Is there a way to set ACLs for a service using MSI standard actions or is a custom action required? If this can only be done through a custom action, does someone have an existing CA that sets service ACLs that I could use?


No, there is no standard action to support this. The WiX toolset has custom action support for this. The CustomAction is very self-contained. The custom action you’ll be looking for is called SecureObj or Secure Objects.

Content credit also belongs to

  • Rob, Microsoft Dev. You can get other Rob insights about developing for Windows Installer from Rob's blog
  • Scott, Microsoft Dev.
[Author: Robert Flaming]
This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at