Thank you for the quick response. I have tested the fix for V11 and it worked.
Thank you
Michael
From: Sandeep Thakkar <sandeep.thakkar@enterprisedb.com> Sent: Monday, 20 April 2020 7:11 PM To: m_fysh@hotmail.com <m_fysh@hotmail.com>; pgsql-bugs@lists.postgresql.org <pgsql-bugs@lists.postgresql.org> Subject: Re: BUG #16364: ICACLS error when installing under system context "NT AUTHORITY\SYSTEM" ie installing with SCCM
Hi,
This is a duplicate of BUG #16341.
We have generated a "test" installer with the fix for v11 and uploaded it here. Could you please verify if it fixes the issue? If it does, then we would release an update for all affected versions. Thank you.
ICACLS error when installing under system context "NT AUTHORITY\SYSTEM" ie installing with SCCM
System context has no user profile, the installer tries to set security permissions to domain\hostname The first call to icacls removes inheritance C:\WINDOWS\System32\icacls "C:\Windows\Temp/postgresql_installer_9283e94fc0" /inheritance:r
The next call adds permissions for domain\hostname$ (this should be "NT AUTHORITY\SYSTEM" or "hostname\Administrators") Executing C:\WINDOWS\System32\icacls "C:\Windows\Temp/postgresql_installer_9283e94fc0" /T /Q /grant "COR\Txxx6767$:(OI)(CI)F"
At that point the permissions on the folder have changed but the installer no longer has access to the folder contents So the next step fails Error running C:\WINDOWS\System32\icacls "C:\Windows\Temp/postgresql_installer_9283e94fc0" /T /Q /grant "CORP\TM10336767$:(OI)(CI)F": C:\Windows\Temp/postgresql_installer_9283e94fc0\*: Access is denied.
To reproduce the error use the Sysinternals tool Open a cmd windows as admin the run psexec.exe -s -i cmd This will open a new CMD window in System context. install PostgreSQL
When installing as just and ADMIN user (with profile) Executing icacls "C:\Users\USER_adm\AppData\Local\Temp/postgresql_installer_57a6af5619" /inheritance:r the user is still the owner of the folder so can still make changes to it.
Note you are now adding the current user domain\user in the next call to icacls.exe Executing icacls "C:\Users\USER_adm\AppData\Local\Temp/postgresql_installer_57a6af5619" /T /Q /grant "COR\USER_adm:(OI)(CI)F" So an Admin User install will work But a System install will not.
