NoteHKCU\Software\Policies\Microsoft\Windows\Installer
| Data type | Range | Default value |
|---|---|---|
| REG_DWORD | 0 | 1 | 0 |
Directs Windows Installer to use system permissions when it installs a program. By default, Windows Installer uses the user's permissions to install programs.
This entry stores the setting of the Always install with elevated privileges Group Policy. Group Policy adds this entry to the registry with a value of 1 when you enable the Always install with elevated privileges policy. If you disable the policy, Group Policy sets the value to 0. If you set the policy to Not configured, Group Policy deletes the entry from the registry and the system behaves as though the value is 0.
| Value | Meaning |
|---|---|
| 0 (or not in registry) | The policy is disabled or not configured. Use the current user's permissions, except when installing published or assigned programs. |
| 1 | The policy is enabled. Uses system permissions. |
This entry extends elevated privileges to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add/Remove Programs in Control Panel. This entry lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers.
To change the value of this entry, use Group Policy. This entry corresponds to the Always install with elevated privileges policy (User Configuration\Administrative Templates\Windows Components\Windows Installer).
Note
This entry can appear in both HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER. If this entry appears in both subtrees, the value in HKEY_LOCAL_MACHINE takes precedence over the value in HKEY_CURRENT_USER.
Tip
For detailed information about particular Group Policy settings, see the Group Policy Reference (Gp.chm) on the Windows 2000 Resource Kit companion CD.
For general information about Group Policy, see Group Policy in Windows 2000 Help.
To see a table associating policies with their corresponding registry entries, see the Group Policy Reference Table.
Caution
Skilled users can take advantage of the permissions this entry grants to change their privileges and gain permanent access to restricted files and folders. Note that the version of this entry in HKEY_CURRENT_USER is not guaranteed to be secure.
Related Entries
