Does Windows Installer natively support setting service ACLs from an MSI?

  • Article

Question

Is there a way to set ACLs for a service using MSI standard actions or is a custom action required? If this can only be done through a custom action, does someone have an existing CA that sets service ACLs that I could use?

Answer

No, there is no standard action to support this. The WiX toolset has custom action support for this. The CustomAction is very self-contained. The custom action you’ll be looking for is called SecureObj or Secure Objects.

Content credit also belongs to

  • Rob, Microsoft Dev. You can get other Rob insights about developing for Windows Installer from Rob's blog
  • Scott, Microsoft Dev.

[Author: Robert Flaming]

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at https://www.microsoft.com/info/cpyright.htm.