.dl_.Hehehe... Do you mean remove files? or keep? Please explain...I ve found the solution for the desktop iconrun:regsvr32 /s /n /i:U shell32(then reboot)Oops:P for hijacking someone else's thread Then you integrate Ryan's pack and IE7 at the same time (like u are supposed to), you get a prompt keep the newer file (because IE7 uses an older version of a file). If you say yes to keep that file for those 2 files, you get IE7 with an IE6 UI which is pointless. Make sure you said no to those. This prompt appears during the actual integration process. Link to comment Share on other sites More sharing options...
2forza Posted January 10, 2007 Share Posted January 10, 2007 Oh many many thanks!! Ill try tomorrow Link to comment Share on other sites More sharing options...
nuhi Posted January 16, 2007 Share Posted January 16, 2007 Updated to RC2, please someone try it if it solves this MSI permission thing. Link to comment Share on other sites More sharing options...
mitsukai Posted January 16, 2007 Share Posted January 16, 2007 i got the same problem.but i havent integrated anything i just removed some components.then i installed ie7 manually on the nlited os and the interface is ie6 also quick launch icon is gone. Link to comment Share on other sites More sharing options...
nuhi Posted January 17, 2007 Share Posted January 17, 2007 mitsukai, your error isn't related to the installer entry. Check if you installed the IE7 hotfixes which are in it. Link to comment Share on other sites More sharing options...
mitsukai Posted January 17, 2007 Share Posted January 17, 2007 where do i find this hotfixes Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now