When trying to install a MSI, the following error message appears: "The system administrator has set policies to prevent this installation".
search cancel

When trying to install a MSI, the following error message appears: "The system administrator has set policies to prevent this installation".

book

Article ID: 176933

calendar_today

Updated On:

Products

IT Management Suite

Issue/Introduction

When trying to install MSIs downloaded by Solution Center or directly from the installation folder, the following window error message is displayed:

"The system administrator has set policies to prevent this installation"

The Event logs>Application shows the following entry:

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 1008
Date:  5/12/2009
Time:  4:47:40 PM
User:  Domain\altiris
Computer: ALTIRISTEST
Description:
The installation of <msipath\msiName>.msi is not permitted due to an error in software restriction policy processing. The object cannot be trusted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Customer verified that he has the proper permissions as Local Administrator as well he verified that he doesn't have some type of restrictions via GPO. He even tried the following steps to make sure that he had no restrictions, however, he still got the window error message above:

1. Start -> Control Panel
2. Open Administrative Tools
3. Open Local Security Settings
4. Click Software Restriction Policies a. If no software restrictions are defined, right click the Software Restriction Policies node and select New Software Restriction Policy
5. Double click Enforcement
6. Select "All users except local administrators"
7. Click OK
8. Reboot the machine or run gpupdate /force

Cause

This is an issue with Microsoft. This problem occurs if the Windows Installer process has insufficient contiguous virtual memory to verify that the .msi package or the .msp package is correctly signed.

Resolution

Microsoft has a fix for this issue. Please refer to http://support.microsoft.com/?kbid=973825 "Error message when you try to install a large Windows Installer package or a large Windows Installer patch package in Windows Server 2003 Service Pack 2: "Error 1718 File was rejected by digital signature policy"" to download the fix required.


Applies To
Notification Server 6.0
Windows Server 2003
Solution Center
Any MSI used by Solutions