Error 1625 when installing MSI

Question

I have a state assessment that needs to be distributed to student
laptops. The students have only power users right to the workstation.
When deploying the MSI using zenworks I have checked the environment
option to use "Executable Security Level: Run as secure system user".
When the students try to run the application it still returnes the error
code 1625 (This installation is forbidden by system policy. Contact your
system administrator.) The MSI will install correctly when administrative
rights are given. The application is associated by username can anyone
think of anything that might help with this?
Thanks
Rich

Answer 1

The "Security Level" setting does not effect MSI installs, but ZENworks will
instruct the MSI Installer service to run with elevated privileges which
should give the necessary rights.
It may be possible that the MSI was written to specifically check for admin
rights.........
To correct this you would need to edit the MSI to remove the AdminUser from
the LaunchConditino section.
It may also be possible that the MSI is written in such a fashion that it
calls an executable during the setup that is not MSI.
In such cases the MSI Installer service cant elevate that process and hence
issues could occur.
In such cases running MSIEXEC as the executable as an unsecure system user
with the correct parameters for your MSI may help.
The need to do this, however, is fairly unusual
The issues these two methods address are totally different and generally
only one addresses a particular issue.
The first addresses the issue in which there are sufficient rights, but the
MSI is making a faulty check and aborting.
The second address the issue of questionable MSIs which the MSI installer
service can elevate the privileges for non-msi components in the MSI.
Tools such as Orca and AdminStudio can be used to do this.
<[email protected]> wrote in message
news:km4th.4680$[email protected]..
>I have a state assessment that needs to be distributed to student
> laptops. The students have only power users right to the workstation.
> When deploying the MSI using zenworks I have checked the environment
> option to use "Executable Security Level: Run as secure system user".
> When the students try to run the application it still returnes the error
> code 1625 (This installation is forbidden by system policy. Contact your
> system administrator.) The MSI will install correctly when administrative
> rights are given. The application is associated by username can anyone
> think of anything that might help with this?
>
> Thanks
>
> Rich