Windows Forum

Ask something
Discussion Locked

problems creating zap files

0 helpful
3 replies

by abubin

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

I am implementing group policy on my domain and creating zap files for installing acrobat reader.

As acrobat does not comes in MSI format, I need to create a ZAP file for it in order to implement into group policy.

The problem is that, when a user install this problem, from the add/remove program, they cannot install successfully due to the installation unable to edit the registry. An error will result.

But I definitely have to allow this software to edit the registry cause it is an authorize program to install by the domain user. So, how can I make it so that the installation will be allowed to edit the registry.

Thanks in advance.

3 replies

by umbral-echo

Windows 2000 has enhanced security features that make it impossible for older applications to edit the registry when a normal user runs the installation. There are two methods for allowing users to install applications that edit the registry.

1. Add all the users to the "Power Users" group. This elevates their permissions so they can access the registry. Unfortunately this also gives them access to things that they shouldn't be able to do.

2. Install the compatws.inf security template on the machine they will be using. You need to use the Security Configuration and Analysis utility to make this happen. This will "adjust" the Windows 2000 default security to give these applications the best chance to run, without adding users to PowerUsers.

If you need information about how to use the Security Configuration and Analysis tool I would suggest Windows Help on a server machine. It does an excellent job of explaining the utility, including step by step procedures. Again, the template you should install is the compatws.inf security template.

This discussion is closed to new replies.