Error 1923
Hi all,
I've made a MSI (with AdvancedInstaller 3.9) that installs a service and nothing else. The files install fine, but the installer gives the 1923 error which says I don't have privilege to install services.
"Service '[2]' ([3]) could not be installed. Verify that you have sufficient privileges to install system services."
The installation is performed as Administrator, and I've also tried as a user with admin rights. Both failed. This happens on win2000 and win2003, but it's fine on XP.
It's a real mystery as I have tested this same package previously with no trouble. The only thing I can think of is that there has been a security update from MS between the two install time.
Any clues would be most appreciated. Thanks.
Wing
I've made a MSI (with AdvancedInstaller 3.9) that installs a service and nothing else. The files install fine, but the installer gives the 1923 error which says I don't have privilege to install services.
"Service '[2]' ([3]) could not be installed. Verify that you have sufficient privileges to install system services."
The installation is performed as Administrator, and I've also tried as a user with admin rights. Both failed. This happens on win2000 and win2003, but it's fine on XP.
It's a real mystery as I have tested this same package previously with no trouble. The only thing I can think of is that there has been a security update from MS between the two install time.
Any clues would be most appreciated. Thanks.
Wing
0 Comments
[ + ] Show comments
Answers (16)
Please log in to answer
Posted by:
brenthunter2005
18 years ago
Posted by:
Wing
18 years ago
Posted by:
brenthunter2005
18 years ago
Posted by:
dm1
18 years ago
Posted by:
brenthunter2005
18 years ago
Posted by:
dm1
18 years ago
Posted by:
brenthunter2005
18 years ago
I agree that your ServiceInstall table appears correct.
The way I troubleshoot these incidents is to install the service manually (at the point when the MSI fails) using a Resource Kit utility called INSTSRV.EXE.
Install the service manually and see if you can start it manually. This will tell you straight away if its a problem with the MSI (which I doubt) or a problem with the service (i.e.: missing registry keys, dependant files, etc etc)
The way I troubleshoot these incidents is to install the service manually (at the point when the MSI fails) using a Resource Kit utility called INSTSRV.EXE.
Install the service manually and see if you can start it manually. This will tell you straight away if its a problem with the MSI (which I doubt) or a problem with the service (i.e.: missing registry keys, dependant files, etc etc)
Posted by:
dm1
18 years ago
Brent,
Great advice, and much appreciated.
I managed to install the service manually and start it manually. However the Dependency Tab remains blank. I suspect this may not matter too much as long as the dependencies are present and the service is running.
I could therefore include the manual installation of the service in a Custom Action that uses the INSTSRV command., No?
Great advice, and much appreciated.
I managed to install the service manually and start it manually. However the Dependency Tab remains blank. I suspect this may not matter too much as long as the dependencies are present and the service is running.
I could therefore include the manual installation of the service in a Custom Action that uses the INSTSRV command., No?
Posted by:
brenthunter2005
18 years ago
You can always test out the dependency by configuring the 'DependOnService' regkey in the appropriate HKLM services hive.
I always say that if Windows Installer can handle the command natively, then don't use a custom action.
To troubleshoot this further, remove the dependencies on the 'MSExchangeMGMT' service in your MSI and attempt to install it this way...
I always say that if Windows Installer can handle the command natively, then don't use a custom action.
To troubleshoot this further, remove the dependencies on the 'MSExchangeMGMT' service in your MSI and attempt to install it this way...
Posted by:
dm1
18 years ago
Posted by:
dm1
18 years ago
Posted by:
brenthunter2005
18 years ago
Posted by:
packaging.monkey
17 years ago
Posted by:
munrogm
17 years ago
Posted by:
AngelD
17 years ago
You will need to use the ServiceControl table to control any installed service as the ServiceInstall table is used to install or remove services during install or uninstall.
Posted by:
Uniwares_AS
16 years ago
Just ran into the same problem. Here are the steps to consider to avoid this situation:
If it is required to install a service under a specific limited account like the NetworkService account, the installer has to follow these steps
1) create a customaction for each OS that needs a different account name
2) create a property SERVICEACCOUNT and set it to the account name for the OS in a CostFinalize custom action
the names are: NT AUTHORITY\SYSTEM for Windows 2000, NT AUTHORITY\NETWORK SERVICE for Windows XP/2003
3) if the service needs the "allow interact with the desktop" flag, it MUST run under the LocalSystem account (thus the account name has to be left empty or set to NT AUTHORITY\SYSTEM)
4) add [SERVICEACCOUNT] to the account name field under Services
5) in any case, for the built-in service accounts like NetworkService, LocalService, LocalSystem, the password field is ignored and can be left empty
Any other setting leads to error 1923 (or in sequence to 1920) during installation without any other hint. An invalid account name is reported as an error during installation and gives the option to wait for the account to be created and retry.
If it is required to install a service under a specific limited account like the NetworkService account, the installer has to follow these steps
1) create a customaction for each OS that needs a different account name
2) create a property SERVICEACCOUNT and set it to the account name for the OS in a CostFinalize custom action
the names are: NT AUTHORITY\SYSTEM for Windows 2000, NT AUTHORITY\NETWORK SERVICE for Windows XP/2003
3) if the service needs the "allow interact with the desktop" flag, it MUST run under the LocalSystem account (thus the account name has to be left empty or set to NT AUTHORITY\SYSTEM)
4) add [SERVICEACCOUNT] to the account name field under Services
5) in any case, for the built-in service accounts like NetworkService, LocalService, LocalSystem, the password field is ignored and can be left empty
Any other setting leads to error 1923 (or in sequence to 1920) during installation without any other hint. An invalid account name is reported as an error during installation and gives the option to wait for the account to be created and retry.
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
so that the conversation will remain readable.