Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CheckUserPrivilege: error 2896 #19

Open
cjmurph opened this issue Dec 13, 2014 · 2 comments
Open

CheckUserPrivilege: error 2896 #19

cjmurph opened this issue Dec 13, 2014 · 2 comments
Labels
confirmed bug

Comments

@cjmurph
Copy link

cjmurph commented Dec 13, 2014

check user privilege action crashes the installer on some machines with permission denied error. The installer then exits. It seems to be due to the permission check requiring UAC elevation.

here's a log showing the failure using the supplied demo UserPrivileges.msi

=== Verbose logging started: 13/12/2014  11:59:52  Build type: SHIP UNICODE 5.00.7601.00  Calling process: C:\Windows\SYSTEM32\msiexec.exe ===
MSI (c) (50:AC) [11:59:52:124]: Font created.  Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

MSI (c) (50:AC) [11:59:52:124]: Font created.  Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

MSI (c) (50:D0) [11:59:52:139]: Resetting cached policy values
MSI (c) (50:D0) [11:59:52:139]: Machine policy value 'Debug' is 0
MSI (c) (50:D0) [11:59:52:139]: ******* RunEngine:
           ******* Product: UserPrivileges.msi
           ******* Action: 
           ******* CommandLine: **********
MSI (c) (50:D0) [11:59:52:139]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (50:D0) [11:59:52:171]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\temp\UserPrivileges.msi' against software restriction policy
MSI (c) (50:D0) [11:59:52:171]: Note: 1: 2262 2: �DigitalSignature 3: -2147287038 
MSI (c) (50:D0) [11:59:52:171]: SOFTWARE RESTRICTION POLICY: C:\temp\UserPrivileges.msi is not digitally signed
MSI (c) (50:D0) [11:59:52:171]: SOFTWARE RESTRICTION POLICY: C:\temp\UserPrivileges.msi is permitted to run at the 'unrestricted' authorization level.
MSI (c) (50:D0) [11:59:52:186]: Cloaking enabled.
MSI (c) (50:D0) [11:59:52:186]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (50:D0) [11:59:52:186]: End dialog not enabled
MSI (c) (50:D0) [11:59:52:186]: Original package ==> C:\temp\UserPrivileges.msi
MSI (c) (50:D0) [11:59:52:186]: Package we're running from ==> C:\temp\UserPrivileges.msi
MSI (c) (50:D0) [11:59:52:186]: APPCOMPAT: Compatibility mode property overrides found.
MSI (c) (50:D0) [11:59:52:186]: APPCOMPAT: looking for appcompat database entry with ProductCode '{971F35E3-CFEE-4515-8E2B-C283B7CCF7FA}'.
MSI (c) (50:D0) [11:59:52:186]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (50:D0) [11:59:52:202]: MSCOREE not loaded loading copy from system32
MSI (c) (50:D0) [11:59:52:202]: Machine policy value 'TransformsSecure' is 0
MSI (c) (50:D0) [11:59:52:202]: User policy value 'TransformsAtSource' is 0
MSI (c) (50:D0) [11:59:52:202]: Machine policy value 'DisablePatch' is 0
MSI (c) (50:D0) [11:59:52:202]: Machine policy value 'AllowLockdownPatch' is 0
MSI (c) (50:D0) [11:59:52:202]: Machine policy value 'DisableMsi' is 0
MSI (c) (50:D0) [11:59:52:202]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (50:D0) [11:59:52:202]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (50:D0) [11:59:52:202]: Running product '{971F35E3-CFEE-4515-8E2B-C283B7CCF7FA}' with user privileges: It's not assigned.
MSI (c) (50:D0) [11:59:52:202]: Machine policy value 'DisableLUAPatching' is 0
MSI (c) (50:D0) [11:59:52:202]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (c) (50:D0) [11:59:52:202]: APPCOMPAT: looking for appcompat database entry with ProductCode '{971F35E3-CFEE-4515-8E2B-C283B7CCF7FA}'.
MSI (c) (50:D0) [11:59:52:202]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (50:D0) [11:59:52:202]: Transforms are not secure.
MSI (c) (50:D0) [11:59:52:202]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\temp\log.log'.
MSI (c) (50:D0) [11:59:52:202]: Command Line: CURRENTDIRECTORY=C:\temp CLIENTUILEVEL=0 CLIENTPROCESSID=3152 
