+ Post New Thread
Results 1 to 12 of 12
Windows Vista Thread, Truecrypt with Vista? in Technical; Is anyone using Truecrypt with Vista please? If so how is that going? Thanks...
  1. #1

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,846
    Thank Post
    877
    Thanked 1,680 Times in 1,460 Posts
    Blog Entries
    12
    Rep Power
    444

    Truecrypt with Vista?

    Is anyone using Truecrypt with Vista please?

    If so how is that going?

    Thanks

  2. #2

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    Seems to work fine, though I've only tried in in container mode.

    I only wish that there was an MSI for it. I've tried to repackage it myself but the COM registration that sets up the UAC exceptions don't work, so even once the kernel driver is installed it still requires a UAC elevation (on XP once the driver is installed you don't need admin priveleges). If you install using the official .exe installer it works fine, but that's not a great option for 300+ workstations.

  3. #3

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,391
    Thank Post
    368
    Thanked 637 Times in 519 Posts
    Rep Power
    158
    @AngryTechnician
    Make a blank MSI that installs it then.

  4. #4

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,726
    Thank Post
    3,248
    Thanked 1,049 Times in 971 Posts
    Rep Power
    364
    Quote Originally Posted by matt40k View Post
    @AngryTechnician
    Make a blank MSI that installs it then.
    being noob with MSI's in terms of creating them and not having used vista - how would you create a blank one to include it changing the correct COM registrations as well as ensuring it runs with elevated permissions to allow them to run correctly in relation to truecrypt ?

  5. #5

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,391
    Thank Post
    368
    Thanked 637 Times in 519 Posts
    Rep Power
    158
    a "blank" msi will run the .exe. As it's deployed via AD it should have all the correct rights to run. It SHOULD work.

  6. #6

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    I refuse to use MSIs as a wrapper because it's dirty and wrong.

    It also seems to malfunction a lot. Adobe use the same method for the MSIs for Flash Player and that deployment goes wrong more than every other deployment on our system combined.

  7. #7

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,391
    Thank Post
    368
    Thanked 637 Times in 519 Posts
    Rep Power
    158
    Would argue that. Still, I've only just started using it, I prefer SMS. Could you provide any more details?

  8. #8

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    It may just be the way Adobe have done it, but we frequently come across machines where the MSI has deployed but Flash simply doesn't work because the wrapped .exe has thrown an error that Windows Installer can't detect, so never reports.

    Secondly, we've been seeing a lot of errors such as "Error 2753. The File 'FP_AX_MSI_INSTALLER.exe' is not marked for installation." both when deploying and then subsequently attempting to remove the deployment. We've had to use Windows Installer Cleanup Tool to remove these, and that makes AngryTechnician cry.

    Thirdly, with any wrapper MSI, you have to be very careful in ensuring the wrapped .exe will never EVER display a UI when called via it's custom action. I've had problems with Flash (back in the v8 days) and Java Runtime (very recently) where they have popped up modal dialogue boxes during the deployment - which of course are in session 0 and the user cannot interact with them, so the managed software install simply hangs until you remotely kill whatever process is holding it up.

    All in all I've had more bad experiences with products installed this way than good ones, so I'm very loathe to go down that route myself.

  9. #9

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,391
    Thank Post
    368
    Thanked 637 Times in 519 Posts
    Rep Power
    158
    Yer, only work with good documentation and a well written msi.

    I remember, Adobe (CS3) is a bit of an arse to do

    Main problem I had was when you have to deploy stuff during the day and they would plug the network cable mid way though (that's SMS stuff).

    Out of interest, have you figured out away to turn off auto updates (and deploying them manually)?

    EDIT:
    Adobe Reader: MSI - easy - requires registration with Adobe
    Adobe Flash : MSI - easy - requires registration with Adobe
    Adobe Shockwave - easy - switch /s off hand.
    Last edited by matt40k; 16th March 2009 at 03:47 PM.

  10. #10

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    Quote Originally Posted by matt40k View Post
    Adobe Reader: MSI - easy - requires registration with Adobe
    Adobe Flash : MSI - easy - requires registration with Adobe
    Adobe Shockwave - easy - switch /s off hand.
    Oh I use those - they are the ones that go wrong! Adobe Reader isn't even a wrapper, it's a native MSI, but it still uses shonky custom actions that go wrong, resulting in about 5% of our machines throwing "Internal Error 2753.Updater.api_NON_OPT" every time we roll out as new version of Reader and requiring a manual reinstall.

    Not that I'm bitter about Adobe not being able to write working installers...

    As for disabling auto-updates, I used this method and deployed the file they describe using Group Policy Preferences
    Last edited by AngryTechnician; 16th March 2009 at 03:57 PM. Reason: Adobe Reader errors

  11. Thanks to AngryTechnician from:

    matt40k (16th March 2009)

  12. #11

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    Also, apologies to FM-GM for going horribly off-topic!

  13. #12

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,846
    Thank Post
    877
    Thanked 1,680 Times in 1,460 Posts
    Blog Entries
    12
    Rep Power
    444
    its ok lol

SHARE:
+ Post New Thread

Similar Threads

  1. Truecrypt Container Mode
    By elsiegee40 in forum How do you do....it?
    Replies: 74
    Last Post: 1st July 2011, 09:42 AM
  2. [Gentoo] truecrypt on gentoo issue
    By RabbieBurns in forum *nix
    Replies: 10
    Last Post: 7th April 2009, 11:33 PM
  3. YATQ (Yet Another Truecrypt Query)
    By WithoutMotive in forum How do you do....it?
    Replies: 0
    Last Post: 22nd January 2009, 10:47 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •