title: Mark MSI so it has to be run as elevated Administrator account
body: <p>I have a CustomAction as part of an MSI.</p>
  
  <p>It MUST run as a domain account that is also a member of the local Administrators account.</p>
  
  <p>It can't use the NoImpersonate flag to run the custom action as NT Authority\System as it will not then get access to network resources.</p>
  
  <p>On Vista/2008 with UAC enabled if NoImpersonate is off then it will run as the executing user but with the <strong>unprivileged</strong> token and not get access to local resources such as .installState. <a href="http://technet.microsoft.com/en-us/library/cc709628.aspx" rel="noreferrer">See UAC Architecture</a></p>
  
  <p>Anyone know of a way to either</p>
  
  <ul>
  <li><p>Force the MSI to run with the elevated token in the same way that running from an elevated command prompt does?</p></li>
  <li><p>Force the CustomAction to run elevated (requireAdministrator in manifest doesn't appear to work)?</p></li>
  <li><p>Work out if UAC is enabled and if it hasn't been ran elevated and if so warn or cancel the installation?</p></li>
  </ul>