MSI (c) (50:D0) [11:59:52:202]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{3BC6B13B-EC8D-4B81-81D7-A96173DDA9DA}'.
MSI (c) (50:D0) [11:59:52:202]: Product Code passed to Engine.Initialize:           ''
MSI (c) (50:D0) [11:59:52:202]: Product Code from property table before transforms: '{971F35E3-CFEE-4515-8E2B-C283B7CCF7FA}'
MSI (c) (50:D0) [11:59:52:202]: Product Code from property table after transforms:  '{971F35E3-CFEE-4515-8E2B-C283B7CCF7FA}'
MSI (c) (50:D0) [11:59:52:202]: Product not registered: beginning first-time install
MSI (c) (50:D0) [11:59:52:202]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (50:D0) [11:59:52:202]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (50:D0) [11:59:52:202]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (50:D0) [11:59:52:202]: Adding new sources is allowed.
MSI (c) (50:D0) [11:59:52:202]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (50:D0) [11:59:52:202]: Package name extracted from package path: 'UserPrivileges.msi'
MSI (c) (50:D0) [11:59:52:202]: Package to be registered: 'UserPrivileges.msi'
MSI (c) (50:D0) [11:59:52:202]: Note: 1: 2205 2:  3: Error 
MSI (c) (50:D0) [11:59:52:202]: Note: 1: 2262 2: AdminProperties 3: -2147287038 
MSI (c) (50:D0) [11:59:52:202]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (50:D0) [11:59:52:202]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (50:D0) [11:59:52:202]: Running product '{971F35E3-CFEE-4515-8E2B-C283B7CCF7FA}' with user privileges: It's not assigned.
MSI (c) (50:D0) [11:59:52:202]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\temp'.
MSI (c) (50:D0) [11:59:52:202]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '0'.
MSI (c) (50:D0) [11:59:52:202]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '3152'.
MSI (c) (50:D0) [11:59:52:202]: TRANSFORMS property is now: 
MSI (c) (50:D0) [11:59:52:202]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (c) (50:D0) [11:59:52:202]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Roaming
MSI (c) (50:D0) [11:59:52:202]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\Favorites
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\Documents
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Local
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\Pictures
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\cmurphy\Desktop
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (50:D0) [11:59:52:217]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (c) (50:D0) [11:59:52:217]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 
MSI (c) (50:D0) [11:59:52:233]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (c) (50:D0) [11:59:52:233]: PROPERTY CHANGE: Adding AdminUser property. Its value is '1'.
MSI (c) (50:D0) [11:59:52:233]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (50:D0) [11:59:52:233]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
MSI (c) (50:D0) [11:59:52:233]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Admin'.
MSI (c) (50:D0) [11:59:52:233]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
MSI (c) (50:D0) [11:59:52:233]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\temp\UserPrivileges.msi'.
MSI (c) (50:D0) [11:59:52:233]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\temp\UserPrivileges.msi'.
MSI (c) (50:D0) [11:59:52:233]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (50:D0) [11:59:52:233]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\temp\'.
MSI (c) (50:D0) [11:59:52:233]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\temp\'.
MSI (c) (50:AC) [11:59:52:233]: PROPERTY CHANGE: Adding VersionHandler property. Its value is '5.00'.
=== Logging started: 13/12/2014  11:59:52 ===
MSI (c) (50:D0) [11:59:52:233]: Note: 1: 2205 2:  3: PatchPackage 
MSI (c) (50:D0) [11:59:52:233]: Machine policy value 'DisableRollback' is 0
MSI (c) (50:D0) [11:59:52:233]: User policy value 'DisableRollback' is 0
