How to handle updates without elevation
This article is only for projects that already have "Per machine only (fails if the user is not administrator)" installation type, set from the Install Parameters.
To configure the Updater to install all updates without elevation follow these steps:
- Configure the Updater as described in Using the Updater tutorial.
- Enable the option "Install support service" from the Updater page; this will add a service with the same name as the Updater in the Services Page, which will be used to bypass administrative rights.
- Enable each update's "Install update without elevation" option from the Updates Configuration Project > Update Properties Tab.
The service will start automatically when the Updater is launched on the target machine.
Make sure the service name is unique, and you don’t change it afterward. The service name must match the name of the Updater file.
All MSI updates will be executed silently with the /qn command switch. If you plan to use the Updater with custom EXE installers, you must set each update's "Command Line" field with the proprietary silent command switch from its Update Properties Tab in your updates configuration project. If not, the UI will not be shown because the Updater runs as a service.
As a result, your application's updates can be handled by any user(admin or standard) without the common UAC elevation.
If the Updater is digitally signed then all update packages must be signed using the same certificate, this is the recommended approach.