Resolution for “Windows Installer – The system administrator has set policies to prevent this installation.”
- RUN > secpol.msc
- Software Restriction Policies > Enforcement
- All software files except libraries (such as DLLs)
- All users except local administrators
- Ignore certificate rules
- Software Restriction Policies > Enforcement
- RUN > regedit
- HKLMSOFTWAREPoliciesMicrosoftWindowsInstaller
- DisableMSI > Value data: 0 (Decimal) – no reboot needed
- HKLMSOFTWAREPoliciesMicrosoftWindowsInstaller
Description of DisableMSI:
| DisableMSI | Description |
|---|---|
| Default | On Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, and Windows Server 2008 R2, if the policy value is Null, absent, or any number other than 1 or 2, the Windows Installer is enabled for managed applications. Unmanaged application installs are blocked.
On Windows XP, Windows Vista, and Windows 7, the Windows Installer is enabled for all applications. All install operations are allowed. |
| 0 | Windows Installer is enabled for all applications. All install operations are allowed. |
| 1 | The Windows Installer is disabled for unmanaged applications but is still enabled for managed applications. Non-elevated per-user installations are blocked. Per-user elevated and per-machine installs are allowed. |
| 2 | Windows Installer is always disabled for all applications. No installs are allowed including repairs, reinstalls, or on-demand installations. |