ClickOnce deployment for restricted users

Question

From firsthand experience, it appears that ClickOnce only installs for the current user, and there is no option to install for all users. This is a problem because some users within the company need to use ClickOnce applications but do not have permissions to install applications (for security reasons).

So far, the only solution we have to this problem is to grant the user in question permission to install programs, let them install the ClickOnce program, and then revoke their privileges. It seems as if there should be a better solution for this problem.

Any suggestions?

Thanks.

Answer 1

ClickOnce should allow these users to install anyway. That's the point of ClickOnce: it allows restricted users to install your app. Otherwise you could just distribute an msi using group policy.

Answer 2

Maybe I'm wrong but I think ClickOnce is not a good solution for your use case. Clickonce deployement is a website exposing your application and ClickOnce will install a new version of the application if needed. If your user has access to the site the only thing who can stop him are the permissions requested by your application, or the asInvoker/ requireAdministrator/ highestAvailable elements of your manifeste.

Answer 3

You should seek an .MSI based installation to do this (Wise for windows installer, Install Shield, or use Visual Studio built in packager). ClickOnce is designed to install for and only for the current user, as the files are stored in the installed user's app directory.