Hi Tom,

Thank you for your kind words :-)

"highestAvailable" is just the highest available permission; but in most cases (99%), the user is a Standard User, so that's what is the highest and the installer runs non-elevated (means: no write access to any protected area). A "per-machine" installer always needs administrator execution level privileges (to write to the Program Files folder tree, write to the HKEY_LOCAL_MACHINE registry key, register OCX, etc.).

"highestAvailable" will elevate if the current user is an Administrator. When a Standard User runs the installer, no UAC dialog is shown and the process runs with the standard token. When an admin user runs it, the UAC dialog is shown and setup will run elevated.

My advice is to never use "highestAvailable" for an installer.

Friedrich