How to Deal with the“The installation is forbidden by system policy” Error on Windows

Error code 1625, also known as “The installation is forbidden by system policy” error, may appear during program installation when Microsoft-related software (e.g., Windows Installer) runs, during Windows startup or shutdown, or while installing the operating system. This error comes up if a security policy on the computer has been enabled, and you may need to adjust the setting and login as an Administrator to make the changes. Knowing when and where this error occurs is crucial for troubleshooting.

What is “The installation is forbidden by system policy” Error?

Device drivers are one of the most important components of the Windows operating system, as they allow software and hardware to communicate correctly. While some devices, such as dedicated graphics cards, can work minimally without them, the absence of drivers might prevent hardware from working.

Since we are talking about wireless adapter drivers here, the “This installation is forbidden by system policy” error would prevent major functions of this device, including WiFi, as well as Bluetooth connections. Without a doubt, if no ethernet is available to replace WiFi connection, this might become a major issue, as internet connection would simply not be accessible.

The error “This installation is forbidden by system policy” can occur not only when installing wireless drivers. Users said that they received the same error when installing Autocad (Error code 1625, 509), Python[2] (0x80070659), mouse drivers (G500), and other software.

The group policies that can cause this error can be either local policies or domain policies. The locations of the policies you will want to check are:

• Computer Configuration > Administrative Templates > Windows Components > Windows Installer
• Computer Configuration > Policies > Windows Settings > Security Settings > Software Restriction Policies

As the error message suggests, the reason for it to occur is insufficient rights to install new software, regardless if it is drivers or applications. While it may seem that running the installer as administrator might suffice, it is usually not the case here (although you should definitely try it as a first solution), so other permission settings need to be altered.

There are several different ways to change permissions on a Windows computer – most users are not aware of those policies as they rarely need to use them (since default settings usually work pretty well). Below you will find several methods on how to fix “This installation is forbidden by system policy” error, which consequently will allow you to install the software in question.

Check out the causes of Error code 1625 in QuickBooks. List of causes is given below

• You’re not signed in as an administrator
• Your Windows Installer framework arrangement prevents you from introducing carefully marked programming refreshes.
• Corrupt download or fragmented establishment of Windows Installer programming.
• Corruption in Windows registry from a current Windows Installer-related programming change (introduces or uninstall).
• Virus or malware disease that has corrupted Windows framework records or Windows Installer-related program documents.
• Another program erroneously erased Windows Installer-related records.

How to Fix “The installation is forbidden by system policy” Error

Fix #1: Update Your Device Drivers.

To repair a damaged system, you need to update your device drivers. You can either install the latest versions of the drivers manually or use third-party driver updating tools like driver updater that are designed to simplify the process. It’s essential to choose a reputable tool, as it can help in backing up all the existing drivers and installing the correct ones automatically. Properly updating drivers can help to eliminate issues such as incompatible or corrupted drivers that might cause system errors, crashes, or other problems.

Fix #2. Edit Local Group Policy.

One of the easiest ways to change permissions on your Windows is to edit Group Policy. Here’s how:

1. Type in gpedit.msc in Windows search and press Enter
2. Once Group Policy opens, navigate to the following location:
3. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Installer.
4. On the left side of the window, double-click the Prohibit non-administrators from applying vendor signed updates entryOpen Group Policy Editor.
5. In the new window, select Disabled.
6. Click Apply and OK. Edit Group policy 2.

Note: Ensure you are logged in as an administrator for these and the rest of the policies to be changed without issues.

Fix #3. Check Local Security Settings.

1. Type in Control Panel in Windows search and press Enter
2. Under View by, select Small icons from the drop-down menu
3. Pick Administrative ToolsView small icons
4. Double-click Local Security PolicyLocal Security Policy
5. Once the new window opens, click on Software Restriction Policies on the left. You should see the following text on the right:
6. No Software Restriction Policies Defined
7. Now right-click on Software Restriction Policies and pick New Software Restriction Policies
8. Double-click on Enforcement on the right
9. Tick the All users except local administrators optionEdit Local Security policy
10. Click Apply and OK.

Fix #4. Enable Windows Installer service.

1. Type in services.msc in Windows search or Run dialog (Win + R) and press Enter.
2. In the Services window, scroll down until you reach Windows Installer service.
3. Right-click on it and select Start Windows Installer service.

Close down Services and see if that helped you to remove “This installation is forbidden by system policy” error.

Fix #5. Change BIOS settings

This method helped users who were unable to install wireless drivers due to the error. For that, you need to access your BIOS:

1. Reboot your computer
2. Before the login screen animation, spam F2, F8, Del, Esc, or another button (depends on your motherboard manufacturer) on your keyboard
3. Once in BIOS, you will have to change Wireless settings
4. Go to Wireless Switch and remove the ticks from WLAN and Bluetooth options
5. Go to Wireless Device Enable and tick WLAN and Bluetooth to enable them
6. Reboot your PC.

Fix #6. Change Windows registry.

Warning: Editing the Windows registry can be risky. You should always backup your registry before making any changes. Incorrectly modified registry settings can cause system instability or even failure. If you’re not comfortable with these steps, it may be best to consult a professional or seek assistance from knowledgeable sources.

1. Type in regedit.msc in Windows search or Run dialog and press Enter
2. When User Account Control shows up, click Yes
3. Navigate to the following location:
4. HKLM\\Software\\Policies\\Microsoft\\Windows\\Installer
5. If you can’t see DisableMSI entry on the right, proceed with the following:Modify Windows Registry
6. Right-click on the empty space on the right side of the window and select New > DWORD (32-bit) Value
7. Name it DisableMSI and double-click it
8. Set Value to 0 and click OKModify Windows Registry 2
9. Close down the Registry Editor and see if this solution worked for you.

Fix #7: Disable UAC.

UAC is a Microsoft security tool that helps prevent intrusion of malicious software. It is not full-fledged anti-malware or an antivirus, but it does notify of changes that are about to be made to the computer. Disabling UAC is generally not recommended as it may reduce your system’s security. However, for troubleshooting specific application problems, temporarily disabling UAC may be necessary. Be sure to restore this security setting as soon as the issue is resolved, and consult professional guidance if you are uncertain.

To turn off UAC:

1. Type UAC into the Windows Start menu.
2. Click “Change User Account Control settings.”
3. Move the slider down to “Never Notify.”
4. Click OK and then restart the computer.

Wrapping Up

Like most Windows Installer errors the problem is not with the delivery mechanism (PDQ Deploy in this case) but with the environment. In this case, the installation of Adobe Reader has been blocked by Group Policy. In order to install or deploy Adobe Reader, the system policy must be modified.