Hi,

How can I configure a service installation in the msi to run as non-system user (say a domain\user). I don't want to hardcode the password in the msi.

Thanks for your help,
Praveen
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Answers

0
The two main MSI-authoring tools (Wise and InstallShield) will have a UI to create and control services.

If you're editing tables directly, you need to add the relevant information to the 'ServiceInstall' and 'ServiceControl' tables, the former to install it and indicate which user account controls it and the latter to determine whether it stops/starts on install/uninstall. The Windows Installer Help (MSI.CHM) should have plenty of information on this.

I prefer to use a self-authored script via a Custom Action, because that gives me greater control. If, say, the service fails to start, I may want to perform some other action. The standard interface doesn't give that flexibility.
Answered 02/05/2008 by: VBScab
Red Belt

Please log in to comment
0
Thanks for the quick response.

To install the service from service install section- I need to specify the passsword in the "Login Password" tab. Unfortunately it's visible in plain text when someone edits the msi. I want to hide that.
Answered 02/05/2008 by: nvdpraveen
Orange Belt

Please log in to comment
0
I haven't tried, but I wonder if you could use a property defined in SecureCustomProperties there? IIRC, they're not stored in plain text...
Answered 02/05/2008 by: VBScab
Red Belt

Please log in to comment
0
An MSI is as cleartext as it can be except for ex. DLL custom action.
The SecureCustomProperties would just prevent the installing user to not being able to change the public property from the command line.

You have to come up with a crypted way of hiding the password text or create a DLL custom action to harden any from seeing this information withing the MSI.
Answered 02/05/2008 by: AngelD
Red Belt

Please log in to comment
0
Thanks for the response.

Finally I'm installing the service as a local system acount and then using a central script to change the service account information.
Answered 02/06/2008 by: nvdpraveen
Orange Belt

Please log in to comment
Answer this question or Comment on this question for clarity