Click here to get back home

The system administrator has set policies to prevent this installa
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
The system administrator has set policies to prevent this installa Travis 07-23-2006
Posted by Travis on July 23, 2006, 3:55 pm
Please log in for more thread options
 I am unable to run certain MSI and EXE files. I receive the following error..

"The system administrator has set policies to prevent this installation"

Windows Server 2003 SP1
Domain Contoller

I am logged in as a Domain Admin with local Admin rights. I installed this
server 2 years ago and have been the only Admin to touch it. The only
modifications to any GPO is for logon scripts, folder redirection, and WSUS.

I have updated Windows Installer to version 3.1 v2

I have added the DisableMSI reg key and set the value to 0

I attemepted to run the Windows Installer Cleanup utility to remove the
application that will not install but I receive the same error when I try to
install it.

Any help would be much appreciated.

Travis

Posted by Casper van Eersel on July 23, 2006, 4:15 pm
Please log in for more thread options
 This looks as though you have a GPO setting somewhere which restricts
execution of this software. Check out the Software Restriction Policies
which apply to your account. To see if this is correct, run the Group Policy
Result wizard in GPMC and see if this is indeed so.

Casper

>I am unable to run certain MSI and EXE files. I receive the following
>error..
>
> "The system administrator has set policies to prevent this installation"
>
> Windows Server 2003 SP1
> Domain Contoller
>
> I am logged in as a Domain Admin with local Admin rights. I installed this
> server 2 years ago and have been the only Admin to touch it. The only
> modifications to any GPO is for logon scripts, folder redirection, and
> WSUS.
>
> I have updated Windows Installer to version 3.1 v2
>
> I have added the DisableMSI reg key and set the value to 0
>
> I attemepted to run the Windows Installer Cleanup utility to remove the
> application that will not install but I receive the same error when I try
> to
> install it.
>
> Any help would be much appreciated.
>
> Travis



Posted by Travis on July 23, 2006, 4:22 pm
Please log in for more thread options
There are no Software Restriction Policies in place. I have checked very GPO,
including the local policy.

"Casper van Eersel" wrote:

> This looks as though you have a GPO setting somewhere which restricts
> execution of this software. Check out the Software Restriction Policies
> which apply to your account. To see if this is correct, run the Group Policy
> Result wizard in GPMC and see if this is indeed so.
>
> Casper
>
> >I am unable to run certain MSI and EXE files. I receive the following
> >error..
> >
> > "The system administrator has set policies to prevent this installation"
> >
> > Windows Server 2003 SP1
> > Domain Contoller
> >
> > I am logged in as a Domain Admin with local Admin rights. I installed this
> > server 2 years ago and have been the only Admin to touch it. The only
> > modifications to any GPO is for logon scripts, folder redirection, and
> > WSUS.
> >
> > I have updated Windows Installer to version 3.1 v2
> >
> > I have added the DisableMSI reg key and set the value to 0
> >
> > I attemepted to run the Windows Installer Cleanup utility to remove the
> > application that will not install but I receive the same error when I try
> > to
> > install it.
> >
> > Any help would be much appreciated.
> >
> > Travis
>
>
>

Posted by Roger Abell [MVP] on July 23, 2006, 7:51 pm
Please log in for more thread options
The last time that I searched the KB with the exact string you quoted
there were a number of hits for different apps with installs that gave that
result and their various workarounds.

>I am unable to run certain MSI and EXE files. I receive the following
>error..
>
> "The system administrator has set policies to prevent this installation"
>
> Windows Server 2003 SP1
> Domain Contoller
>
> I am logged in as a Domain Admin with local Admin rights. I installed this
> server 2 years ago and have been the only Admin to touch it. The only
> modifications to any GPO is for logon scripts, folder redirection, and
> WSUS.
>
> I have updated Windows Installer to version 3.1 v2
>
> I have added the DisableMSI reg key and set the value to 0
>
> I attemepted to run the Windows Installer Cleanup utility to remove the
> application that will not install but I receive the same error when I try
> to
> install it.
>
> Any help would be much appreciated.
>
> Travis



Posted by Travis on July 24, 2006, 11:39 am
Please log in for more thread options
It now appears that it is affecting every computer in this Domain. So far I
have been unable to install Office 2003, Group Policy Management Console, MS
Installer Cleanup Utility, Financial Edge, and Raiser's Edge. On the
workstations it seems that the following registry key has been modified.

HKLM\Software\Policies\Microsoft\Windows\Installer\disableMSI

The value on the workstations is set to 2. This value is not present on my
servers. When I change the value on the workstations from 2 to 0 I am then
able to install whatever I like. I have added the desableMSI key to a server
and made the value 0 but I am still unable to install anything.

I have also created a new GPO, set it to block policy inheritance, and move
the DC to this GPO. I then ran "gpupdate /force". I was then able to install
the Group Policy Management Console but I still recieve the same error when I
attempt to Upgrade my Accounting package.

Is it possible that a recent Windows Update may have caused this?

Travis

"Roger Abell [MVP]" wrote:

> The last time that I searched the KB with the exact string you quoted
> there were a number of hits for different apps with installs that gave that
> result and their various workarounds.
>
> >I am unable to run certain MSI and EXE files. I receive the following
> >error..
> >
> > "The system administrator has set policies to prevent this installation"
> >
> > Windows Server 2003 SP1
> > Domain Contoller
> >
> > I am logged in as a Domain Admin with local Admin rights. I installed this
> > server 2 years ago and have been the only Admin to touch it. The only
> > modifications to any GPO is for logon scripts, folder redirection, and
> > WSUS.
> >
> > I have updated Windows Installer to version 3.1 v2
> >
> > I have added the DisableMSI reg key and set the value to 0
> >
> > I attemepted to run the Windows Installer Cleanup utility to remove the
> > application that will not install but I receive the same error when I try
> > to
> > install it.
> >
> > Any help would be much appreciated.
> >
> > Travis
>
>
>

Similar ThreadsPosted
Allow ONLY "Administrator" and "System" groups full control to C:\ February 15, 2006, 4:51 pm
RDP : restrict administrator to access system without my permission through rdp June 15, 2006, 6:49 am
How To Prevent Local Administrator Credentials from Unlocking Remote Server? July 1, 2008, 1:20 am
OpenRowset : DSN : file-system permissions : Local System March 14, 2008, 10:23 am
Main Administrator account doesn't have Administrator groups right March 1, 2006, 2:35 pm
policies September 12, 2005, 9:16 am
RAS and VPN policies - help March 15, 2007, 10:10 am
Account Policies - NT January 19, 2006, 3:14 pm
Group Policies September 13, 2006, 8:31 am
How Policies Work November 17, 2006, 2:43 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap