Summary

Synopsis

The Microsoft Windows Installer (MSI) features of installation-on-demand and source resiliency (auto-repair) use the availability of source media for their operation. If searches for the source media fail, perhaps caused by a corruption or movement of the media, a Browse Dialog may be displayed. This browse capability is outside the functionality of the InstallShield application and is instead displayed conditionally based on the environment and settings controlled by an administrator.

Discussion

The MSI features of installation-on-demand and source resiliency (auto-repair) will be affected if the source location is no longer available. Below are general categories of control measures:

• Permissions - According to the Guidelines for Authoring Secure Installations, it would be expected that "the installer should only display a browse dialog box if the current user is an administrator or if the installation does not require elevated privileges."
• Policies - DisableBrowse and AllowLockDownBrowse allow administrators to control the use of the browse functionality. The version of the installed MSI engine will affect the availability and functionality of these policies.

• User Interface (UI) - In a silent installation, UI level set to None; the browse functionality is not available.

Additional Information

Note for users of Windows Vista: The article discussing the administrative policy AllowLockdownMedia states that, 'the default value of this policy is 1 only on computers running Windows Vista and that are not joined to a domain.' However, it has been reported that this may not be accurate in all cases resulting in an un-set property. The net effect is that (1) installing a package from removable media like a CDROM, maintenance mode cannot be run and (2) the package cannot be uninstalled. Flexera Software has reported this issue to Microsoft and they are considering possible resolutions. Setting this policy should resolve the behaviour.

Additional information can also be found in these MSDN Help topics:

• Source Resiliency
• 227181 How to Manage Windows Installer Local Policies
• Machine Policies

Related KB Articles