My understanding is that validation is usually better left to the application (on first launch) than installation. Having said that, there's a broad spectrum of common practices; starting with simple validation, for example, where you call AskText or SdShowDlgEdit1 and perform validation on what the user typed (see the sample project Example Custom Password Dialog for one approach)...
