System administrator has set policies to prevent this installation

Last week while installing an application, I got an error – The system administrator has set policies to prevent this installation. The application installation failed and I wasn’t sure what polices were preventing the installation.

On my Windows 10 virtual machine, I got this error when I was installing a software that was a .msi installer. The installer wasn’t corrupt and I downloaded the installer again but I got the same error.

First of all check if the antivirus is blocking the installation. This could occur because some antivirus softwares set very strict rule when it comes to installing applications. Therefore temporarily disable the antivirus software running on the computer and check if you can install the software.

In my case my initial suspect was antivirus that could prevent this installation but no it wasn’t the antivirus.

Furthermore the .msi installer was downloaded from a trusted source and I also made sure that UAC was off.

System administrator has set policies to prevent installation

If you are also experiencing the same error then I hope the steps mentioned in this post will surely help you.

In my case I resolved this issue by enabling the Windows installer setting in the Windows Software Restriction Policy.

In addition to that I also created a new software restriction policy and applied it to All users except local administrators.

System administrator has set policies to prevent installation

To fix the error System administrator has set policies to prevent this installation :-

  • Login to the system with an administrator account.
  • Click Start > Run. Enter gpedit.msc.
  • This brings up the Local Group Policy Editor.
  • Expand Computer Configuration > Administrative Templates > Windows Components > Windows Installer.
  • On the right pane edit the policy setting – Turn off Windows Installer.

Enable turn off windows installer

On the Turn off Windows Installer setting box, click Enabled. Under Options > Disable Windows Installer – Click the drop-down and select Never.

Click Apply and OK.

Enable turn off windows installer

In the group policy editor, expand Windows Settings > Security Settings > Software Restriction Policies. Right click Software Restriction Policies and click New Software Restriction Policies.

System administrator has set policies to prevent installation

On the right pane, right click Enforcement and click Properties. In the Enforcement properties box, look for Apply software restriction policies to the following users.

Select All users except local administrators. Click OK.

Close the group policy editor.

System administrator has set policies to prevent installationLaunch the command prompt as administrator and run gpupdate /force. Finally once the policy gets updated, re-run the installer.

In my case after performing the above steps, I did not see the error again.

Fix System administrator has set policies – Registry Method

If you are running operating systems that are Home versions, the Group Policy Editor is not available. Hence you cannot use the above steps. In such cases, we will tweak the registry to fix this issue.

Here are steps for editing the registry

  • Click Start > Run and type regedit and click OK. This opens the registry editor.
  • Navigate to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer
  • Right click DisableMSI and click Modify. Change the value to 0
  • Close the Registry Editor
  • Log off and login back to the machine.

Need Assistance?

Send us a message or post your question in forums.

16 thoughts on “System administrator has set policies to prevent this installation”

  1. it didn’t work for me, i tried the third method > HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer

    But I don’t have a “installer” file or folder under Windows.

  2. This does not work for me. There is no registry key:


  3. I have tried out both methods, but the solution was not in my favor. I’m not sure If I’m supposed to update the windows to get rid of it.

  4. I see a lot of people getting fired for messing with group policy. There is a reason why it was set. Regular people should not be installing anything. People are the weakest link. On your own PC, that’s fine. On a company PC sure if you want to risk losing your job.

  5. Just small thing you dont need run elevated cmd for gpupdate 🙂

    But question is how this setting go to your systems.


Leave a Comment