- Timestamp:
- Apr 25, 2024 8:19:32 AM (9 months ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/doc/manual/en_US/dita/topics/install-win-installdir-req.dita
r104409 r104427 2 2 <!DOCTYPE topic PUBLIC "-//OASIS//DTD DITA Topic//EN" "topic.dtd"> 3 3 <topic xml:lang="en-us" id="install-win-installdir-req"> 4 <title>Windows installation directory security requirements</title>4 <title>Windows Installation Directory Security Requirements</title> 5 5 6 6 <body> 7 <p> The installation directory on Windows hosts must meet certain security requirements, in 8 order to be accepted by the Windows installer. </p> 7 9 <p> 8 The installation directory on Windows hosts must meet certain security 9 requirements in order to get accepted by the Windows installer. 10 This also applies for upgrades of <ph conkeyref="vbox-conkeyref-phrases/product-name"/>. 10 11 </p> 11 <p> 12 This also includes upgrades of <ph conkeyref="vbox-conkeyref-phrases/product-name"/>. 13 </p> 14 <p> 15 For example, when installing <ph conkeyref="vbox-conkeyref-phrases/product-name"/> into a custom location at 16 X:\Data\MyPrograms\<ph conkeyref="vbox-conkeyref-phrases/product-name"/>, all parent directories of this path 17 (namely X:\Data and X:\Data\MyPrograms) have to meet the following 18 Discretionary Access Control List (DACL): 19 <pre xml:space="preserve"> 12 <p> For example, when installing <ph conkeyref="vbox-conkeyref-phrases/product-name"/> into a 13 custom location at X:\Data\MyPrograms\<ph conkeyref="vbox-conkeyref-phrases/product-name"/>, 14 all parent directories of this path (namely X:\Data and X:\Data\MyPrograms) must meet the 15 following Discretionary Access Control List (DACL). <pre xml:space="preserve"> 20 16 Users S-1-5-32-545:(OI)(CI)(RX) 21 17 Users S-1-5-32-545:(DE,WD,AD,WEA,WA) 22 18 Authenticated Users S-1-5-11:(OI)(CI)(RX) 23 19 Authenticated Users S-1-5-11:(DE,WD,AD,WEA,WA) 24 </pre> 25 Also, directory inheritance has to be disabled for all parent directories. 26 </p> 27 <p> 28 To modify a certain directory meeting the above requirments, one can use 29 the Windows tool <pre xml:space="preserve">icacls</pre> on the command line: 30 <pre xml:space="preserve"> 20 </pre> Directory inheritance must also be disabled for all parent directories. </p> 21 <p> You can use the <codeph>icacls</codeph> Windows command line tool to modify a directory to 22 meet the security requirements. For example: <pre xml:space="preserve"> 31 23 icacls <Directory> /reset /t /c 32 24 icacls <Directory> /inheritance:d /t /c … … 35 27 icacls <Directory> /grant *S-1-5-11:(OI)(CI)(RX) 36 28 icacls <Directory> /deny *S-1-5-11:(DE,WD,AD,WEA,WA) 37 </pre> 38 Note that the above commands have to be repeated for all parent directories 39 (X:\Data and X:\Data\MyPrograms in the example above). 40 </p> 29 </pre> Note that these commands must be repeated for all parent directories (X:\Data and 30 X:\Data\MyPrograms in this example).</p> 41 31 </body> 42 32
Note:
See TracChangeset
for help on using the changeset viewer.
