You must install Windows Installer 3.1 on the computers that contain and run earlier versions of Windows Installer. You can display Windows Installer versions by running msiexec /? in a command prompt. Windows Installer 3.1 or later is required for the GPO installation package. On the computers that require the installation of Windows Installer 3.1 or later, how you install it is up to you.
Restricted users cannot run Windows Installer 3.1, and restricted users with elevated privileges cannot run Windows Installer 3.1. Restricted users are set with the local security policy.
One way to install Windows Installer is with a GPO computer startup script. When computers restart, startup scripts execute before the GPO launches the installation. If you use this approach, be aware that the startup script executes and reinstalls Windows Installer every time the computer is restarted. If you install it in silent mode, however, users experience a slight delay before they see the logon screen. Symantec client software is only installed one time with a GPO.
To install Windows Installer 3.1 or later with a startup script
In the Group Policy Management Window, in the console tree, expand your organizational unit, right-click your package, and then click Edit.
In the Group Policy Object Editor window, in the console tree, expand Computer Configuration > Windows Settings, and then click Scripts (Startup/Shutdown).
In the right pane, double-click Startup.
In the Startup Properties dialog box, click Show Files.
In a new window, copy the
WindowsInstaller-*.exefile from the GPO installation file folder to the Startup window and folder.
Redisplay the Startup Properties dialog box, and then click Add.
In the Add a Script dialog box, click Browse.
In the Browse dialog box, select the Windows Installer executable file, and then click Open.
In the Add a Script dialog box, in the Script Parameters box, type /quiet /norestart, and then click OK.
In the Startup Properties dialog box, click OK.
Exit the Group Policy Object Manager window.