MSI (c) (50:D0) [11:59:52:233]: PROPERTY CHANGE: Adding UILevel property. Its value is '5'.
MSI (c) (50:D0) [11:59:52:233]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (c) (50:D0) [11:59:52:233]: Doing action: INSTALL
MSI (c) (50:D0) [11:59:52:233]: Note: 1: 2205 2:  3: ActionText 
Action 11:59:52: INSTALL. 
Action start 11:59:52: INSTALL.
MSI (c) (50:D0) [11:59:52:233]: UI Sequence table 'InstallUISequence' is present and populated.
MSI (c) (50:D0) [11:59:52:233]: Running UISequence
MSI (c) (50:D0) [11:59:52:233]: PROPERTY CHANGE: Adding EXECUTEACTION property. Its value is 'INSTALL'.
MSI (c) (50:D0) [11:59:52:233]: Doing action: PrepareDlg
MSI (c) (50:D0) [11:59:52:233]: Note: 1: 2205 2:  3: ActionText 
Action 11:59:52: PrepareDlg. 
Action start 11:59:52: PrepareDlg.
MSI (c) (50:AC) [11:59:52:233]: Note: 1: 2205 2:  3: Error 
MSI (c) (50:AC) [11:59:52:233]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 2898 
Info 2898.For WixUI_Font_Normal textstyle, the system created a 'Tahoma' font, in 0 character set, of 13 pixels height.
MSI (c) (50:AC) [11:59:52:233]: Note: 1: 2205 2:  3: Error 
MSI (c) (50:AC) [11:59:52:233]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 2898 
Info 2898.For WixUI_Font_Bigger textstyle, the system created a 'Tahoma' font, in 0 character set, of 19 pixels height.
Action 11:59:52: PrepareDlg. Dialog created
Action ended 11:59:52: PrepareDlg. Return value 1.
MSI (c) (50:D0) [11:59:52:249]: Doing action: AppSearch
MSI (c) (50:D0) [11:59:52:249]: Note: 1: 2205 2:  3: ActionText 
Action 11:59:52: AppSearch. Searching for installed applications
Action start 11:59:52: AppSearch.
MSI (c) (50:D0) [11:59:52:249]: Note: 1: 2205 2:  3: AppSearch 
MSI (c) (50:D0) [11:59:52:249]: Note: 1: 2228 2:  3: AppSearch 4: SELECT `Property`, `Signature_` FROM `AppSearch` 
Action ended 11:59:52: AppSearch. Return value 0.
MSI (c) (50:D0) [11:59:52:249]: Doing action: SetUserDNSDomain
MSI (c) (50:D0) [11:59:52:249]: Note: 1: 2205 2:  3: ActionText 
Action 11:59:52: SetUserDNSDomain. 
Action start 11:59:52: SetUserDNSDomain.
MSI (c) (50:D0) [11:59:52:249]: PROPERTY CHANGE: Adding ENVIRONMENT_USERDNSDOMAIN property. Its value is 'PARADIGMENGINEERS.LOCAL'.
Action ended 11:59:52: SetUserDNSDomain. Return value 1.
MSI (c) (50:D0) [11:59:52:249]: Doing action: SetDomainUsername
MSI (c) (50:D0) [11:59:52:249]: Note: 1: 2205 2:  3: ActionText 
Action 11:59:52: SetDomainUsername. 
Action start 11:59:52: SetDomainUsername.
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding ENVIRONMENT_USERNAME_FULL property. Its value is 'PARADIGMENGINEERS.LOCAL\cmurphy'.
Action ended 11:59:52: SetDomainUsername. Return value 1.
MSI (c) (50:D0) [11:59:52:264]: Skipping action: SetLocalUsername (condition is false)
MSI (c) (50:D0) [11:59:52:264]: Doing action: ValidateProductID
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: ActionText 
Action 11:59:52: ValidateProductID. 
Action start 11:59:52: ValidateProductID.
Action ended 11:59:52: ValidateProductID. Return value 1.
MSI (c) (50:D0) [11:59:52:264]: Doing action: CostInitialize
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: ActionText 
Action 11:59:52: CostInitialize. Computing space requirements
Action start 11:59:52: CostInitialize.
MSI (c) (50:D0) [11:59:52:264]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
Action ended 11:59:52: CostInitialize. Return value 1.
MSI (c) (50:D0) [11:59:52:264]: Doing action: FileCost
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: ActionText 
Action 11:59:52: FileCost. Computing space requirements
Action start 11:59:52: FileCost.
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: MsiAssembly 
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: Registry 
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: Registry 
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: Class 
