msiexec access denied

Page 1 of 3 123 LastLast

  1. Posts : 10
    Windows 10 Enterprise

    msiexec access denied


    Having got my new OC (10 Enterprise). I've done all the updating it required so it's fully up to date. I started to install all my programs. A few days later the install programs stopped working, both msi and exe. From what I can tell it's "msiexec.exe" which has some how become unstartable. I can't unregister it or register it. I can't start the service manually.

    Searching the forum, seem to tell me it's a common problem. I've seen the msifile.reg and looked at that and all the registers are all ready there on my system. So I ran the reg file anyway, but one or more of them failed, it complained about some entries could not be written and with trial and error I traced it to "[HKEY_CLASSES_ROOT\Msi.Package\shellex\PropertySheetHandlers\ShimLayer Property Page] @="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}". I can not make any alteration to this register.

    I've run sfc /scannow, no problems.

    The various error messages I get are...

    "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item." When I run an msi.

    "Failed to run msiexec.exe." When I run either classicshell.exe or openshell.exe.

    But I can run the install exes of Audacity, cdbxp and the gimp.

    On trying to start the installer service I get "Windows could not start the Windows installer service on Local Computer. Error 5: Access is denied."

    The Install and Uninstall troubleshooter, found no problems.

    Antivirus was disabled.

    My account has admin rights and things were run as admin where I could.

    So what the heck is stopping msiexec from running?

    Thank You.
      My Computer

  2. Posts : 6,908
    windows 10

    Welcome to the forum. when you look at the service what is it logging in as?
      My Computer

  3. Posts : 10
    Windows 10 Enterprise
    Thread Starter

    The "Log On" part of the msiexec properties is greyed out.
      My Computer

  4. Posts : 504
    Windows 10

    Hi Ian,

    My first post. Long time reader and I finally plucked up the courage to join.

    I see you're having permission problems. Strange isnt it how we build or buy our own machine, buy Windows, pay through the nose for 2 year broadband contracts, yet we still dont have any permissions to change deep settings like we want, annoying !
    Even though we think we are the administrator, after a fresh install, the Trusted Platform/Trusted Installer is the main owner of the permission rules which stops you from doing anything. So even if you do change a permission here or there, Win 10's crafty scheduled tasks through maintenance and diagnostics will detect say, a few services you changed and put them back to how they were before you messed with it. Cant we mess with our own computers? If i want to delete the system folder on my own machine, i should be able to.
    Okies my fix is pretty straight forward with some mouse clicking patience.

    First make sure you have a password setup, sorry if you've already have. Then goto Windows 'services' and scroll down to 'IPsec Policy Agent' Make sure this is started or triggered and running. If not, thats the first reason why all of a sudden you dont have access. If you dont have the permissions to enable that service, you could do what i tried after.

    I went to File Explorer, so i could see the main C drive. Right clicked to properties and went to the security tab. Have a good look in there and see whats going on. On a single user machine at home you only need 2 users. Yourself and 'SYSTEM'. Everything else can go and do one.

    What i do then is goto the 'advanced' tab at bottom of security. You'll now see 'TrustedInstaller (SYSTEM)' who has control/ownership. I now add myself to the list because 99% chance your Admin name isnt in the list by clicking 'Select a principal' at top. Then goto 'Object Types'. Take the ticks out of all boxes accept 'Users' and click ok.
    Now click the 'Advanced' tab and then 'Find Now'. Your Admin name should be easy to find now and select. Give yourself Full Control of everything with all Subfolders and all. Leave the box empty at the bottom, says "Only apply these permissions to objects and/or containers within this container"... Now click OK. You should see your admin entry with 'allow and 'full control'. So now goto bottom and tick the box which says 'Replace all child object permissions with inheritable perms from you'
    This is now where you have full control of all the deeper files and keeping the SYSTEM/TrustedInstaller as the owner. That keeps Windows 10 happy for now.

    So now you can delete and remove all other users/entries/junk/crap that shouldnt be there, apart from yourself and 'SYSTEM' of course.
    This should give you back control of msi installer files. See, if you try and replace ownership of TrustedInstaller straight away, it'll throw up denied access to a number of files and also corrupt the Recycle bin. Also you'll get a black screen after first login attempt.

    Okies Ian, hope i can help you here. Once your permissions are back I would go into the 'gpedit.msc' policy settings, theres so much to mess about with in there. Its really powerful. Also have a look through the Windows Task Schedular in 'Computer Management.

    Good luck
    Last edited by Pluginz; 07 Sep 2019 at 18:11. Reason: Spelling/Grammar
      My Computer

  5. Posts : 10
    Windows 10 Enterprise
    Thread Starter

    Very frustrating I'm still getting "Failed to run msiexec.exe.
      My Computer

  6. Posts : 505
    Windows 10 Home

    Press the Windows and "R" keys simultaneously, type "rstrui" into the "Open" box, click "OK" and see if there is a restore point that predates your problem.

      My Computer

  7. Posts : 10
    Windows 10 Enterprise
    Thread Starter

    The only restore point is the one I took after all the updates had completed and before I started to install my programs, restoring my emails and restoring BOINC.

    This is the second time I've started afresh after the same problem the first time, where I couldn't install BOINC. I was going around in circles the first time and eventually gave up and started again with a fresh install, only to find it's happening yet again.
      My Computer

  8. Posts : 913

    Try to set Windows Installer Service (msiserver) permissions using the following regfile:

    Windows Registry Editor Version 5.00
    msiexec access denied Attached Files
      My Computer

  9. Posts : 10
    Windows 10 Enterprise
    Thread Starter

    Sorry, but I got "Failed to run msiexec.exe" again.
      My Computer

  10. Posts : 913

    Apologies, I did not mention restart may be needed...

    - apply regfile again
    - restart immediately
    - try to install something

    If this fails, you need to compare with different system:
    - permissions & details of file system32\msiexec.exe
    - contents of registry key CurrentControlSet\Services\msiserver & its subkey
      My Computer


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 22:19.
Find Us

Windows 10 Forums