1

I'm currently planning an installation and update scenario, using MSIs created using Wix. Initial installation will include third-party drivers as merge modules, which will require elevated permissions.

We want to automate software updates as much as possible, so will make updated MSI packages available on a regular basis. These will be downloaded in the background and installed the next time the user opens the application. We will implement processes to ensure changes to the driver modules will not be included in automatic updates.

Will Windows Installer execute these merge modules if they are not changed? What impact will this have on the overall installer? Would I be better off creating a separate MSI for these drivers, to isolate them completely from the core application package?

pixelbadger
  • 1,556
  • 9
  • 24

1 Answers1

3

Here's some background to help clear things up. Merge modules are not "executed". In fact, once you build an installer they don't exist anymore. A merge module is merely a database containing MSI table data that gets merged into your MSI at build time. Think of it as an encapsulation of a collection of components and related metadata. It's like a C/C++ .LIB file that is statically linked inside an EXE.

So if you have components ( from an MSI or from an MSM ) that require elevated permissions to install then the final MSI requires elevated permissions to intall.

I've done this autoupdate process in the past. You want that process to have elevated rights and after it downloads the MSI "advertise" it as a managed per-machine (what I call "blessed" MSI ). This is done using the msiexec /jm foo.msi command. Then signal a user side process to install the MSI. If authored correctly the MSI will auto elevate without ever exposing admin rights to the user.

Christopher Painter
  • 54,556
  • 6
  • 63
  • 100
  • Thanks, this has given me a far better idea of what I need to do. To clarify, when you say I need a 'process' with elevated rights, I'll need something automated, like a Windows service, on each machine? – pixelbadger Jun 18 '14 at 10:28
  • Yes. The dev team I worked with created a windows service running as SYSTEM that used a library called wuw4 (http://www.powerprogrammer.co.uk/helpfile/Software%20Update%20Wizard/wuwdll.htm) They used this as the framework to create that workflow and I provided the security model understanding and steps needed to advertise the MSI and install the MSI as well as certain standards in the MSI that had to be followed for the automatic elevation to work correctly. ( Standard MSI best practices they were not aware of.) – Christopher Painter Jun 18 '14 at 11:10