5.1

When ThinApp builds an application, ThinApp assumes that any specified group names are valid and
converts the names to SID values. ThinApp can resolve group ownership at runtime using cached
credentials. You can continue to authenticate laptop users even when they are offline. If the user does not
have access to run the package, you can customize the AccessDeniedMsg parameter to instruct the user.
You can place the PermittedGroups parameter under the [BuildOptions] heading to affect the package, or
under the [<application>.exe] heading to affect a specific application. The [<application>.exe] value
overrides the default [BuildOptions] value for the specific application.
Example: Specifying a List of Active Directory Members
You can modify the PermittedGroups parameter to specify a list of Active Directory user group names,
separated by semicolons. The parameters in the [BuildOptions] section set global settings for the entire
project.
[BuildOptions]
PermittedGroups=Administrator;OfficeUsers
AccessDeniedMsg=You do not have permission to execute this application, please call support @
1-800-822-2992
Example: Overwriting Global PermittedGroups Setting
You can specify a user group setting for a specific application that overwrites the global PermittedGroups
setting.
[App1.exe]
PermittedGroups=Guest
AccessDeniedMsg=You do not have permission to execute this application, please call support @
1-800-822-2992
Example: Inheriting the Global PermittedGroups Setting
If you do not specify a PermittedGroups setting for an application, the application inherits the global
PermittedGroups value in the [BuildOptions] section.
[App2.exe]
...
Example: Mixing Group Names and SID Strings
You can mix group names and SID strings in the same entry for the PermittedGroups parameter.
PermittedGroups=S-1-5-32-544;Office Users
UACRequestedPrivilegesLevel Parameter
The UACRequestedPrivilegesLevel parameter specifies privileges for programs requiring User Account
Control (UAC) information. This parameter affects users working on Windows Vista or later operating
system versions.
You can use the following values to specify privileges:
n
asInvoker
This value uses the profile in Vista.
n
requireAdministrator
ThinApp Package.ini Parameters Reference Guide
30 VMware, Inc.