When trying to install MSIs downloaded by Solution Center or directly from the installation folder, the following window error message is displayed:
"The system administrator has set policies to prevent this installation"
The Event logs>Application shows the following entry:
Event Type: Error Event Source: MsiInstaller Event Category: None Event ID: 1008 Date: 5/12/2009 Time: 4:47:40 PM User: Domain\altiris Computer: ALTIRISTEST Description: The installation of <msipath\msiName>.msi is not permitted due to an error in software restriction policy processing. The object cannot be trusted.
Customer verified that he has the proper permissions as Local Administrator as well he verified that he doesn't have some type of restrictions via GPO. He even tried the following steps to make sure that he had no restrictions, however, he still got the window error message above:
1. Start -> Control Panel 2. Open Administrative Tools 3. Open Local Security Settings 4. Click Software Restriction Policies a. If no software restrictions are defined, right click the Software Restriction Policies node and select New Software Restriction Policy 5. Double click Enforcement 6. Select "All users except local administrators" 7. Click OK 8. Reboot the machine or run gpupdate /force
This is an issue with Microsoft. This problem occurs if the Windows Installer process has insufficient contiguous virtual memory to verify that the .msi package or the .msp package is correctly signed.
Microsoft has a fix for this issue. Please refer to http://support.microsoft.com/?kbid=973825 "Error message when you try to install a large Windows Installer package or a large Windows Installer patch package in Windows Server 2003 Service Pack 2: "Error 1718 File was rejected by digital signature policy"" to download the fix required.
Applies To Notification Server 6.0 Windows Server 2003 Solution Center Any MSI used by Solutions
Imported Document ID: TECH42067
Subscribing will provide email updates when this Article is updated. Login is required.