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: Extension 
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: TypeLib 
Action ended 11:59:52: FileCost. Return value 1.
MSI (c) (50:D0) [11:59:52:264]: Doing action: CostFinalize
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: ActionText 
Action 11:59:52: CostFinalize. Computing space requirements
Action start 11:59:52: CostFinalize.
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: Patch 
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: Condition 
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding INSTALLLOCATION property. Its value is 'C:\Program Files (x86)\UserPrivilegesDemo\'.
MSI (c) (50:D0) [11:59:52:264]: Target path resolution complete. Dumping Directory table...
MSI (c) (50:D0) [11:59:52:264]: Note: target paths subject to change (via custom actions or browsing)
MSI (c) (50:D0) [11:59:52:264]: Dir (target): Key: TARGETDIR    , Object: C:\
MSI (c) (50:D0) [11:59:52:264]: Dir (target): Key: ProgramFilesFolder   , Object: C:\Program Files (x86)\
MSI (c) (50:D0) [11:59:52:264]: Dir (target): Key: INSTALLLOCATION  , Object: C:\Program Files (x86)\UserPrivilegesDemo\
MSI (c) (50:D0) [11:59:52:264]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: MsiAssembly 
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2228 2:  3: MsiAssembly 4:  SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`,  `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE  `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ? 
Action ended 11:59:52: CostFinalize. Return value 1.
MSI (c) (50:D0) [11:59:52:264]: Skipping action: MaintenanceWelcomeDlg (condition is false)
MSI (c) (50:D0) [11:59:52:264]: Skipping action: ResumeDlg (condition is false)
MSI (c) (50:D0) [11:59:52:264]: Doing action: WelcomeDlg
MSI (c) (50:D0) [11:59:52:264]: Note: 1: 2205 2:  3: ActionText 
Action 11:59:52: WelcomeDlg. 
Action start 11:59:52: WelcomeDlg.
Action 11:59:52: WelcomeDlg. Dialog created
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: _RemoveFilePath 
MSI (c) (50:14) [11:59:52:280]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: Registry 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: BindImage 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: ProgId 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: PublishComponent 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: SelfReg 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: Extension 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: Font 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: Shortcut 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: Class 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: Icon 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2205 2:  3: TypeLib 
MSI (c) (50:14) [11:59:52:280]: Note: 1: 2727 2:  
Action 11:59:53: GetUserInfoDlg. Dialog created
Action 11:59:55: TestCredentialsDlg. Dialog created
MSI (c) (50:AC) [11:59:55:556]: PROPERTY CHANGE: Adding LOGON_VALID property. Its value is '0'.
MSI (c) (50:AC) [11:59:55:556]: PROPERTY CHANGE: Adding LOGON_HAS_PRIVILEGE property. Its value is '0'.
MSI (c) (50:AC) [11:59:56:601]: PROPERTY CHANGE: Modifying SERVICE_LOGON_TYPE property. Its current value is 'ServiceLocalSystem'. Its new value: 'ServiceAccount'.
MSI (c) (50:AC) [12:00:03:871]: PROPERTY CHANGE: Adding SERVICE_USERNAME property. Its value is '.\Admin'.
MSI (c) (50:AC) [12:00:12:669]: PROPERTY CHANGE: Adding SERVICE_PASSWORD property. Its value is '**********'.
MSI (c) (50:AC) [12:00:12:747]: PROPERTY CHANGE: Adding LOGON_USERNAME property. Its value is '.\Admin'.
MSI (c) (50:AC) [12:00:12:747]: PROPERTY CHANGE: Adding LOGON_PASSWORD property. Its value is 'removed'.
MSI (c) (50:AC) [12:00:12:747]: Doing action: CheckCredentials
MSI (c) (50:AC) [12:00:12:747]: Note: 1: 2205 2:  3: ActionText 
