Does Windows Installer natively support setting service ACLs from an MSI?
Question
Is there a way to set ACLs for a service using MSI standard actions or is a custom action required? If this can only be done through a custom action, does someone have an existing CA that sets service ACLs that I could use?
Answer
No, there is no standard action to support this. The WiX toolset has custom action support for this. The CustomAction is very self-contained. The custom action you’ll be looking for is called SecureObj or Secure Objects.
Content credit also belongs to
- Rob, Microsoft Dev. You can get other Rob insights about developing for Windows Installer from Rob's blog
- Scott, Microsoft Dev.