AlwaysInstallElevated

HKCU\Software\Policies\Microsoft\Windows\Installer

Data type

Range

Default value

REG_DWORD

0 | 1

0

Description

Directs Windows Installer to use system permissions when it installs a program. By default, it uses the user's permissions.

This entry stores the setting of the Always install with elevated privileges Group Policy. Group Policy adds this entry to the registry with a value of 1 when you enable the policy. If you disable the policy, Group Policy sets the value to 0. If you set the policy to Not configured, Group Policy deletes the entry from the registry, and the system behaves as though the value is 0.

Value

Meaning

0 (or not in the registry)

The policy is disabled or not configured. Windows Installer uses the current user's permissions, except when it is installing published or assigned programs.

1

The policy is enabled. Windows Installer uses system permissions.

This entry extends elevated permissions to all programs. These permissions are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add/Remove Programs in Control Panel. This entry lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers.

Change method

To change the value of this entry, use Group Policy. This entry corresponds to the Always install with elevated privileges Group Policy (User Configuration\Administrative Templates\Windows Components\Windows Installer).

Note Image Note

This entry can appear in both the HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER subtrees. If this entry appears in both subtrees, the entry in HKEY_LOCAL_MACHINE takes precedence over the entry in HKEY_CURRENT_USER.

Tip Image Tip

For detailed information about particular Group Policy settings, see the Windows 2000 Resource Kit Group Policy Reference.

For general information about Group Policy, see Windows 2000 Server Help or Windows 2000 Professional Help.

To see a table associating policies with their corresponding registry entries, see the Group Policy Registry Table .

Caution Image Caution

Skilled users can take advantage of the permissions this entry grants to change their privileges and to gain permanent access to restricted files and folders. Note that the version of this entry in HKEY_CURRENT_USER is not guaranteed to be secure.

Related Entries

Page Image

AlwaysInstallElevated (HKLM)