Action 12:00:12: CheckCredentials. 
Action start 12:00:12: CheckCredentials.
MSI (c) (50:D0) [12:00:12:809]: Invoking remote custom action. DLL: C:\Users\cmurphy\AppData\Local\Temp\MSI5427.tmp, Entrypoint: CheckCredentials
MSI (c) (50:D4) [12:00:12:825]: Cloaking enabled.
MSI (c) (50:D4) [12:00:12:825]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (50:D4) [12:00:12:825]: Connected to service for CA interface.
MSI (c) (50!D0) [12:00:12:903]: PROPERTY CHANGE: Modifying LOGON_VALID property. Its current value is '0'. Its new value: '1'.
Action ended 12:00:12: CheckCredentials. Return value 1.
MSI (c) (50:AC) [12:00:12:903]: PROPERTY CHANGE: Adding LOGON_PRIVILEGE property. Its value is 'SeServiceLogonRight'.
MSI (c) (50:AC) [12:00:12:903]: Doing action: CheckPrivilege
MSI (c) (50:AC) [12:00:12:903]: Note: 1: 2205 2:  3: ActionText 
Action 12:00:12: CheckPrivilege. 
Action start 12:00:12: CheckPrivilege.
MSI (c) (50:AC) [12:00:12:934]: Invoking remote custom action. DLL: C:\Users\cmurphy\AppData\Local\Temp\MSI54C4.tmp, Entrypoint: CheckPrivilege
MSI (c) (50!A0) [12:00:12:950]: PROPERTY CHANGE: Adding CA_ERROR property. Its value is '0x80070005 - Error opening policy on PE0027-LT: Access is denied.'.
Action ended 12:00:12: CheckPrivilege. Return value 3.
MSI (c) (50:AC) [12:00:12:950]: Note: 1: 2205 2:  3: Error 
MSI (c) (50:AC) [12:00:12:950]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 2896 
DEBUG: Error 2896:  Executing action CheckPrivilege failed.
The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2896. The arguments are: CheckPrivilege, , 
Action ended 12:00:12: WelcomeDlg. Return value 3.
MSI (c) (50:D0) [12:00:12:950]: Doing action: FatalError
MSI (c) (50:D0) [12:00:12:950]: Note: 1: 2205 2:  3: ActionText 
Action 12:00:12: FatalError. 
Action start 12:00:12: FatalError.
Action 12:00:12: FatalError. Dialog created
Action ended 12:00:15: FatalError. Return value 2.
Action ended 12:00:15: INSTALL. Return value 3.
MSI (c) (50:D0) [12:00:15:071]: Destroying RemoteAPI object.
MSI (c) (50:D4) [12:00:15:071]: Custom Action Manager thread ending.
Property(C): INSTALLLOCATION = C:\Program Files (x86)\UserPrivilegesDemo\
Property(C): WixUIRMOption = UseRM
Property(C): SERVICE_LOGON_TYPE = ServiceAccount
Property(C): SERVICE_USERNAME = .\Admin
Property(C): SERVICE_PASSWORD = **********
Property(C): ARPNOMODIFY = 1
Property(C): ENVIRONMENT_USERDNSDOMAIN = PARADIGMENGINEERS.LOCAL
Property(C): ENVIRONMENT_USERNAME_FULL = PARADIGMENGINEERS.LOCAL\cmurphy
Property(C): ProgramFilesFolder = C:\Program Files (x86)\
Property(C): TARGETDIR = C:\
Property(C): SourceDir = C:\temp\
Property(C): DefaultUIFont = WixUI_Font_Normal
Property(C): WixUI_Mode = InstallDir
Property(C): Manufacturer = Application Security Inc.
Property(C): ProductCode = {971F35E3-CFEE-4515-8E2B-C283B7CCF7FA}
Property(C): ProductLanguage = 1033
Property(C): ProductName = User Privileges Demo MSI
Property(C): ProductVersion = 1.4.1114.0
Property(C): UpgradeCode = {EC8C9EEB-951C-4357-BE21-A4C3425E4ABE}
Property(C): ErrorDialog = ErrorDlg
Property(C): WixPdbPath = C:\Users\dblock\source\msiext\dblock\target\Release\bin\UserPrivileges.wixpdb
Property(C): MsiLogFileLocation = C:\temp\log.log
Property(C): PackageCode = {3BC6B13B-EC8D-4B81-81D7-A96173DDA9DA}
Property(C): ProductState = -1
Property(C): PackagecodeChanging = 1
Property(C): CURRENTDIRECTORY = C:\temp
Property(C): CLIENTUILEVEL = 0
Property(C): CLIENTPROCESSID = 3152
Property(C): VersionDatabase = 200
Property(C): VersionMsi = 5.00
Property(C): VersionNT = 601
Property(C): VersionNT64 = 601
Property(C): WindowsBuild = 7601
Property(C): ServicePackLevel = 1
Property(C): ServicePackLevelMinor = 0
Property(C): MsiNTProductType = 1
Property(C): WindowsFolder = C:\Windows\
Property(C): WindowsVolume = C:\
Property(C): System64Folder = C:\Windows\system32\
