Ask a new question

"this installation is forbidden by system policy" during installation despite many attempts at a workaround...

For some reason, a small software package called Service Center by Native Instruments will no longer install on my machine.  It used to be there and one day I noticed it was no longer (probably after an update of related software).  It's not listed in the Add or Remove Programs though thorough investigation seems to imply that the system thinks it is installed.

I've tried a lot of working under the hood to make this work and it has stumped both Native Instrument's and InstallAware's support.  The full synopsis is available here, including detailed InstallAware logs: http://www.installaware.com/forum/viewtopic.php?f=2&t=6449&start=0

I'm on Win7x64. My account is an Admin account and UAC is disabled.  This is a brief list of things I've tried:
- Actively setting group and local security policies to allow unrestricted installations
- Booting in safe mode and logging in as user "Administrator"
- Removing residual folders and registry keys that were related to the software (all of which were carefully restored after failed attempts)
- Disabling the firewalls and antivirus
- mfc /scannnow

Again a more details analysis is in this forum post: http://www.installaware.com/forum/viewtopic.php?f=2&t=6449&start=0

Here is a snippet from the Installaware log around the point of failure:

MSI (s) (A4:8C) [11:09:25:893]: APPCOMPAT: looking for appcompat database entry with ProductCode '{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}'.
MSI (s) (A4:8C) [11:09:25:895]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (A4:8C) [11:09:25:895]: Transforms are not secure.
MSI (s) (A4:8C) [11:09:25:896]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'c:\tmp\log6-attempt-repair.txt'.
MSI (s) (A4:8C) [11:09:25:897]: Command Line: ADDLOCAL=ALL ALLUSERS=1 ARPSYSTEMCOMPONENT=1 ARPNOREMOVE=1 ARPNOMODIFY=1 ARPNOREPAIR=1 ARPINSTALLLOCATION=C:\Program Files\Native Instruments\Service Center\ SRCDIR=C:\tmp\SERVIC~1.5SE\data\ SOURCELIST=C:\tmp\SERVIC~1.5SE\data\;C:\Users\HARIKA~1\AppData\Local\Temp\mia16\ MEDIAPACKAGEPATH=\tmp\SERVIC~1.5SE\ REBOOT=R CURRENTDIRECTORY=C:\Users\HARIKA~1\AppData\Local\Temp\mia16 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=8260 
MSI (s) (A4:8C) [11:09:25:898]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{A6DB2A6F-FF9D-453F-99D6-C1AA54BC0C14}'.
MSI (s) (A4:8C) [11:09:25:898]: Product Code passed to Engine.Initialize:           ''
MSI (s) (A4:8C) [11:09:25:899]: Product Code from property table before transforms: '{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}'
MSI (s) (A4:8C) [11:09:25:900]: Product Code from property table after transforms:  '{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}'
MSI (s) (A4:8C) [11:09:25:900]: Product not registered: beginning first-time install
MSI (s) (A4:8C) [11:09:25:901]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A
MSI (s) (A4:8C) [11:09:25:901]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (s) (A4:8C) [11:09:25:903]: PROPERTY CHANGE: Adding ALLUSERS property. Its value is '1'.
MSI (s) (A4:8C) [11:09:25:904]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A
MSI (s) (A4:8C) [11:09:25:904]: Product {0B8565BA-BAD5-4732-B122-5FD78EFC50A9} is admin assigned: LocalSystem owns the publish key.
MSI (s) (A4:8C) [11:09:25:905]: Product {0B8565BA-BAD5-4732-B122-5FD78EFC50A9} is managed.
MSI (s) (A4:8C) [11:09:25:906]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A
MSI (s) (A4:8C) [11:09:25:906]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (A4:8C) [11:09:25:907]: PROPERTY CHANGE: Adding ProductState property. Its value is '1'.
MSI (s) (A4:8C) [11:09:25:908]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A
MSI (s) (A4:8C) [11:09:25:908]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A
MSI (s) (A4:8C) [11:09:25:909]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (A4:8C) [11:09:25:909]: Using cached product context: machine assigned for product: AB5658B05DAB23741B22F57DE8CF059A
MSI (s) (A4:8C) [11:09:25:911]: Note: 1: 1402 2: UNKNOWN\Net 3: 5 
MSI (s) (A4:8C) [11:09:25:912]: MSI_LUA: Elevation prompt disabled for silent installs
This installation is forbidden by system policy. Contact your system administrator.
C:\Users\HARIKA~1\AppData\Local\Temp\mia16\Service Center Setup PC.msi
MSI (s) (A4:8C) [11:09:25:952]: MainEngineThread is returning 1625


Native Instrument's advice was to reinstall Windows 7 - a 3 day affair with all the software and settings I have on this workhorse!  I'd be incredible grateful if someone could help me find a better solution...

- Harikaram

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

Hi,

I would suggest you to try the steps provided below and check if it helps.

