Conflicting Permission Tables
AdminStudio 2022 | 23.0 | Application Manager
Note:This test is not applicable to App-V packages.
For this operating system compatibility test, the Windows Installer database is scanned for the usage of the LockPermissions table in conjunction with the MsiLockPermissionsEx table.
Test Group/Test Category
| • | 0328—Operating System Compatibility/Windows 8.1 (32-Bit) |
| • | 0428—Operating System Compatibility/Windows 8.1 (64-Bit) |
| • | 2828—Operating System Compatibility/Windows 10-1809 (and 2019 LTSC) (32-Bit) |
| • | 5228—Operating System Compatibility/Windows 10-1909 (32-Bit) |
| • | 5428—Operating System Compatibility/Windows 10-2004 (32-Bit) |
| • | 5628—Operating System Compatibility/Windows 10-20H2 (32-Bit) |
| • | 5828—Operating System Compatibility/Windows 10-21H1 (32-Bit) |
| • | 7028—Operating System Compatibility/Windows 10-21H2 (32-Bit) |
| • | 2928—Operating System Compatibility/Windows 10-1809 (and 2019 LTSC) (64-Bit) |
| • | 5328—Operating System Compatibility/Windows 10-1909 (64-Bit) |
| • | 5528—Operating System Compatibility/Windows 10-2004 (64-Bit) |
| • | 5728—Operating System Compatibility/Windows 10-20H2 (64-Bit) |
| • | 5928—Operating System Compatibility/Windows 10-21H1 (64-Bit) |
| • | 7128—Operating System Compatibility/Windows 10-21H2 (64-Bit) |
| • | 6728—Operating System Compatibility/Windows 11-21H2 (64-Bit) |
| • | 0528—Operating System Compatibility/Windows Server 2012 |
| • | 0628—Operating System Compatibility/Windows Server 2016 |
| • | 1028—Operating System Compatibility/Windows Server 2019 |
Severity
Warning
Message
This Windows Installer database contains both LockPermissions and MsiLockPermissionsEx tables (Table: LockPermissions, MsiLockPermissionsEx).
Background
Since Windows Installer 5 (introduced with Windows 7), the MsiLockPermissionsEx table should replace the use of the LockPermissions table for managing access permissions. The extended functionality provided by the MsiLockPermissionsEx table enables a package to secure Windows Services, files, folders, and registry keys. Beginning with Windows Installer 5, the installation fails with error message 1941 if the Windows Installer package contains both a LockPermissions table and a MsiLockPermissionsEx table. Existing Windows Installer packages that contain only the LockPermissions table can still be installed using Windows Installer 5.
Note:Windows Installer 4.5 and earlier ignore the MsiLockPermissionsEx table.
Resolution
The following resolutions are available.
Manual Fix
If the LockPermissions and MsiLockPermissionsEx tables are not empty, all entries from LockPermissions table should be migrated to the MsiLockPermissionsEx table, and the LockPermissions table should be removed. Otherwise, at least one of those empty tables (either LockPermissions or MsiLockPermissionsEx) should be removed.
Basic Auto Fix
No resolution is available.
Advanced Auto Fix
The conflict between the LockPermissions and the MsiLockPermissionsEx table is resolved in a Windows Installer transform. If either one of the tables is empty, it is removed. If both tables are populated, entries from the LockPermissions table are converted to the MsiLockPermissionsEx table, and afterwards the empty LockPermissions table is removed.
This fix is enabled by default.
See Also