| Feature | ClickOnce | Windows Installer |
| Automatic update<sup>1</sup> | Yes | Yes |
| Post-installation rollback<sup>2</sup> | Yes | No |
| Update from Web | Yes | No |
| Does not affect shared components or other applications | Yes | No |
| Security permissions granted | Grants only permissions necessary for the application (more safe) | Grants Full Trust by default (less safe) |
| Security permissions required | Internet or Intranet Zone (Full Trust for CD-ROM installation) | Administrator |
| Application and deployment manifest signing | Yes | No |
| Installation-time user interface | Single prompt | Multipart Wizard |
| Installation of assemblies on demand | Yes | No |
| Installation of shared files | No | Yes |
| Installation of drivers | No | Yes (with custom actions) |
| Installation to Global Assembly Cache | No | Yes |
| Installation for multiple users | No | Yes |
| Add application to Start menu | Yes | Yes |
| Add application to Startup group | No | Yes |
| Add application to Favorites menu | No | Yes |
| Register file types | No | Yes |
| Install time registry access<sup>3</sup> | Limited | Yes |
| Binary file patching | No | Yes |
| Application installation location | ClickOnce application cache | Program Files folder |
Notes
For more information, see Choosing a Deployment Strategy.
Figure: Publish tab of the application properties
Figure: Security tab of the application properties
Figure: ClickOnce Publish Wizard