Security Descriptor Dialog Box

InstallShield 2024

The Security Descriptor dialog box opens when you click the ellipsis button (...) in the Security Descriptor setting; this setting is displayed under the Permissions setting when you are configuring permissions for a service that you have added to the Services view, or to the Services node in the Advanced Settings area for a component in the Setup Design view (in installation projects) or the Components view.

The Security Descriptor dialog box is where you use valid security descriptor definition language (SDDL) to enter a valid SDDL string for service permissions. For more information about SDDL, see the “Access Control” section of the Microsoft Windows Software Development Kit (SDK).

Tip:You can use angle brackets (for example, <DomainName\UserName>) or environment variables (for example, [%UserDomain][%UserName]) to indicate the domain and user name of the user whose account SID is going to be determined at run time.

Note:The permission settings are supported beginning with Windows Installer 5. Earlier versions of Windows Installer ignore these settings.

An installation should not contain both the MsiLockPermissionsEx table and the LockPermissions table. If you use the Permissions setting for a service, and the settings under it, you are configuring the MsiLockPermissionsEx table of the package. If Traditional Windows Installer handling is selected for the Locked-Down Permissions setting in the General Information view and you have set permissions for one or more files, folders, or registry keys in your project, you are configuring the LockPermissions table of the package.