Does Windows Installer natively support setting service ACLs from an MSI?


Is there a way to set ACLs for a service using MSI standard actions or is a custom action required? If this can only be done through a custom action, does someone have an existing CA that sets service ACLs that I could use?


No, there is no standard action to support this. The WiX toolset has custom action support for this. The CustomAction is very self-contained. The custom action you’ll be looking for is called SecureObj or Secure Objects.

Content credit also belongs to

  • Rob, Microsoft Dev. You can get other Rob insights about developing for Windows Installer from Rob’s blog

  • Scott, Microsoft Dev.

[Author: Robert Flaming]

This posting is provided “AS IS” with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at

Comments (1)

  1. Dan Gordon says:

    Is there a way to completely remove IE and reinstall a completely new version?

    Using the add/remove service from control-panel is not performing an actual remove.