Windows installer service could not be accessed - security clampeddown installation.

[BertieBigBollox]

Got a windows XP installation that we clamp down using the policies
provided in the NSA guidelines.

Trouble is our installtion sometimes needs to do updates. When this
runs we get the following error:-

'Windows Installer Service could not be accessed. This can occur if
running in safe mode or windows installer is not correctly installed.'

Tried manually starting the windows installer service but that doesnt
help.

Obviouslty, some part of the windows clampdown is causing this but I
dont know which part?

 

[Jonathan Boyko]

Ehlo (e-mail address removed),
Is the user you're running installation under a local administrator?

---
Sincerely,
Jonathan M. Boyko,
TMidEast.Com.



b> Got a windows XP installation that we clamp down using the policies
b> provided in the NSA guidelines.
b>
b> Trouble is our installtion sometimes needs to do updates. When this
b> runs we get the following error:-
b>
b> 'Windows Installer Service could not be accessed. This can occur if
b> running in safe mode or windows installer is not correctly
b> installed.'
b>
b> Tried manually starting the windows installer service but that doesnt
b> help.
b>
b> Obviouslty, some part of the windows clampdown is causing this but I
b> dont know which part?
b>

 

[BertieBigBollox]

Ehlo (e-mail address removed),
Is the user you're running installation under a local administrator?

---
Sincerely,
Jonathan M. Boyko,
TMidEast.Com.

b> Got a windows XP installation that we clamp down using the policies
b> provided in the NSA guidelines.
b>
b> Trouble is our installtion sometimes needs to do updates. When this
b> runs we get the following error:-
b>
b> 'Windows Installer Service could not be accessed. This can occur if
b> running in safe mode or windows installer is not correctly
b> installed.'
b>
b> Tried manually starting the windows installer service but that doesnt
b> help.
b>
b> Obviouslty, some part of the windows clampdown is causing this but I
b> dont know which part?
b>

Yep. Admininstrator.

 

[Jonathan Boyko]

Ehlo (e-mail address removed),
Okay.

So, by security, I suppose you mean group policy? In what environment is
the computer located (domain?)?

If the computer is under group policy, could you disable GPO for this computer
and refresh its policies (gpupdate /force)?

---
Sincerely,
Jonathan M. Boyko,
TMidEast.Com.



b> Yep. Admininstrator.
b>

 

[BertieBigBollox]

Ehlo (e-mail address removed),
Okay.

So, by security, I suppose you mean group policy? In what environment is
the computer located (domain?)?

If the computer is under group policy, could you disable GPO for this computer
and refresh its policies (gpupdate /force)?

Computer is standalone.

 

[Jonathan Boyko]

Ehlo (e-mail address removed),
Do you get any errors in Event Viewer regarding this? Under either System
or Application, I believe the source is something similar to MSIEXEC.

---
Sincerely,
Jonathan M. Boyko,
TMidEast.Com.



b> Computer is standalone.
b>

 

[PA Bear [MS MVP]]

WinXP SP2 or SP3?

Is this happening on all (WinXP) computers where the NSA guidelines are in
place?

What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)? Were any of these applications running
in the background when you put the NSA guidelines in place?

Has a(another) Norton or McAfee application ever been installed on this
machine (e.g., a free-trial version that came preinstalled by the OEM
manufacturer)?