MSI packages does n't install when I launch from NT service

Gana

unread,

Jan 15, 2002, 8:42:26 PM1/15/02

to

I've written an msi install which works very well in
command prompt and by douple clicking.It does n't work if
I span this install from a windows service running in
localsystem account using CreateProcess or MsiAPI's. The
error I get is 2103. 26,that is "Could not resolve path
for shell folder". How to get rid of this stupid error?,I
looked in to log file,But I have n't find enough
information.

Waiting for your reply.
Thanks,
Gana

Rich

unread,

Jan 15, 2002, 9:50:48 PM1/15/02

to

[Please do not mail me a copy of your followup]

Why are you trying to install something from within the context of a
service?
--
Ask me about my upcoming book on Direct3D from Addison-Wesley!
Direct3D Book http://www.xmission.com/~legalize/book/
Don't Support Spammers! Boycott Fractal Painter 7!
http://www.xmission.com/~legalize/spammers.html

gana

unread,

Jan 15, 2002, 10:29:03 PM1/15/02

to

Hi,
Our server is NT service,we need to run a msi upgrade
package from NT service.I do n't think this is problem,I
still believe user privillages are problem.If you have any
thoughs on it let me know.

Thanks,
Gana

Rich

unread,

Jan 15, 2002, 11:10:57 PM1/15/02

to

[Please do not mail me a copy of your followup]

"gana" <vive...@mailcity.com> spake the secret code
<9cfd01c19e3d$f2418b60$9ee62ecf@tkmsftngxa05> thusly:

> Our server is NT service,we need to run a msi upgrade
>package from NT service.

What exactly is it you're trying to do from inside the service?
Please be specific.

>I don't think this is problem,I

>still believe user privillages are problem.

Where do you think your security problems are coming from?
A service runs in a very restricted environment, that's why you're
having security problems.

But the security errors are secondary indicators of your real problem
-- you're trying to do something from within the execution context of
a service that depends on a regular user environment.

At least that's how I see it, based on the information you've provided
so far.

gana

unread,

Jan 16, 2002, 1:26:16 AM1/16/02

to

Hi
I already mentioned in first time it self that I tried
all different options to install product.
MsiInstallProduct(PathtoPackage,NULL);
-or
CreateProcess("msiexec /I "pathtomsipacakae"");

Either of them does n't work.

When MSI intaller copy the files to the local drive,I
get Internal error syaing 2103.26.

Is it clear.

Thanks,
Gana

Rich

unread,

Jan 16, 2002, 3:07:32 AM1/16/02

to

[Please do not mail me a copy of your followup]

"gana" <vive...@mailcity.com> spake the secret code

<8b4001c19e56$b39691d0$39ef2ecf@TKMSFTNGXA08> thusly:

> MsiInstallProduct(PathtoPackage,NULL);
> -or
> CreateProcess("msiexec /I "pathtomsipacakae"");

And what is this package supposed to install?
Why are you attempting to install something while running as a service?

gana

unread,

Jan 16, 2002, 11:10:55 AM1/16/02

to

Hello
Have You ever used a MSI API or create process.I
mentioned that this is normal MSI installer package which
stops and restart same service(which executes
MsiinstallProduct API call)while install the product.

Have you ever installed the products from NT service.

Thnaks,
Ganapathi.

Andreas Magnusson

unread,

Jan 16, 2002, 1:11:48 PM1/16/02

to

OK, did you say that you were trying to install a package from LOCAL SYSTEM?
I imagine that Windows Installer balks pretty quick on it since LOCAL SYSTEM
doesn't have a profile, i.e. it's not a real user per se.
I am also very interested in the reason for doing an installation from a
service...

/Andreas
"gana" <vive...@mailcity.com> wrote in message
news:a44101c19ea8$6059b270$b1e62ecf@tkmsftngxa04...

Gana

unread,

Jan 16, 2002, 5:18:41 PM1/16/02

to

Hi Andress
I know this is problem of user profile,Is there any
workaround for this problem in operationg system level.I
tried my level best in group policy ,that does n't work.
Our application archtechure is like that.We have master
srver node that controls many slave servers.Master server
guy has to update all slave installtion whenever latest
software availiable,Se we span msiexec process rom slave
server when user press some updtae button

Torgeir Bakken

unread,

Jan 16, 2002, 10:13:20 PM1/16/02

to

If I am not mistaken, a service running under the localsystem account has no
access to network shares.

--
torgeir

Phil Wilson

unread,

Jan 17, 2002, 6:54:10 PM1/17/02

to

That's exactly correct, that's the conclusion I came to as well. The service
would have to be running with an account that had access to the other
server, or have the privilege to CreateProcessAsUser to initiate a process
with a user account that had access to the remote server. I'm amazed at the
number of times people run services and expect them to be able to access
remote systems with the local system account.

"Torgeir Bakken" <Torgeir.B...@hydro.com> wrote in message
news:3C464150...@hydro.com...

Carolyn Napier [MS]

unread,

Jan 17, 2002, 10:24:04 PM1/17/02

to

If you are running as local_system, then the only supported install is a
per-machine install (ALLUSERS=1). A per-user install would require that you
be impersonating the user for it to work.

- Carolyn Napier
cna...@microsoft.com

--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Gana" <vive...@mailcity.com> wrote in message
news:a3e101c19e2f$0d1e0fd0$36ef2ecf@tkmsftngxa12...

Thierry Closen

unread,

Jan 23, 2002, 9:44:46 AM1/23/02

to

In article <#3nLEJ7nBHA.2464@tkmsftngp02>, Phil Wilson says...

Phil,

> That's exactly correct

That's not correct. Local System has no network credentials, and thus
cannot be authenticated by a remote system. But it can still connect to
network shares if they are configured to allow access via NULL sessions.

--

Cheers,

Thierry