Windows Installer – prevent installation because of policies

Resolution for “Windows Installer – The system administrator has set policies to prevent this installation.

  • RUN > secpol.msc
    • Software Restriction Policies > Enforcement
      • All software files except libraries (such as DLLs)
      • All users except local administrators
      • Ignore certificate rules
  • RUN > regedit
    • HKLMSOFTWAREPoliciesMicrosoftWindowsInstaller
      • DisableMSI > Value data: 0 (Decimal) – no reboot needed

 

Description of DisableMSI:

DisableMSI Description
Default On Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, and Windows Server 2008 R2, if the policy value is Null, absent, or any number other than 1 or 2, the Windows Installer is enabled for managed applications. Unmanaged application installs are blocked.

On Windows XP, Windows Vista, and Windows 7, the Windows Installer is enabled for all applications. All install operations are allowed.

0 Windows Installer is enabled for all applications. All install operations are allowed.
1 The Windows Installer is disabled for unmanaged applications but is still enabled for managed applications. Non-elevated per-user installations are blocked. Per-user elevated and per-machine installs are allowed.
2 Windows Installer is always disabled for all applications. No installs are allowed including repairs, reinstalls, or on-demand installations.

 

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.