Build msi package in ssh session

Prerequisites

• Write a descriptive title.
• Make sure you are able to repro it on the latest version
• Search the existing issues.

Steps to reproduce

Hi,

Is there any way to allow users logged in via SSH to build MSI packages?

I understand there is a difference between RDP and SSH regarding the groups (INTERACTIVE and NETWORK) you get placed in automatically.

It seems you can't allow NETWORK members to access the msiserver, like you can for scmanager in the sample in #1662.
Always returns permission denied, even as SYSTEM, if you want to change the SDDL.

Also it seems you can't give SSH users the INTERACTIVE membership?

I don't want to give them ADMIN privileges for just building an MSI package using the WiX-Toolset.

The build works for RDP-Sessions, but in an SSH-Session it fails with:

light.exe : error LGHT0217: Error executing ICE action 'ICE02'. The most common cause of this kind of ICE failure is an incorrectly registered scripting engine. See http://wixtoolset.org/documentation/error217/ for details and how to solve this problem. The following string format was not expected by the external UI message logger: "The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance."

Thanks in advance

Expected behavior

MSI files can be created

Actual behavior

MSI files can't be created

Error details

No response

Environment data

Name                           Value
----                           -----
PSVersion                      5.1.17763.4644
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.17763.4644
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1

Version

OpenSSH_for_Windows_9.2p1, LibreSSL 3.7.2

Visuals

No response

Reproduce the WiX Toolset light.exe ICE02 failure in an OpenSSH session and compare it with the working RDP session, focusing on Windows Installer service access and the INTERACTIVE, NETWORK, and administrator memberships described here. Review the permission approach referenced in #1662; done means MSI files can be built over SSH without granting administrator privileges.