| 1 | <?xml version='1.0' encoding='UTF-8'?>
|
|---|
| 2 | <!DOCTYPE topic PUBLIC "-//OASIS//DTD DITA Topic//EN" "topic.dtd">
|
|---|
| 3 | <topic xml:lang="en-us" id="install-win-installdir-req">
|
|---|
| 4 | <title>Windows Installation Directory Security Requirements</title>
|
|---|
| 5 |
|
|---|
| 6 | <body>
|
|---|
| 7 | <p> The installation directory on Windows hosts must meet certain security requirements, in
|
|---|
| 8 | order to be accepted by the Windows installer. </p>
|
|---|
| 9 | <p>
|
|---|
| 10 | This also applies for upgrades of <ph conkeyref="vbox-conkeyref-phrases/product-name"/>.
|
|---|
| 11 | </p>
|
|---|
| 12 | <p> For example, when installing <ph conkeyref="vbox-conkeyref-phrases/product-name"/> into a
|
|---|
| 13 | custom location at X:\Data\MyPrograms\<ph conkeyref="vbox-conkeyref-phrases/product-name"/>,
|
|---|
| 14 | all parent directories of this path (namely X:\Data and X:\Data\MyPrograms) must meet the
|
|---|
| 15 | following Discretionary Access Control List (DACL). <pre xml:space="preserve">
|
|---|
| 16 | Users S-1-5-32-545:(OI)(CI)(RX)
|
|---|
| 17 | Users S-1-5-32-545:(DE,WD,AD,WEA,WA)
|
|---|
| 18 | Authenticated Users S-1-5-11:(OI)(CI)(RX)
|
|---|
| 19 | Authenticated Users S-1-5-11:(DE,WD,AD,WEA,WA)
|
|---|
| 20 | </pre> Directory inheritance must also be disabled for all parent directories. </p>
|
|---|
| 21 | <p> You can use the <codeph>icacls</codeph> Windows command line tool to modify a directory to
|
|---|
| 22 | meet the security requirements. For example: <pre xml:space="preserve">
|
|---|
| 23 | icacls <Directory> /reset /t /c
|
|---|
| 24 | icacls <Directory> /inheritance:d /t /c
|
|---|
| 25 | icacls <Directory> /grant *S-1-5-32-545:(OI)(CI)(RX)
|
|---|
| 26 | icacls <Directory> /deny *S-1-5-32-545:(DE,WD,AD,WEA,WA)
|
|---|
| 27 | icacls <Directory> /grant *S-1-5-11:(OI)(CI)(RX)
|
|---|
| 28 | icacls <Directory> /deny *S-1-5-11:(DE,WD,AD,WEA,WA)
|
|---|
| 29 | </pre> Note that these commands must be repeated for all parent directories (X:\Data and
|
|---|
| 30 | X:\Data\MyPrograms in this example).</p>
|
|---|
| 31 | </body>
|
|---|
| 32 |
|
|---|
| 33 | </topic>
|
|---|
