Windows 7 MSI Fix Raisers Edge All Users MSILockPermissions

Pretty simple fix for this.

CreateFolder Table

 * Sets directories for MSILockPermissions to set permissions on (cant use references in Directory table, need specifying here)

Inifile Table

 * Adds relevant settings into the BBupdate.ini

Edit deploy.ini
Deploy.ini in the installer ALSO needs altering to match BBupdate.ini values as this sets the ODBC settings in HKLM during the install, which a user doesn't have permissions to change.

[General] InstallTo= ServerDelta=1 SoftwareDelta=1 PatchDelta=1 NumDSNs=1 BackEnd=3 ServerName= Initialized=Yes [Database1] ServerName=xxxxxxxx.xx.xx.xx,1433 DatabaseName=RE7_DEV Description=RE7 Development ClientName=RE7 Development

MSILockPermissionsEx Table
Sets permissions on files/folders/registry - in this example on folders using SDDL.

This is a generic 'Program Files' permission plus Users having write.

Dont use with LockPermissions table, need one or other.

MSILockPermissionsEx needs Windows Installer v5 (Windows 7)

This table isn't in Insted, you will need ORCA >= 5 to add the table (you can enter it manually in Insted but its a bit of a faff). Once done you can alter it all normally in Insted.

subinacl examples for SDDL
Subinacl.exe /keyreg "HKEY_LOCAL_MACHINE\Software\Wow6432Node\Blackbaud" /display=sddl

Subinacl.exe /file "C:\Program Files (x86)" /display=sddl

Note, Don't forget to strip off any non generic SID's! like S-xx-xx-xxxxxxxxxxxxxxxxx

Registry Table

 * Register the RE7Outlook.dll (this is equivalent of 'c:\windows\SysWOW64\regsvr32.exe RE7Outlook.dll') into HKR (Root = 0)
 * Add RE7 Outlook addin to HKLM (Root=2) rather than HKU

Shortcut Table

 * Delete desktop shortcuts

Silent install
Sample batch file

Silent install from SCCM/SYSTEM account
Sample batch file,
 * Note using "psexec -s" to emulate a SYSTEM account install on local machine, this would be removed on a live one.

More details about this here about how this works

Updates
You can only download the mobile service addition online, it doesnt come with the original software. Installing it once via the web, the entire "C:\Program Files (x86)\Blackbaud\Mobile Service" folder can be copied and a ser vice created and started (and permissions set to allow users to stop and start it)