Installation & Licensing

Reply
Member
neilgwood
Posts: 4
Registered: ‎02-15-2011
Message 1 of 17 (2,881 Views)
Accepted Solution

Forbidden installation with Windows 7 Enterprise, Applocker and Autodesk Product

2881 Views, 16 Replies
02-15-2011 04:35 AM

 

When I run setup.exe for 3DS Max Design 2011 or Navisworks 2011 on any of our domain connected Windows 7 machines, the program starts to initialise, but then comes up with the following message:

 

"This installation is forbidden by system policy. Contact your system administrator. #1"

 

followed by

 

"Fatal error during installation."

 

At which point setup.exe bombs out. In the Application Log, I get this message:

 

"The installation of C:\Users\username\AppData\Local\Temp\_random.tmp\SetupRes\eval.msi is not permitted due to an error in software restriction policy processing. The object cannot be trusted"

Source: MsiInstaller  Event ID: 1008

 

I have confirmed that this is caused by Applocker as I have tested with a machine that has all policies except Applocker and it works, but as soon as Applocker is turned on I get this error. We use Applocker policies which have been set to allow Admins to run all Windows Installer Files, Executables and Scripts on any Path. The Applocker event log doesn't show any errors to suggest it's blocking the program, but something must be causing a knock on effect to this install. I can also confirm that I do have a Software Restriction Policy turned on that applies to all except Administrators. This policy doesn't have any actual restrictions in it, but it has been suggested elsewhere that this is a possible cause of this error.

 

I can confirm that if the product has already been packaged using the packaging tool within the setup program, that the package installs ok. Of course, we can only get to the packaging tool through the setup program which doesn't run on our Windows 7 machines.

 

Finally, I have seen another post similar to this that suggests taking the machine off of the domain and trying a fresh install. Unfortunately, this is not an option to our users.

 

Any help would be very gratefully received.

Member
neilgwood
Posts: 4
Registered: ‎02-15-2011
Message 2 of 17 (2,679 Views)

Re: Forbidden installation with Windows 7 Enterprise, Applocker and Autodesk Pro

05-24-2011 02:05 AM in reply to: neilgwood

Noone of the Autodesk community volunteered an answer, but the Microsoft forum proved more fruitful:

 

http://social.technet.microsoft.com/Forums/en/winserverGP/thread/2ad92754-f01e-410e-97db-7a9bc81586d...

Alumni
Dwayne.Poot
Posts: 122
Registered: ‎09-08-2008
Message 3 of 17 (2,501 Views)

Re: Forbidden installation with Windows 7 Enterprise, Applocker and Autodesk Pro

08-17-2011 06:59 AM in reply to: neilgwood

Hi neilgwood;

 

   I know this reply is a bit on the late side but my manager asked me to contact you to see if we can be of any assistance. I read through the discussions you have here and with Microsoft and see that you were able to work around this issue via modifying some registry entries. I haven't experienced too many customers using the AppLocker so I'm glad that you were able to get some assistance from Microsoft.

 

  Were you looking for any change or modifications from the applicaiton end? If you would like any information or details form our end please let me know and we'll help as best as possible.

 

Dwayne

 



Dwayne Poot
Support Specialist
Product Support
Autodesk, Inc.


Member
neilgwood
Posts: 4
Registered: ‎02-15-2011
Message 4 of 17 (2,477 Views)

Re: Forbidden installation with Windows 7 Enterprise, Applocker and Autodesk Pro

08-18-2011 01:20 AM in reply to: Dwayne.Poot

Hi Dwayne,

 

Thank you for getting in touch. As you have seen, I do now have a workaround so I can get Autodesk products to install, but workarounds are never as ideal as actual fixes. I'm not 100% sure if the problem is with Autodesk or Applocker, but I haven't experienced the same problems with any other product I've installed in our Windows 7 environment so that suggests to me that your installer works in a slightly different way. I also know that it's not a oddity with our group policies as someone else was able to replicate the problem without knowing our set up.

 

As such, I can't just say "fix your product", but I will respectfully request that you look at how your setup program initialises and works with Applocker. As previously mentioned, if a custom installation of the product has already been packaged for deployment using the option in your setup program then it installs with no issues and this uses the same setup.exe to run. However, if it's a new install from the CD (or a network stored copy of the CD) then the setup.exe starts to initialise and then fails with the errors mentioned.

 

Thanks again for looking into this.

 

Regards

 

Neil

Alumni
Dwayne.Poot
Posts: 122
Registered: ‎09-08-2008
Message 5 of 17 (2,452 Views)

Re: Forbidden installation with Windows 7 Enterprise, Applocker and Autodesk Pro

08-24-2011 07:05 AM in reply to: neilgwood

Hi neilgwood

 

   Sorry for the delay, took a small vacation. I will log a case for you today and investigate this on our end.

 

dwayne



Dwayne Poot
Support Specialist
Product Support
Autodesk, Inc.


