Software Deployment Question

MSI Error 1920 Insufficient Access Unable to Start Service

05/26/2005 61091 views

When installing my MSI file I am getting an MSI Error 1920 Access Denied unable to start service. The Startname field is left blank in the ServiceInstall table, which, according to the documentation means the LocalSystem account will be used. But this doesn't seem to be enough to do it. Any suggestions gratefully appreaciated.

0 Comments   [ + ] Show comments


Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

All Answers

What kind of service is it? Does it work when installed manually?

What's in the other columns of the ServiceInstall table?

Can you also post the following registry keys (and subkeys) from a working machine?

Answered 05/27/2005 by: WiseUser
Fourth Degree Brown Belt


The Service is IISADMIN. It does work when manually installed.

Here are the registry keys you asked for from a working machine:

"DisplayName"="IIS Admin"
"Description"="Allows administration of Web and FTP services through the Internet Information Services snap-in"
"FailureCommand"="\"C:\\WINDOWS\\System32\\iisreset.exe\" /fail=%1%"


Answered 05/29/2005 by: MSI_repackager
Orange Belt

I really would have to know what's in the other columns of your "ServiceInstall" to have any idea what might be wrong.
Answered 05/30/2005 by: WiseUser
Fourth Degree Brown Belt


Sorry for the delayed response. I have used a comma as the delimiter for each field. ServiceInstall Table is as follows:

W3SVC,W3SVC,World Wide Web Publishing,32,2,1,blank,IISADMIN[~][~],blank,blank,blank,inetinfo.exe_service,description(to long to write here).

IISADMIN,IISADMIN,IIS Admin,32,2,1,blank,RpcSs[~]SamSs[~][~],blank,blank,blank,inetinfo.exe_service,description(to long to write here).

SMTPSVC,SMTPSVC,Simple Mail Transfer Protocol,32,2,1,blank,EventLog[~]IISADMIN[~][~],blank,blank,blank,inetinfo.exe_service,description(to long to write here).

I have tried changing the ServiceType to 16 instead of 32 which is own process instead of shared without success. Also I have the Event field in the ServiceControl table set to 161 which equals Install Start = Yes and Uninstall Stop and Uninstall Delete equal to Yes. I have also tried combinations here to but without any success.

I am now looking at the AppID's in HKCR to see whether this might be related.

Please let me know if there is anything I should be changing here...

Answered 05/30/2005 by: MSI_repackager
Orange Belt

It all looks good to me.

I know this is a dumb question, but you do have permissions to start services?

Have you set any NTFS permissions using your package?

Any clues in the event log?

You could try this:

1) Export the service keys from the registry of a working PC into a ".reg" file - also export the "ENUM\ROOT\LEGACY_*" keys which you didn't post.

2) Export exactly the same keys from a "broken" PC (hopefully they'll exist at the time you get the 1920 error). I wonder if you could try to start the service manually from a command windows at this point too?

3) Use Windiff to compare the ".reg" files to find any differences between a "good" and a "bad" install.

You could also use the Sysinternals NTFileMon tool to look for "Access Denied" messages (laborious work).

Btw, you probably know this, but it's a bit "unusual" to repackage Microsoft services that are part of Windows.

Good luck!
Answered 05/31/2005 by: WiseUser
Fourth Degree Brown Belt


I know this is wandering from best practice, but my manager seems adamant that this will be packaged and thus I continue...

At the moment when the 1920 error occurs I go into Services and try starting the IIS Admin Service, I get the following error dialog

'Windows could not start the IIS Admin on Local Computer. Fore more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code -2147221164.' This is coupled with the following Event Log in the System Event Log: Event ID 7024

'The IIS Admin service terminated with a service-specific error 2147746132 (0x80040154)'

Can you tell me how to check whether I have set the right permissions in my package (NTFS particularly)? I have done a compare of keys (including Enum\Root\Legacy) on working and non-working machine and everything looks the same as far as I can see.

Thanks for your help with this btw, much appreciated :-)

Answered 05/31/2005 by: MSI_repackager
Orange Belt

My advise don't repackage these services!!
You may end up breaking up the OS.

I was in a similar situation and stood my ground not to repackage MSMQ!
Answered 05/31/2005 by: oofemioo
Blue Belt

I must admit that the event log entry doesn't tell me very much.

I take it you're installing the "SMTP" and "W3" services at the same time within the same package?

Have you tried removing all entries from the "ServiceControl" table?

Are you knowingly changing any permissions on anything - either through LockPermissions or Custom Action?
Answered 06/01/2005 by: WiseUser
Fourth Degree Brown Belt

Hi WiseUser,

I am installing all three services in the one package. Unfortunately they are all interlinked as I tried doing a snapshot of IIS without SMTP and W3 which failed.

One of the tests I did was taking everything out of the Service Control table. The MSI will install without the 1920 error, however the services are still unable to be started manually or automatically, showing the same event log errors and dialog errors upon restarting the machine.

I haven't set any custom actions (actually I don't know how to create custom actions yet) and I haven't set any file permissions or registry permissions in the MSI.

The alternative solution that I can see at this stage is placing the i386 directory from the CD-ROM onto a share which users can point to when accessing Add/Remove Windows Components.

Answered 06/01/2005 by: MSI_repackager
Orange Belt

As much as I hate to, I guess I'll have to admit defeat on this one![:(]

However, I do believe you'll be better off not repackaging these services.

Good luck!
Answered 06/01/2005 by: WiseUser
Fourth Degree Brown Belt


I think it is time to shelve this one and move on to something else.

Thanks for your advice WiseUser :-)

Answered 06/01/2005 by: MSI_repackager
Orange Belt

Hi WiseUser,

I know it's been a while, but I thought I'd report back and let you know I ended up ditching the MSI and followed the instructions I found on:

http://support.microsoft.com/?kbid=222444 (Using the Sysocmgr.exe tool)

I searched Google and found an IIS 6.0 answer file for this and just changed it to suit our requirements... works great, and problem solved!

Answered 06/22/2005 by: MSI_repackager
Orange Belt

Hi All

Also worth noting when you get this error 1920 is that ISS is not installed on most desktops as standard
It can be installed by an admin by going to add remove programs "Add/Remove Windows Components"
You can then set IIS to be installed by the OS

This will install the IISADMIN service as well as the W3SVC service so that your msi will now be able to start these services using the service control table
Answered 10/13/2006 by: Jack_Mcall
Yellow Belt

This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