I'm about to run CI service as a custom user account. The issue I faced is that Windows Installer service is allowed to run only by Administrators, INTERACTIVE/SERVICE accounts, or TrustedInstaller: https://sourceforge.net/p/wix/mailman/message/24361610/

Is there any way to add a specific user as allowed to run the service? (Tried with Process Explorer, but on Windows it seem you are not an Administrator enough to change this service permissions ...)

I really would like to not set this account as an Administrator - as it's workaround for the issue, but breaks the security.


No, it is not directly possible. Software installation is a Admin Task.

Depending on the software, you need write permissions in various locations where users may not have access.

There are workarounds like installing Access Director, which can elevate users rights for a limited amount of time.

You can also use more advanced features like Windows installer advertisement

  • The CI Current task is not to install the software, but to verify the generated msi packages. So I'm not sure if such technique will do the job? Feb 5 '20 at 12:12
  • If you simply need to verify a MSI why not just CRC-it (something like MD5) ?
    – Overmind
    Feb 5 '20 at 12:30
  • The verification process is not simply the CRC checking: wixtoolset.org/documentation/error217 Feb 6 '20 at 7:04
  • That seems to be a package related problem. Should of been fixed officially.
    – Overmind
    Feb 6 '20 at 7:15
  • What exact package do you mean? Feb 6 '20 at 7:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.