Method 1:

 Try to set your computer in Clean Boot state and check if the same issue occurs.

By setting your system in clean boot state helps in identifying if any third party applications or startup items are causing the issue.

How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7:
http://support.microsoft.com/kb/929135

 

Note: After clean boot troubleshooting step, follow Step 7 in the provided link to return your computer to Normal startup mode.

 

Method 2: Also try to install a program as an administrator, follow these steps:

  1. Right-click on the program and you need to install, and then select Run as administrator.
  2. When you are prompted for an administrator password or for a confirmation, type the administrator password, or click Continue.

 

Hope this information is helpful.

2 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

See if any of these help.

 

Fix for “The system administrator has set policies to prevent this installation” error.
http://www.bhcblog.com/2009/03/09/fix-for-the-system-administrator-has-set-policies-to-prevent-this-installation-error/


Windows installer service can not be accessed
http://social.answers.microsoft.com/Forums/en-US/w7programs/thread/c785a860-bd9e-484d-baf1-9b074ac2ffbb


Use the Vista instructions in this to reset to default the security settings.

How do I restore security settings to the default settings?
http://support.microsoft.com/kb/313222/#appliesto

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi,

Thanks for the tips.  Neither has worked though.  I've also tried booting as user Administrator and Safe Mode with the AV and Firewall disabled.  No luck.

Gratefully,
Hari Karam Singh

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi,

I've tried the various fixes outlines in these links, including the Software Policies tweak (it was already set that way), and the various registry hacks - with no luck.

With respect to the third link, from what I've read, there is no way to reset system policy on Win Vista and later unless you have a suitable system restore of you ran secedit /export when you first installed the os - neither of which I did.  Regardless, all other software installs ok.  All updates, windows, adobe, and otherwise work fine.

Any other ideas??

Gratefully,
Hari Karam Singh

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Error 1625 -  This installation is forbidden by system policy. Contact your system administrator.  ERROR_INSTALL_PACKAGE_REJECTED

 

 

 

What you say about "How do I restore security settings to the default settings?
 http://support.microsoft.com/kb/313222/#appliesto" is a late amendment to that article that I was not aware of so thanks for pointing that out.

 

 


Solving setup errors by using the SubInACL tool to repair file and registry permissions
http://blogs.msdn.com/astebner/archive/2006/09/04/solving-setup-errors-by-using-the-subinacl-tool-to-repair-file-and-registry-permissions.aspx


You might not have these Registry Keys on your machine but if they exist are there any "strange" Policies listed in them?


HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer


Sometimes when the Registry gets into a corrupted state (for example by using Registry Cleaners or just by bad luck) the only solution that may be viable is a clean install of Windows.  What recovery options come with your machine? 

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Nothing strange in those Reg keys.  Just some things pertaining to "activedesktop" stuff and autoplay.

Wow6432Node wasn't there (though I've definitely seen it somewhere before, maybe in HKCU).

I followed the instructions for subinacl.  I really thought this was going to fix it but alas...no luck...same error!

Reinstalling is not a very pleasant option as there are a lot of setups, settings, and software installs that aren't in my disaster recovery :(.  It takes about 3 days to get everything back up to speed.

Thanks for the help though.  Any other ideas?  I'm trying on the installaware website again too...


Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Looking at the (1.5GB) log file.  I see that a lot of the keys in 

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\

are Access Denied.  The article says this usually isn't a problem but might something be stuck which has to do with the installer?  

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface

Looking at the above Sub-Keys on my machine, wherever Trusted Installer is mentioned (it is not seen in most of the Sub-Keys)  it is the only user with Full Control.  System,  Administrator, and User, only have Read access when the Trusted Installer user is mentioned.   All of the Sub-Keys which fail to mention Trusted Installer, give System and Administrators Full Control, with Users having only Read access.

The actual "Interface" Key gives Full Control to System and Administrators, with Read access to Users, there is no mention of Trusted Installer.

I was looking at the main Key and Sub-Keys as a non Admin user (Standard User) and I did not get any Access Denied message, of course I did not look at every Sub-Key as there are too many to check.

Once your Registry is corrupt unfortunately (if you have no Backup) them despite the problems and difficulties, a clean install is often the only solution.  I hope your Registry is not corrupt so you can avoid the pain of reinstalling.

 

Speaking of logs, have you checked the Event Viewer logs?

 

Working with Vista’s new Event Viewer
http://www.petri.co.il/vista-event-viewer.htm

 

http://windows.microsoft.com/en-us/windows7/What-information-appears-in-event-logs-Event-Viewer

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Nothing out of the ordinary.  Only references are to the MSI starting and ending.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I'm running out of ideas to suggest, have you tried a program like this to see what is happening under the hood?

 

Process Monitor v2.8
http://technet.microsoft.com/en-au/sysinternals/bb896645.aspx
 

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

 
 

Question Info

Last updated June 15, 2020 Views 8,420 Applies to: