I've seen a couple of threads stating that AppLocker is preventing setup to install (even in administrator mode). None of those threads are useful, except we have to do a workaround by changing some registry keys, or disabling AppLocker temporary. The opener of those threads didn't really provide their configuration settings either, which can make it harder for AutoCad support reps to troubleshoot and not matching up our AppLocker configurations. In the end, the support reps claimed that it's working on their end and provided no fix.
Anyways, I decided to start a new thread and I've provided 2 screenshots of my AppLocker settings. Event log gave me this error during installer's splash screen:
The installation of C:\Users\some username\AppData\Local\Temp\_AI2F83.tmp\SetupRes\eval.msi is not permitted due to an error in software restriction policy processing. The object cannot be trusted.
I tried whitelisting this eval.msi file by either using a path rule, eval.msi's certificate, a hash rule from its file size, or simply all of them. Later, I found out that any rule will be useless. Why? It's because for some reason the installer (or some process) modifies eval.msi to the point it loses its certificate and the file size changed. Here's what I observed:
That's some of the info I have for you guys to troubleshoot. Let me know if you can reproduce the error. Again my AppLocker settings are in the attachments (all rules should be enforced).
With AutoCAD 2016 SP1, install fails with Applocker even for Admin - there is a file called '12' (no suffix, about 52 MB) in the temp directory that it's trying to install with the microsoft installer engine - probably the MSP file, disguised.
Autodesk, please would you test your installers as Admin, with Microsoft AppLocker MSI with just the standard three default rules provided by Microsoft, and in Enforce mode, before shipping, to eliminate any unusual MSI conditions that even Admins cannot install?