Ok, here's a strange one.

I'm using a third party distribution tool (which you probably won't be familiar with) to deploy windows installer packages. The distribution tool is launched by autoexnt and basically looks at the server for a computer's corresponding ini file to see what action needs to be taken (install/uninstall/repair). It uses a system account to install MSI/MSTs.

I am also using software restrictions: default enforcement is disallowed and is applying to all users except administrators. Banned extensions include MSI and MST for obvious reasons.

Ok, as long as group policy successfully applies before autexnt starts then there's no problem installing MSIs with or without transforms. If autoexnt starts before policy has applied, it will install MSIs, but will fail to install MSTs.

The error in event viewer is:
---
Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 1007
Date: 11/08/2004
Time: 12:33:10
User: N/A
Computer: F6ST07
Description:
The installation of \\server\share\Applications\MS Office XP SP2\v1.1.0.0\Laptop XP Pro.mst is not permitted by software restriction policy. The Windows Installer only allows execution of unrestricted items. The authorization level returned by software restriction policy was 0x0 (status return 0x0).
---
The error I get in the verbose installer log is ERROR_INSTALL_TRANSFORM_REJECTED.

So as I understand it, if group policy has yet to apply, it should be using the policy it last downloaded. So why should it be installing MSIs but preventing transforms?

Any suggestions or ideas gratefully received.
Mike
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Answers

0
Have you set the Windows Installer service to install with Elevated Priviledges in your Group Policy?
Answered 11/05/2004 by: MSIMaker
Second Degree Black Belt

Please log in to comment
0
I resolved this by manually creating the GPO where software software restrictions were set. Must have been some sort of corruption. I thought GPs either worked or didn't. Strange, but it's fixed now.

Thanks for your reply
Answered 11/10/2004 by: meastaugh1
Senior Purple Belt

Please log in to comment
0
ps... yes I'm pretty sure it was set to install with elevated priveleges.
Answered 11/10/2004 by: meastaugh1
Senior Purple Belt

Please log in to comment
0
Hi,

This problem's come up again, in fact I'm not entirely convinced it went away (due to the sporadic nature of the issue). Further to my original post, I've noticed that when this does happen (intermittently) following a reboot the application event log reflects MSIs being installed, then a message from SceCli stating that Group policy was successfully applied, then MSIs will fail with the error messages in original post, until the next reboot.

I'm not experiencing any other infrastructure related problems on this network.
Answered 04/24/2005 by: meastaugh1
Senior Purple Belt

Please log in to comment
0
Yep I've been speaking to the vendor for the past year. They're trying their best but I don't think any other customers have had this issue.
Answered 04/25/2005 by: meastaugh1
Senior Purple Belt

Please log in to comment
0
Coincidentally I've just had an instance of this happen while a user was logged on (during an expected MSI self-heal ie first user run), so delaying won't seem to fix afterall. Logging the user off and on again cured.

This problem just gets more frustrating. Thanks all for your contributions so far!
Answered 04/25/2005 by: meastaugh1
Senior Purple Belt

Please log in to comment
0
It looks like this was caused by 3rd party print auditing software. The client would open a TCP connection, but not correctly close it, resulting in an excessive number of open connections.
Answered 12/19/2005 by: meastaugh1
Senior Purple Belt

Please log in to comment
Answer this question or Comment on this question for clarity