I'm working with a new client and we're encountering issues trying to update a software installation. We're getting an error message stating, "The system administrator has set policies to prevent this installation." I've checked the Windows Installer policies in the registry (both HKLM and WOW6432Node), and they're empty. I also looked at AppLocker, and there are no rules for MSI or scripts. Software Restriction Policies aren't defined either. I confirmed that the Windows Installer service is active and double-checked the SafeBoot registry settings to ensure it's not stuck in Safe Mode. I even removed outdated MSI product registrations related to an old admin and looked through the C:WindowsInstaller directory for any cached MSI files. Additionally, I reviewed Group Policy settings in gpedit.msc for Windows Installer and found nothing that would block installations. Unfortunately, despite all these checks, the MSI installation still fails, triggering Event 1040, 1042, and 1033 in Event Viewer, indicating there might be deeper issues, such as WDAC, SRP registry tattoos, IFC policies, or Code Integrity rules blocking the installer. I tried to connect the machine to the domain controller to see if we could override any settings as a domain admin, but that didn't work. I even reset the password for the previous admin account tied to the old MSP, but we were still unable to get this specific software to install, while other products work fine. The machine is in monitoring and elevation mode with ThreatLocker, and we managed to perform a UA. Interestingly, other users can install the software without issue – it seems to be specific to this machine. Any suggestions?
5 Answers
Definitely try using Sysmon along with ProcMon. These tools can help you see all the background actions during the installation process and might provide clues about what's blocking it.
I recommend using ProcMon to capture what's happening during the installation. It should show you the actual calls and errors, which could make this easier to diagnose.
Is this machine managed with MDM or Intune? If so, there might be policies in place that restrict installations. Ensure to review the GPO policies for the organizational units, just in case there's more to uncover.
You might want to check the local policies again, just to be sure there's nothing odd going on there. Sometimes, local settings can slip through the cracks.
Have you thought about reinstalling Windows? There could be lingering settings or policies that you haven't caught yet. Even if you find a fix for this issue, who knows if other problems might pop up later? Starting fresh might save you more time in the long run.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures