PowerShell
"System administrator has set policies to prevent this installation" error when installing PowerShell 7.4.5 on Windows 11 as admin on a non-domain machine...
Prerequisites
- [X] Write a descriptive title.
- [X] Make sure you are able to repro it on the latest released version
- [X] Search the existing issues.
- [X] Refer to the FAQ.
- [X] Refer to Differences between Windows PowerShell 5.1 and PowerShell.
Steps to reproduce
I am encountering an issue when trying to install PowerShell 7.4.5 on a Windows 11 system using the MSI installer (PowerShell-7.4.5-win-x64.msi). Upon running the installer, I receive an error message stating, "The system administrator has set policies to prevent this installation."
I am logged in as an administrative user, I have unblocked the file
Steps to Reproduce:
- Download the PowerShell 7.4.5 MSI installer (PowerShell-7.4.5-win-x64.msi) from the official GitHub release page.
- Run the installer on a Windows 11 machine.
- Observe the error message.
The certificate does appear revoked, please see screenshot.
Expected behavior
The installer should run and install PowerShell 7.4.5 without displaying the error, assuming proper administrative privileges.
Actual behavior
An error dialog appears with the message: "The system administrator has set policies to prevent this installation.
Error details
=== Verbose logging started: 2024-08-23 14:23:32 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\Windows\system32\msiexec.exe ===
MSI (c) (74:E0) [14:23:32:749]: Font created. Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg
MSI (c) (74:E0) [14:23:32:750]: Font created. Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg
MSI (c) (74:F8) [14:23:32:765]: Resetting cached policy values
MSI (c) (74:F8) [14:23:32:765]: Machine policy value 'Debug' is 0
MSI (c) (74:F8) [14:23:32:765]: ******* RunEngine:
******* Product: PowerShell-7.4.5-win-x64.msi
******* Action:
******* CommandLine: **********
MSI (c) (74:F8) [14:23:32:766]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (74:F8) [14:23:32:782]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi' against software restriction policy
MSI (c) (74:F8) [14:23:32:782]: SOFTWARE RESTRICTION POLICY: C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi has a digital signature
MSI (c) (74:F8) [14:23:32:869]: SOFTWARE RESTRICTION POLICY: C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi is not permitted to run at the 'unrestricted' authorization level.
MSI (c) (74:F8) [14:23:32:869]: SOFTWARE RESTRICTION POLICY: C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi was disallowed because a required certificate in its digital signature has been revoked by its issuer (status = 0x800B010C). The returned execution level was 0
MSI (c) (74:F8) [14:23:32:869]: The installation of C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi is not permitted by software restriction policy. The Windows Installer only allows installation of unrestricted items. The authorization level returned by software restriction policy was 0x0 (status return 0x800b010c).
MSI (c) (74:F8) [14:23:32:869]: Note: 1: 1718 2: C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi
MSI (c) (74:F8) [14:23:32:869]: MainEngineThread is returning 1625
=== Verbose logging stopped: 2024-08-23 14:23:32 ===
Environment data
The system is running Windows 11.
The MSI installer was run from an elevated command prompt.
The error appears despite having administrative privileges.
I checked Group Policies, but no explicit restrictions seem to be in place for MSI installations.
The error might be related to a certificate issue, as indicated by the log entry 0x800B010C, which suggests that a required certificate in the digital signature has been revoked.
Visuals
Same issue affects Macs using the .pkg installer. Apple's built-in security policy prevents installation unless you go to the Privacy & Security page in the macOS Settings app and override the policy.
Same issue affects Macs using the .pkg installer. Apple's built-in security policy prevents installation unless you go to the Privacy & Security page in the macOS Settings app and override the policy.
This will only get worse in a few weeks when macOS Sequoia is released.
This will only get worse in a few weeks when macOS Sequoia is released.
https://9to5mac.com/2024/08/06/macos-sequoia-makes-it-harder-to-run-apps-that-dont-follow-apples-security-rules/
9to5Mac
macOS Sequoia is introducing a small change to the way certain apps can be opened, bringing new protection but also potentially annoyance too.
