As many of you are well aware, the SURunAs utility does not work on Windows Vista and Windows 7. Well I'm happy to let you know that this will change in the 8.5.3 release of Notes. Coding is still in progress so the updated feature will not be available in the code drop 2 release of Notes 8.5.3 that is coming soon. However it should be in the next drop after that one.
A high level synopsis of the new design:
The Lotus Notes installer will be modified to add a new Windows service during the installation. This new "Smart Upgrade Service" will run in the local system account, which has local administrative privileges and will provide a mechanism for Smart Upgrade to perform upgrades of Notes for users that do not have the capability themselves. Smart Upgrade will still use SURunAs to wrap the deployment package but will communicate with the SUService which will then validate the communicated information and perform the requested upgrade. Finally the SUService will communicate the results of the installation back to SURunAs which will then return the results back to SmartUpgrade. The communication between the client processes running in the user session and the service process running in the system sessions will be encrypted and validated to prevent unauthorized transactions.
And a picture of this new design:
Jeff Mitchell | 2 December 2010 10:56:11 AM ET | Littleton, MA | Comments (6)
Great news
Awsome Jeff. I can't wait to see the results. Looking forward to 8.5.3
But as far as I understand the new mechanism, to install Notes 8.5.3 and the new SU Service, one has to use a different/(none-Notes/Domino) Windows 7 compatible mechanism.
Only subsequent (post 8.5.3) releases are be able to leverage the new mechanism, right?
Because the new service is separate from Notes, you only need to get the SUService on a pre Notes 8.5.3 install and use the new SUSetRunAsWizard to generate a new SURunAs. Once the service is installed it doesn't matter what version of Notes is currently installed.
Is there a way to add services to PCs remotely? I thought I remember something like that....
This might be what you are looking for: How to Create and Start a Service on a Remote Computer By Using the Command-Line or a Script http://support.microsoft.com/kb/252340
hi, Jeff
what's the reason to keep using SURunAs if you have ability to run SU kit from local system account via SUService.
this way it'll be possible to create kits without additional steps, providing standard webkits to install on PC for users that has or not local admins rights.