{"action":"created","issue":{"url":"https://api.github.com/repos/hadouken/hadouken/issues/229","repository_url":"https://api.github.com/repos/hadouken/hadouken","labels_url":"https://api.github.com/repos/hadouken/hadouken/issues/229/labels{/name}","comments_url":"https://api.github.com/repos/hadouken/hadouken/issues/229/comments","events_url":"https://api.github.com/repos/hadouken/hadouken/issues/229/events","html_url":"https://github.com/hadouken/hadouken/issues/229","id":133420334,"number":229,"title":"Install Hadouken as Local Service from the MSI","user":{"login":"vktr","id":1491824,"avatar_url":"https://avatars.githubusercontent.com/u/1491824?v=3","gravatar_id":"","url":"https://api.github.com/users/vktr","html_url":"https://github.com/vktr","followers_url":"https://api.github.com/users/vktr/followers","following_url":"https://api.github.com/users/vktr/following{/other_user}","gists_url":"https://api.github.com/users/vktr/gists{/gist_id}","starred_url":"https://api.github.com/users/vktr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vktr/subscriptions","organizations_url":"https://api.github.com/users/vktr/orgs","repos_url":"https://api.github.com/users/vktr/repos","events_url":"https://api.github.com/users/vktr/events{/privacy}","received_events_url":"https://api.github.com/users/vktr/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/hadouken/hadouken/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-13T10:22:04Z","updated_at":"2016-02-13T20:13:39Z","closed_at":null,"body":""},"comment":{"url":"https://api.github.com/repos/hadouken/hadouken/issues/comments/183746583","html_url":"https://github.com/hadouken/hadouken/issues/229#issuecomment-183746583","issue_url":"https://api.github.com/repos/hadouken/hadouken/issues/229","id":183746583,"user":{"login":"Robo210","id":1312684,"avatar_url":"https://avatars.githubusercontent.com/u/1312684?v=3","gravatar_id":"","url":"https://api.github.com/users/Robo210","html_url":"https://github.com/Robo210","followers_url":"https://api.github.com/users/Robo210/followers","following_url":"https://api.github.com/users/Robo210/following{/other_user}","gists_url":"https://api.github.com/users/Robo210/gists{/gist_id}","starred_url":"https://api.github.com/users/Robo210/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Robo210/subscriptions","organizations_url":"https://api.github.com/users/Robo210/orgs","repos_url":"https://api.github.com/users/Robo210/repos","events_url":"https://api.github.com/users/Robo210/events{/privacy}","received_events_url":"https://api.github.com/users/Robo210/received_events","type":"User","site_admin":false},"created_at":"2016-02-13T20:13:39Z","updated_at":"2016-02-13T20:13:39Z","body":"Configuring the service to run as Local Service as part of installation is relatively easy, but making the config file writable by the Local Service account is proving slightly tricky.\r\n\r\nThe file can be made to be writable by the service account by setting some permissions on it when it gets installed:\r\n\r\n```\r\n<File Id=\"ConfigTemplate\" Name=\"hadouken.json.template\" Source=\"$(var.BinDir)\\hadouken.json.template\">\r\n  <!-- Local Service: Full, System: Full, Builtin-Admins: Full, Builtin-Users: Read -->\r\n  <PermissionEx Sddl=\"D:AI(A;;FA;;;LS)(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)\" />\r\n</File>\r\n```\r\n\r\nUnfortunately, the SystemTools WiX extension that fills in the template with the configured values ends up creating its output with default permissions rather than copy the permissions from the source file. This leads to the config file once again not being writable by the Local Service account.\r\n\r\nOther than trying to fix the SystemTools extension, I'm not sure what next steps to take to fix this problem."}}