New Member
stuebing
Posts: 1
Registered: ‎11-08-2011
Message 6 of 17 (2,325 Views)

Re: Forbidden installation with Windows 7 Enterprise, Applocker and Autodesk Pro

11-08-2011 07:44 AM in reply to: Dwayne.Poot

Hello

i have the same problem with Autocad 2012

what is the workaround?

 

i have added the Autodesk certificate to our Applocker Polkicy,

but the eval.msi in the temp dir have no digital signature. Why?

 

we want deploy Autocad 2012 with our Software distribution on Windows 7 64 Enterprise

and to disable Applocker is no solution.

 

Have Autocad 2012 a windows 7 compatible logo, because i didn't find it in the Microsoft Library.

 

 

Alumni
Dwayne.Poot
Posts: 122
Registered: ‎09-08-2008
Message 7 of 17 (2,288 Views)

Re: Forbidden installation with Windows 7 Enterprise, Applocker and Autodesk Pro

11-15-2011 07:02 AM in reply to: stuebing

Hi All;

 

   We are currently testing App Locker in greater detail. We're experiencing issues reproducing this consistantly. I have tested several applications through standard install as well as deployments and I haven't had any issues while App locker was enabled. 

 

   That being said we have a couple defects logged that were submitted that were currently investigating so these might turn up some information that might help. If they send updates shortly I'll update the forum

 

Dwayne



Dwayne Poot
Support Specialist
Product Support
Autodesk, Inc.


Distinguished Contributor
chillme1
Posts: 159
Registered: ‎01-30-2008
Message 8 of 17 (2,239 Views)

Re: Forbidden installation with Windows 7 Enterprise, Applocker and Autodesk Pro

11-28-2011 06:19 AM in reply to: Dwayne.Poot

I have recenlty experienced this issue (after installing Win7 and all Autodesk socftware as recent as approximately six months ago) Now the error message appears and 2012 Autodesk software including AutoCAD Lite installatons are disallowed.

 

Please update this thread when a solution or workaround is available.

 

Additionally, I sent a request via Subscription Support pertaining to trying to resolve this issue.

Thanks for your comments,

Clint Hill
Member
neilgwood
Posts: 4
Registered: ‎02-15-2011
Message 9 of 17 (2,234 Views)

Re: Forbidden installation with Windows 7 Enterprise, Applocker and Autodesk Pro

11-28-2011 06:37 AM in reply to: chillme1

Hi Clint,

The workaround we use is a batch file, shown below, which makes the registry changes as suggested in the Microsoft forum, then pauses so you can separately run the Autodesk installer and then set the keys back after the install.

 

Hope this helps

 

Neil

 

REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Script /v EnforcementMode /t REG_DWORD /d 0 /f
REG ADD HKLM\SOFTWARE\WOW6432Node\Policies\Microsoft\Windows\SrpV2\Script
/v EnforcementMode /t REG_DWORD /d 0 /f

REG ADD HKLM\SYSTEM\CurrentControlSet\Control\Srp\Gp\Msi /v EnforcementMode /t REG_DWORD /d 0 /f

REG ADD HKLM\SYSTEM\CurrentControlSet\Control\Srp\Gp\Msi /v EnabledAttributes /t REG_DWORD /d 0 /f

PAUSE

REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Script /v EnforcementMode /t REG_DWORD /d 1 /f
REG ADD HKLM\SOFTWARE\WOW6432Node\Policies\Microsoft\Windows\SrpV2\Script
/v EnforcementMode /t REG_DWORD /d 1 /f

REG ADD HKLM\SYSTEM\CurrentControlSet\Control\Srp\Gp\Msi /v EnforcementMode /t REG_DWORD /d 1 /f

REG ADD HKLM\SYSTEM\CurrentControlSet\Control\Srp\Gp\Msi /v EnabledAttributes /t REG_DWORD /d 1 /f

 

New Member
jeremy.burke
Posts: 2
Registered: ‎02-22-2012
Message 10 of 17 (2,050 Views)

Re: Forbidden installation with Windows 7 Enterprise, Applocker and Autodesk Pro

02-22-2012 07:59 AM in reply to: neilgwood

Can anyone provide an update on a resolution, not just a workaround?

 

I have installed 50+ other applications and have had no issues with Applocker.  This problem is clearly related to Autodesk installers.

 

Thanks

Jeremy

You are not logged in.

Log into access your profile, ask and answer questions, share ideas and more. Haven't signed up yet? Register

Announcements
Are you familiar with the Autodesk Expert Elites? The Expert Elite program is made up of customers that help other customers by sharing knowledge and exemplifying an engaging style of collaboration. To learn more, please visit our Expert Elite website.

Need installation help?

Start with some of our most frequented solutions to get help installing your software.

Ask the Community


Up & Ready Blog

Boldly Install, Configure and Deploy Autodesk Software.

AutodeskHelp Blog

Your one-stop shop for the latest solutions, breaking news, and behind the scenes access to the world of Autodesk support.

Connect with Us

Twitter

Pinterest

Blog

Youtube