Network Installation

The network installation needs a shared folder on the server for the licence file - for details see Network Licence - how it works. A 'Server' is not necessary. The shared folder could also be on an external hardware drive like NAS drive.

Necessary Rights

During Installation

•	Right to register a DLL

During Runtime of the Application

•	read and write permission to the licence file on the server

•	read and write permission to the registry (hkey_current_user)

If Licence Protector is used within a .NET server application, check if the .NET server user has the necessary rights.

Installation of the DLL

The installation has to be done in administrator mode. A user with a standard account will automatically be prompted to provide administrator credentials.

You should copy the licprotectorxy.dll to the \windows\system32 folder although it could also be installed in your program directory. As each DLL version of Licence Protector has an own ProgID, multiple different versions can be installed on the same machine.

If an installation tool like Wise or Install Shield is used, the registration of the DLL is done automatically by these tools. If you copy the DLL manually with your program, you have to register the DLL manually - use c:\windows\system32\regsvr32.exe ....\pathname\LicprotectorEasyGo251.dll.

If you installer has problems registering a DLL, add a shell execute command in the installer which invokes the regsvr32.exe like Execute "c:\windows\system32\regsvr32.exe" " ....\pathname\LicprotectorEasyGo251.dll"

To register the DLL you need admin rights. If you would use regsvr32 in the DOS prompt or file explorer as a standard user, you get the error 0×80070005 meaning access “Access Denied. To manually register the DLL in Vista

•	right click on “Command Prompt” in Accessories and click “Run as Administrator”

•	run “regsvr32 ....\pathname\LicprotectorEasyGo251.dll” in the command window

Vista and MSI files

Some installers generate a message HRESULT -2147220472 or -2147023898. This is due to missing rights during installation. Use regsvr32.exe to register the DLL. For background information see Altiris Forum post for Vista Problem.

Installation of the licence file

Each user needs a read and write access to the licence file. There is no special consideration for Vista.

Copy the licence file to a folder on the server and assign the licence file a read and write permission for all users.

If you want to change the permission with an installer see below.

Some installers have built in options to change rights on folders. You can not use the standard Windows tool cacls.exe or icacls (Vista) because you have to address the user / group name you want to change in the language of the operation system - e.g. 'users' or 'Benutzer'.

There is a tool SetAcl.exe which allows using SID to change the permission. The tool can be downloaded here: http://setacl.sourceforge.net/html/examples.html . Documentation for the SID can be found here (only German): http://www.grurili.de/index.html?/Grundlagen/WellKnown_SIDs.htm

Your installer could use the following sequence

•	Copy setacl.exe to the installation directory

•	Execute Setacl.exe e.g. "maindir\SetAcl.exe" -on "maindir" -ot file -actn ace -ace "n:S-1-5-32-545;p:full;s:y" - This will set full rights to the group users. The SID S-1-5-32-545 is used instead of the name users (note: maindir is the folder name like c:\ProgramData\yourcompany name\appname)

•	Delete setacl.exe

Sign your Installer file

Although you could deliver an unsigned installer file, we recommend adding your digital signature. You can buy a code-signing certificate from one of the accredited providers like www.verisign.com, www.thawte or www.comodo.com.

With the digital signed installer file your users do not get warning messages when they download the file or start the file.

First check your installation tool if it supports to add a digital signature. As installers often add their own CRC checks a digital signature would destroy the installer file. Therefore the installer tool has to add the signature first before the CRC check is added.