| 1 | <?xml version='1.0' encoding='UTF-8'?>
|
|---|
| 2 | <!DOCTYPE topic PUBLIC "-//OASIS//DTD DITA Topic//EN" "topic.dtd">
|
|---|
| 3 | <topic xml:lang="en-us" id="install-win-installdir-req">
|
|---|
| 4 | <title>Windows Installation Directory Security Requirements</title>
|
|---|
| 5 |
|
|---|
| 6 | <body>
|
|---|
| 7 | <p>The installation directory on Windows hosts must meet certain security requirements, in order to be accepted by
|
|---|
| 8 | the Windows installer. </p>
|
|---|
| 9 | <p>This also applies for upgrades of <ph conkeyref="vbox-conkeyref-phrases/product-name"/>. </p>
|
|---|
| 10 | <p>For example, when installing <ph conkeyref="vbox-conkeyref-phrases/product-name"/> into a custom location at
|
|---|
| 11 | X:\Data\MyPrograms\<ph conkeyref="vbox-conkeyref-phrases/product-name"/>, all parent directories of this path
|
|---|
| 12 | (namely X:\Data and X:\Data\MyPrograms) must meet the following Discretionary Access Control List (DACL).
|
|---|
| 13 | <pre xml:space="preserve">
|
|---|
| 14 | Users S-1-5-32-545:(OI)(CI)(RX)
|
|---|
| 15 | Users S-1-5-32-545:(DE,WD,AD,WEA,WA)
|
|---|
| 16 | Authenticated Users S-1-5-11:(OI)(CI)(RX)
|
|---|
| 17 | Authenticated Users S-1-5-11:(DE,WD,AD,WEA,WA)
|
|---|
| 18 | </pre>Directory inheritance must also be disabled for all parent directories. </p>
|
|---|
| 19 | <p>You can use the <codeph>icacls</codeph> Windows command line tool to modify a directory to meet the security
|
|---|
| 20 | requirements. For example: <pre xml:space="preserve">
|
|---|
| 21 | icacls <Directory> /reset /t /c
|
|---|
| 22 | icacls <Directory> /inheritance:d /t /c
|
|---|
| 23 | icacls <Directory> /grant *S-1-5-32-545:(OI)(CI)(RX)
|
|---|
| 24 | icacls <Directory> /deny *S-1-5-32-545:(DE,WD,AD,WEA,WA)
|
|---|
| 25 | icacls <Directory> /grant *S-1-5-11:(OI)(CI)(RX)
|
|---|
| 26 | icacls <Directory> /deny *S-1-5-11:(DE,WD,AD,WEA,WA)
|
|---|
| 27 | </pre>Note that these commands must be repeated for all parent directories (X:\Data and X:\Data\MyPrograms
|
|---|
| 28 | in this example).</p>
|
|---|
| 29 | </body>
|
|---|
| 30 |
|
|---|
| 31 | </topic>
|
|---|
