Windows Installer Error: "The system administrator has configured your system policy to prohibit this installation."

Michaël PAUL 0 Reputation points
2023-11-13T20:21:07.4033333+00:00
Hello everyone,

I am faced with a problem whose origin I do not understand and I hope that the community will enlighten me or guide me to resolve it.

I am on a Windows Server 2019 Standard virtual machine - Version: 1809 - OS Build: 17763.4974.

The server is installed as standard and updated to be delivered to the application team without any modified local security policy.


My concern is that each user (administrator) must be able to install the MSI "PulseSecureAppLauncher".

The initial administrator account poses no problem but all other local administrator accounts have the following problem:

Windows Installer Error: "The system administrator has configured your system policy to prohibit this installation."

The Windows Installer service is successfully started.

Have you ever encountered this problem? Do you have any leads?

Thank you very much in advance.

Sincerely.

Mr. PAUL.
Windows for business | Windows Server | User experience | Other
Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Anonymous
    2023-11-14T07:12:47.1233333+00:00

    Hi,

    Is this virtual machine a domain computer? If yes, run gpresult /R to display the applied group policies and see if any of them configures "Turn off Windows Installer". Also make sure the registry value
    HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer\DisableMSI does not exist.

    Best Regards,

    Ian Xue


    If the Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  2. Michaël PAUL 0 Reputation points
    2023-11-14T09:42:42.47+00:00
    Hi,
    
    Thank you for your reply.
    
    In the registry, there is no key mentioned.
    
    The server is a standalone server and not in a domain.
    
    Here is still the result of gpresult /R
    
    PS C:\Windows\system32> gpresult /R
    
    Microsoft(R) Windows(R) Operating System Result Tool v2.0
    © 2018 Microsoft Corporation. All rights reserved.
    
    Created on ‎14/‎11/‎2023 at 10:24:39
    
    
    RSOP data for xxx-xxxxxx\test on xxx-xxxxxx: logging mode
    -------------------------------------------------- ---------------------
    
    Operating system configuration: Standalone server
    Operating system version......: 10.0.17763
    Site name........................: N/A
    Roaming profile: N/A
    Local profile............................: C:\Users\test
    Connecting via a slow connection? : No
    
    
    Computer setting
    --------------------------
    
        Group Policy last applied time: 11/13/2023 at 7:29:16 p.m.
        Group Policy applied from: N/A
        Slow link threshold in Group Policy: 500 kbps
        Domain name............................: xxx-xxxxxx
        Domain type........................: <Local computer>
    
        Applied Group Policy Objects
        ------------------------------------
            Local Group Policy
    
        The computer is in the following security groups
        -------------------------------------------------- -------
            Administrators
            Everyone
            Authenticated users
            Mandatory system level
    
    
    USER SETTINGS
    ------------------------
    
        Group Policy last applied time: 11/14/2023 at 10:20:46
        Group Policy applied from: N/A
        Slow link threshold in Group Policy: 500 kbps
        Domain name: xxx-xxxxxx
        Domain type: <Local computer>
    
        Applied Group Policy Objects
        ------------------------------------
            N / A
    
        GPOs were not applied
        because they were refused
        -------------------------------------------------- ---------------------------------
            Local Group Policy
              Filtering: Not applied (empty)
    
        The user is part of the following security groups
        -------------------------------------------------- --------
            None
            Everyone
            Local account and member of the Administrators group
            Administrators
            Users
            LOGON INTERACTIVE REMOTE
            INTERACTIVE
            Authenticated users
            This organization
            Local account
            LOCAL
            NTLM authentications
            High mandatory level
    PS C:\Windows\system32>
    
    For the moment, my problem is not resolved.
    
    Sincerely.
    
    M.PAUL
    
    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.