stevenstadel, I have forwarded this onto the Dev team and we are looking into this now and will post back when we have more info
That would be excellent, thank you
I can confirm that this error may occur in environments with none or limited internet access.
SolarWinds Log Forwarder for Windows is a digitally signed binary, however the .Net framework automatically tries to access the Certificate Revocation List on the internet to validate that the certificate used to sign the binaries hasn't been revoked.
When the url clr.thawte.com can't be reached the startup of the Log Forwarder service will time out and the setup thinks that you did not have permissions to start the service.
To solve the problem either allow the server access to crl.thawte.com or disable the 'Check for publisher's certificate revocation'.
Please note that disabling CRL checking on a given system will disable CRL checking for all applications on that system. This probably won't matter since the system doesn't have access to the internet to check the CRL anyway.
Disabling CRL checking will depend on the OS you're running.
I just wanted to let you know that disabling CRL didn't help with the issue. However the new version of Windows Log Forwarder (1.1.13) does install successfully without needing an internet connection.
Thank you for all your help.