I'm about to run CI service as a custom user account. The issue I faced is that Windows Installer service is allowed to run only by Administrators, INTERACTIVE/SERVICE accounts, or TrustedInstaller: https://sourceforge.net/p/wix/mailman/message/24361610/

Is there any way to add a specific user as allowed to run the service? (Tried with Process Explorer, but on Windows it seem you are not an Administrator enough to change this service permissions ...)

I really would like to not set this account as an Administrator - as it's workaround for the issue, but breaks the security.


No, it is not directly possible. Software installation is a Admin Task.

Depending on the software, you need write permissions in various locations where users may not have access.

There are workarounds like installing Access Director, which can elevate users rights for a limited amount of time.

You can also use more advanced features like Windows installer advertisement

| improve this answer | |
  • The CI Current task is not to install the software, but to verify the generated msi packages. So I'm not sure if such technique will do the job? – Mikołaj Milej Feb 5 at 12:12
  • If you simply need to verify a MSI why not just CRC-it (something like MD5) ? – Overmind Feb 5 at 12:30
  • The verification process is not simply the CRC checking: wixtoolset.org/documentation/error217 – Mikołaj Milej Feb 6 at 7:04
  • That seems to be a package related problem. Should of been fixed officially. – Overmind Feb 6 at 7:15
  • What exact package do you mean? – Mikołaj Milej Feb 6 at 7:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.