Property(C): SystemFolder = C:\Windows\SysWOW64\
Property(C): RemoteAdminTS = 1
Property(C): TempFolder = C:\Users\cmurphy\AppData\Local\Temp\
Property(C): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(C): ProgramFiles64Folder = C:\Program Files\
Property(C): CommonFiles64Folder = C:\Program Files\Common Files\
Property(C): AppDataFolder = C:\Users\cmurphy\AppData\Roaming\
Property(C): FavoritesFolder = C:\Users\cmurphy\Favorites\
Property(C): NetHoodFolder = C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(C): PersonalFolder = C:\Users\cmurphy\Documents\
Property(C): PrintHoodFolder = C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(C): RecentFolder = C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Recent\
Property(C): SendToFolder = C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\SendTo\
Property(C): TemplateFolder = C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Templates\
Property(C): CommonAppDataFolder = C:\ProgramData\
Property(C): LocalAppDataFolder = C:\Users\cmurphy\AppData\Local\
Property(C): MyPicturesFolder = C:\Users\cmurphy\Pictures\
Property(C): AdminToolsFolder = C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(C): StartupFolder = C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Property(C): ProgramMenuFolder = C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\
Property(C): StartMenuFolder = C:\Users\cmurphy\AppData\Roaming\Microsoft\Windows\Start Menu\
Property(C): DesktopFolder = C:\Users\cmurphy\Desktop\
Property(C): FontsFolder = C:\Windows\Fonts\
Property(C): GPTSupport = 1
Property(C): OLEAdvtSupport = 1
Property(C): ShellAdvtSupport = 1
Property(C): MsiAMD64 = 6
Property(C): Msix64 = 6
Property(C): Intel = 6
Property(C): PhysicalMemory = 8065
Property(C): VirtualMemory = 12997
Property(C): LogonUser = cmurphy
Property(C): UserSID = S-1-5-21-3775253493-2380903713-3211494252-1163
Property(C): UserLanguageID = 3081
Property(C): ComputerName = PE0027-LT
Property(C): SystemLanguageID = 3081
Property(C): ScreenX = 1920
Property(C): ScreenY = 1080
Property(C): CaptionHeight = 22
Property(C): BorderTop = 1
Property(C): BorderSide = 1
Property(C): TextHeight = 16
Property(C): TextInternalLeading = 3
Property(C): ColorBits = 32
Property(C): TTCSupport = 1
Property(C): Time = 12:00:15
Property(C): Date = 13/12/2014
Property(C): MsiNetAssemblySupport = 4.0.30319.18408
Property(C): MsiWin32AssemblySupport = 6.1.7601.17514
Property(C): RedirectedDllSupport = 2
Property(C): AdminUser = 1
Property(C): Privileged = 1
Property(C): USERNAME = Admin
Property(C): DATABASE = C:\temp\UserPrivileges.msi
Property(C): OriginalDatabase = C:\temp\UserPrivileges.msi
Property(C): SOURCEDIR = C:\temp\
Property(C): VersionHandler = 5.00
Property(C): UILevel = 5
Property(C): ACTION = INSTALL
Property(C): EXECUTEACTION = INSTALL
Property(C): ROOTDRIVE = C:\
Property(C): CostingComplete = 1
Property(C): OutOfDiskSpace = 0
Property(C): OutOfNoRbDiskSpace = 0
Property(C): PrimaryVolumeSpaceAvailable = 0
Property(C): PrimaryVolumeSpaceRequired = 0
Property(C): PrimaryVolumeSpaceRemaining = 0
Property(C): INSTALLLEVEL = 1
Property(C): LOGON_VALID = 1
Property(C): CA_ERROR = 0x80070005 - Error opening policy on PE0027-LT: Access is denied.
Property(C): LOGON_PRIVILEGE = SeServiceLogonRight
Property(C): LOGON_PASSWORD = removed
Property(C): LOGON_USERNAME = .\Admin
Property(C): LOGON_HAS_PRIVILEGE = 0
=== Logging stopped: 13/12/2014  12:00:15 ===
MSI (c) (50:D0) [12:00:15:087]: Note: 1: 1708 
MSI (c) (50:D0) [12:00:15:087]: Note: 1: 2205 2:  3: Error 
MSI (c) (50:D0) [12:00:15:087]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708 
MSI (c) (50:D0) [12:00:15:087]: Note: 1: 2205 2:  3: Error 
MSI (c) (50:D0) [12:00:15:087]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709 
MSI (c) (50:D0) [12:00:15:087]: Product: User Privileges Demo MSI -- Installation failed.

