Does Windows Installer natively support setting service ACLs from an MSI?



Question

Is there a way to set ACLs for a service using MSI standard actions or is a custom action required? If this can only be done through a custom action, does someone have an existing CA that sets service ACLs that I could use?

Answer


No, there is no standard action to support this. The WiX toolset has custom action support for this. The CustomAction is very self-contained. The custom action you’ll be looking for is called SecureObj or Secure Objects.


Content credit also belongs to




  • Rob, Microsoft Dev. You can get other Rob insights about developing for Windows Installer from Rob’s blog

  • Scott, Microsoft Dev.



[Author: Robert Flaming]


This posting is provided “AS IS” with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm.

Comments (1)

  1. Dan Gordon says:

    Is there a way to completely remove IE and reinstall a completely new version?

    Using the add/remove service from control-panel is not performing an actual remove.