SCCM: Fix Insufficient Permissions for Software Installation

This guide provides solutions to the error Insufficient permissions for software installation that appears when users attempt to install applications, task sequences, etc. from the Software Center.

When users require applications for their work, they typically open the Software Center and install them. In some cases, users may have to request ConfigMgr administrators to approve the application for installation. What if the approved application fails to install at the user end?

Recently, while performing an SCCM audit for an organization, I came across a weird issue where users reported that the applications failed to install from the software center, stating that they didn’t have permissions to install. Now that was a bit strange because users shouldn’t be restricted from installing the work apps from the software center.

The below screenshot shows the error message and description that the user sees in the Software Center when any application or TS is selected for installation. Insufficient Permissions for Software Installation. Your IT department has set restrictions for this software that prevent it from installing on your computer.

If you’re encountering the same issue in your Configuration Manager setup where the software center is preventing you from installing things, let’s see how to fix this.

Solution 1: Check Install Permissions in Client Settings

The primary reason why you encounter Insufficient Permissions for Software Installation in the software center is due to the incorrect install permissions defined in the client settings. Changing the installation permissions from No Users to All Users in the client policy resolves this issue.

During the audit, I noticed that one of the administrators had created a custom client policy and assigned it to the client computers. In this custom policy, when checking the installation permissions for users, it was set to No Users. This means that no users signed in to a client computer can install applications, software updates, and task sequences.

In the Configuration Manager console, navigate to Administration\Overview\Client Settings. Right-click the client policy that you’ve assigned to the users and select Properties. Select the Computer Agent tab and check the ‘Install Permissions‘ setting configured for users.

To allow the users to install applications, TS, and software updates from the Software Center, click the drop-down located next to the ‘Install Permissions‘ setting and select All Users. This should resolve insufficient permissions for the software installation issue for users.

After making the above changes to the client policy, you can trigger the Machine Policy Retrieval & Evaluation action cycle on the client computer. This forces the client to update the policy from the management point.

To verify if the issue is resolved, launch the software center on the client computer. Choose the Applications tab and select an application for installation. Now the software center should allow the app installation without any error prompts.

Solution 2: Check the AppLocker Logs in Event Viewer

Most organizations implement AppLocker to control the application installation. AppLocker helps you create rules to allow or deny apps from running based on information about the apps’ files.

If you have implemented AppLocker in your organization, there could be a possibility that it is preventing the users from installing the applications or anything from the Software Center.

So how do you determine if AppLocker is actually triggering insufficient permissions for software installation error in this case? The answer is by checking the AppLocker logs in Windows Event Viewer. Open Event Viewer, and go to Application and Services Logs > Microsoft > Windows > AppLocker.

Here, you can analyze the event logs to identify potential security concerns, troubleshoot issues with AppLocker policies and determine if the apps are being blocked for installation in the software center.