MSI (c) (50:D0) [12:00:15:087]: Windows Installer installed the product. Product Name: User Privileges Demo MSI. Product Version: 1.4.1114.0. Product Language: 1033. Manufacturer: Application Security Inc.. Installation success or error status: 1603.

MSI (c) (50:D0) [12:00:15:087]: Grabbed execution mutex.
MSI (c) (50:D0) [12:00:15:087]: Cleaning up uninstalled install packages, if any exist
MSI (c) (50:D0) [12:00:15:087]: MainEngineThread is returning 1603
=== Verbose logging stopped: 13/12/2014  12:00:15 ===
@dblock dblock changed the title CheckUserPrivilege Fault CheckUserPrivilege: error 2896 Dec 13, 2014
@cjmurph
Copy link
Author

cjmurph commented Dec 14, 2014

Just a thought, but what about a delayed custom action that checks and then if necessary grants the log on as service permission during install when the elevation has been gained? Then remove the check at this stage of the installer when the context is the current user who may not have permission to perform the check.

@dblock
Copy link
Owner

dblock commented Dec 14, 2014

A CA that actually grants privileges is exactly what you need, however it may not always be possible to grant the privilege because of how the domain may be setup I believe. You may be able to grant something locally and still not get the privilege because of the domain policy.

The CheckUserPrivilege CA was designed exactly for the purpose of finding out whether someone does or doesn't have it, but as we can see it doesn't always work without elevation :(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
confirmed bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@dblock @cjmurph