feat:NewRelic Infrastructure Agent Least Privileged Service Account Support on Windows in https://github.com/newrelic/infrastructure-agent/pull/2152
• Upgrade preserves service account: On upgrade, the installer now detects and preserves the existing service logon account (e.g., a custom domain or gMSA account) instead of resetting it to LocalSystem. Permissions on the app data directory are automatically re-granted to the preserved account.
• Fresh install uses LocalSystem by default: New installations continue to register the service under LocalSystem. Use set-service-account.ps1 (new companion script) post-install to switch to a least privileged account. Supports local accounts, standard domain accounts and Group Managed Service Accounts (gMSA) . Also supports the credentials stored in Windows Credential Manager.
• Rollback safety: A marker file is written before service creation so the MSI rollback action only removes services created by the current run — it won't delete a pre-existing service during a failed upgrade.
• Debug logging: Installation now writes a timestamped debug log (newrelic_installer_debug.log) making troubleshooting easier.
Impact: No breaking changes for existing installations using the default SYSTEM account. The new parameters are fully optional.
