"this installation is forbidden by system policy" during installation despite many attempts at a workaround...

Question

For some reason, a small software package called Service Center by Native Instruments will no longer install on my machine.  It used to be there and one day I noticed it was no longer (probably after an update of related software).  It's not listed in the Add or Remove Programs though thorough investigation seems to imply that the system thinks it is installed.

I've tried a lot of working under the hood to make this work and it has stumped both Native Instrument's and InstallAware's support.  The full synopsis is available here, including detailed InstallAware logs: http://www.installaware.com/forum/viewtopic.php?f=2&t=6449&start=0

I'm on Win7x64. My account is an Admin account and UAC is disabled.  This is a brief list of things I've tried:

• Actively setting group and local security policies to allow unrestricted installations
• Booting in safe mode and logging in as user "Administrator"
• Removing residual folders and registry keys that were related to the software (all of which were carefully restored after failed attempts)
• Disabling the firewalls and antivirus
• mfc /scannnow

Again a more details analysis is in this forum post: http://www.installaware.com/forum/viewtopic.php?f=2&t=6449&start=0

Here is a snippet from the Installaware log around the point of failure:

MSI (s) (A4:8C) [11:09:25:893]: APPCOMPAT: looking for appcompat database entry with ProductCode '{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}'.

MSI (s) (A4:8C) [11:09:25:895]: APPCOMPAT: no matching ProductCode found in database.

MSI (s) (A4:8C) [11:09:25:895]: Transforms are not secure.

MSI (s) (A4:8C) [11:09:25:896]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'c:\tmp\log6-attempt-repair.txt'.

MSI (s) (A4:8C) [11:09:25:897]: Command Line: ADDLOCAL=ALL ALLUSERS=1 ARPSYSTEMCOMPONENT=1 ARPNOREMOVE=1 ARPNOMODIFY=1 ARPNOREPAIR=1 ARPINSTALLLOCATION=C:\Program Files\Native Instruments\Service Center\ SRCDIR=C:\tmp\SERVIC~1.5SE\data\ SOURCELIST=C:\tmp\SERVIC~1.5SE\data;C:\Users\HARIKA~1\AppData\Local\Temp\mia16
MEDIAPACKAGEPATH=\tmp\SERVIC~1.5SE\ REBOOT=R CURRENTDIRECTORY=C:\Users\HARIKA~1\AppData\Local\Temp\mia16 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=8260

MSI (s) (A4:8C) [11:09:25:898]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{A6DB2A6F-FF9D-453F-99D6-C1AA54BC0C14}'.

MSI (s) (A4:8C) [11:09:25:898]: Product Code passed to Engine.Initialize:           ''

MSI (s) (A4:8C) [11:09:25:899]: Product Code from property table before transforms: '{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}'

MSI (s) (A4:8C) [11:09:25:900]: Product Code from property table after transforms:  '{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}'

MSI (s) (A4:8C) [11:09:25:900]: Product not registered: beginning first-time install

MSI (s) (A4:8C) [11:09:25:901]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A

MSI (s) (A4:8C) [11:09:25:901]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.

MSI (s) (A4:8C) [11:09:25:903]: PROPERTY CHANGE: Adding ALLUSERS property. Its value is '1'.

MSI (s) (A4:8C) [11:09:25:904]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A

MSI (s) (A4:8C) [11:09:25:904]: Product {0B8565BA-BAD5-4732-B122-5FD78EFC50A9} is admin assigned: LocalSystem owns the publish key.

MSI (s) (A4:8C) [11:09:25:905]: Product {0B8565BA-BAD5-4732-B122-5FD78EFC50A9} is managed.

MSI (s) (A4:8C) [11:09:25:906]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A

MSI (s) (A4:8C) [11:09:25:906]: MSI_LUA: Credential prompt not required, user is an admin

MSI (s) (A4:8C) [11:09:25:907]: PROPERTY CHANGE: Adding ProductState property. Its value is '1'.

MSI (s) (A4:8C) [11:09:25:908]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A

MSI (s) (A4:8C) [11:09:25:908]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A

MSI (s) (A4:8C) [11:09:25:909]: Entering CMsiConfigurationManager::SetLastUsedSource.

MSI (s) (A4:8C) [11:09:25:909]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A

MSI (s) (A4:8C) [11:09:25:911]: Note: 1: 1402 2: UNKNOWN\Net 3: 5

MSI (s) (A4:8C) [11:09:25:912]: MSI_LUA: Elevation prompt disabled for silent installs

This installation is forbidden by system policy. Contact your system administrator.

C:\Users\HARIKA~1\AppData\Local\Temp\mia16\Service Center Setup PC.msi

MSI (s) (A4:8C) [11:09:25:952]: MainEngineThread is returning 1625

Native Instrument's advice was to reinstall Windows 7 - a 3 day affair with all the software and settings I have on this workhorse!  I'd be incredible grateful if someone could help me find a better solution...

• Harikaram

Answer 1

Hi,

I would suggest you to try the steps provided below and check if it helps.

Method 1:

****Try to set your computer in Clean Boot state and check if the same issue occurs.

By setting your system in clean boot state helps in identifying if any third party applications or startup items are causing the issue.

How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7:

http://support.microsoft.com/kb/929135

---

Note: After clean boot troubleshooting step, follow Step 7 in the provided link to return your computer to Normal startup mode.

Method 2: Also try to install a program as an administrator, follow these steps:

1. Right-click on the program and you need to install, and then select Run as administrator.
2. When you are prompted for an administrator password or for a confirmation, type the administrator password, or click Continue.

Hope this information is helpful.

Answer 2

Error 1625 -  This installation is forbidden by system policy. Contact your system administrator.  ERROR_INSTALL_PACKAGE_REJECTED

What you say about "How do I restore security settings to the default settings?

 http://support.microsoft.com/kb/313222/#appliesto" is a late amendment to that article that I was not aware of so thanks for pointing that out.

Solving setup errors by using the SubInACL tool to repair file and registry permissions

http://blogs.msdn.com/astebner/archive/2006/09/04/solving-setup-errors-by-using-the-subinacl-tool-to-repair-file-and-registry-permissions.aspx

You might not have these Registry Keys on your machine but if they exist are there any "strange" Policies listed in them?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer

Sometimes when the Registry gets into a corrupted state (for example by using Registry Cleaners or just by bad luck) the only solution that may be viable is a clean install of Windows.  What recovery options come with your machine?

Answer 3

Hi,

I've tried the various fixes outlines in these links, including the Software Policies tweak (it was already set that way), and the various registry hacks - with no luck.

With respect to the third link, from what I've read, there is no way to reset system policy on Win Vista and later unless you have a suitable system restore of you ran secedit /export when you first installed the os - neither of which I did.  Regardless, all other software installs ok.  All updates, windows, adobe, and otherwise work fine.

Any other ideas??

Gratefully,

Hari Karam Singh

Answer 4

Hi,

Thanks for the tips.  Neither has worked though.  I've also tried booting as user Administrator and Safe Mode with the AV and Firewall disabled.  No luck.

Gratefully,

Hari Karam Singh

Answer 5

See if any of these help.

Fix for “The system administrator has set policies to prevent this installation” error.

http://www.bhcblog.com/2009/03/09/fix-for-the-system-administrator-has-set-policies-to-prevent-this-installation-error/

Windows installer service can not be accessed

http://social.answers.microsoft.com/Forums/en-US/w7programs/thread/c785a860-bd9e-484d-baf1-9b074ac2ffbb

Use the Vista instructions in this to reset to default the security settings.

How do I restore security settings to the default settings?

http://support.microsoft.com/kb/313222/#appliesto