Guidelines for Securing Packages on Locked-Down Computers

Adherence to the following guidelines when authoring a Windows Installer package that will be used on locked-down computers helps maintain a secure environment during installation:

  • Test your package for compatibility with the Windows Installer machine System Policy.
  • Make sure you package runs with all user interface levels, none, basic, limited, and full.
  • Test your package on NTFS partitions, both with elevated and non-elevated privileges.
  • Starting with Windows Installer 3.0, User Account Control (UAC) Patching enables non-administrator users to patch applications installed in the per-machine context. Test your patch package on Windows Vista and Windows XP for both installation by users with administrator access and by non-administrator users.