GeneFC wrote: ↑Sun Oct 17, 2021 3:41 pm
There is some misunderstanding here.
A typical user on a single-user computer will have two similar UserIDs. If one looks at a permissions screen for a file or folder there will usually be at least two entries.
Administrators (Account-ABC\Administrators)
and
Users (Account-ABC\Users)
Correct, however for an "average" Windows users they do not realize this.
When you fire up Win for the first time there is a single account that has admin privileges. The "user" is prompted to enter a name for that account, call it sgrogan for example.
Now I have a single account called sgrogan, that happens to have admin privileges.
When you start the computer this is the only user available.
When you start the computer your in this account. It runs as a user, but has admin privileges.
Try saving a file to C:\Program Files, you get a pop-up that says, this requires admin. Because this account has admin rights you can click continue.
Try saving another file, you get another pop-up. i.e. you must grant admin for each transaction.
Now, if you start the installer, NOT run as admin. You have user permissions. If you choose install for all users, NCIS will elevate permissions to admin. We certainly don't want a pop-up for every file copied, so NCIS leaves the permissions elevated, now its as if we "ran as administrator"
So now if you start FreeCAD it runs as admin because the privileges are already elevated.
The OP wants a behavior where the installer de-elevates permissions after a group of transactions (installing all the files, thumbnails etc)
Based on @chennes earlier post this requires an add-on for NCIS.
So as GeneFC states its philosophical.
1- Leave as is, this is the default behavior of the NCIS software we use to make the installer.
2- Use an add-on to "protect the user from themselves"
3- Exit the installer after performing the tasks that require admin, i.e. don't allow FreeCAD start from within the installer.