System administrator has set policies to prevent this installation

Last week while installing an application, I got an error – The system administrator has set policies to prevent this installation. The application installation failed and I wasn’t sure what polices were preventing the installation.

On my Windows 10 virtual machine, I got this error when I was installing a software that was a .msi installer. The installer wasn’t corrupt and I downloaded the installer again but I got the same error.

First of all check if the antivirus is blocking the installation. This could occur because some antivirus softwares set very strict rule when it comes to installing applications. Therefore temporarily disable the antivirus software running on the computer and check if you can install the software.

In my case my initial suspect was antivirus that could prevent this installation but no it wasn’t the antivirus.

Furthermore the .msi installer was downloaded from a trusted source and I also made sure that UAC was off.

System administrator has set policies to prevent installation

If you are also experiencing the same error then I hope the steps mentioned in this post will surely help you.

In my case I resolved this issue by enabling the Windows installer setting in the Windows Software Restriction Policy.

In addition to that I also created a new software restriction policy and applied it to All users except local administrators.

System administrator has set policies to prevent installation

To fix the error System administrator has set policies to prevent this installation :-

  • Login to the system with an administrator account.
  • Click Start > Run. Enter gpedit.msc.
  • This brings up the Local Group Policy Editor.
  • Expand Computer Configuration > Administrative Templates > Windows Components > Windows Installer.
  • On the right pane edit the policy setting – Turn off Windows Installer.

Enable turn off windows installer

On the Turn off Windows Installer setting box, click Enabled. Under Options > Disable Windows Installer – Click the drop-down and select Never.

Click Apply and OK.

Enable turn off windows installer

In the group policy editor, expand Windows Settings > Security Settings > Software Restriction Policies. Right click Software Restriction Policies and click New Software Restriction Policies.

System administrator has set policies to prevent installation

On the right pane, right click Enforcement and click Properties. In the Enforcement properties box, look for Apply software restriction policies to the following users.

Select All users except local administrators. Click OK.

Close the group policy editor.

System administrator has set policies to prevent installationLaunch the command prompt as administrator and run gpupdate /force. Finally once the policy gets updated, re-run the installer.

In my case after performing the above steps, I did not see the error again.

Fix System administrator has set policies – Registry Method

If you are running operating systems that are Home versions, the Group Policy Editor is not available. Hence you cannot use the above steps. In such cases, we will tweak the registry to fix this issue.

Here are steps for editing the registry

  • Click Start > Run and type regedit and click OK. This opens the registry editor.
  • Navigate to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer
  • Right click DisableMSI and click Modify. Change the value to 0
  • Close the Registry Editor
  • Log off and login back to the machine.
Related Posts
Oldest Most Voted
Inline Feedbacks
View all comments

Thank you so much!!


I tried the first safe solution but it did’t work


Hi, Prajwal ! Thank You very match ! It’s work ! ) I sincerely wish you good luck and happiness in such a difficult time ! ))


This does not work for me. There is no registry key:



Domain controller?

HaRi Singh

I have tried out both methods, but the solution was not in my favor. I’m not sure If I’m supposed to update the windows to get rid of it.

Arnold A

How to reverse this I uninstalled the software and now no more internet. Blocked everything.


thanks.. it works for me..


Worked for me as well. I’m a local admin on a 2016 server, but I could not install a Skype plugin.


small typo… or BIG
the command line should be “gpupdate /force” not gpudpate /force




I see a lot of people getting fired for messing with group policy. There is a reason why it was set. Regular people should not be installing anything. People are the weakest link. On your own PC, that’s fine. On a company PC sure if you want to risk losing your job.

Marek Belan

Just small thing you dont need run elevated cmd for gpupdate 🙂

But question is how this setting go to your systems.

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept Read More