Hi All,

I have a problem of installing the sccm clinet. below is the ccmsetup.log

Updated security on object C:\WINDOWS\system32\ccmsetup\.    ccmsetup    3/3/2010 3:34:01 PM    680 (0x02A8)
Sending Fallback Status Point message, STATEID='100'.    ccmsetup    3/3/2010 3:34:01 PM    680 (0x02A8)
State message with TopicType 800 and TopicId {BDA28960-FA3F-4598-84A7-FF1CA4B42178} has been sent to the FSP    FSPStateMessage    3/3/2010 3:34:02 PM    680 (0x02A8)
Running as user "SYSTEM"    ccmsetup    3/3/2010 3:34:02 PM    1620 (0x0654)
Detected 89387 MB free disk space on system drive.    ccmsetup    3/3/2010 3:34:02 PM    1620 (0x0654)
DetectWindowsEmbeddedFBWF() Detecting OS Version    ccmsetup    3/3/2010 3:34:02 PM    1620 (0x0654)
Client OS Version is 5.1, Service Pack Version 3    ccmsetup    3/3/2010 3:34:02 PM    1620 (0x0654)
Client OS is not a supported Windows Embedded Platform    ccmsetup    3/3/2010 3:34:02 PM    1620 (0x0654)
Successfully ran BITS check.    ccmsetup    3/3/2010 3:34:05 PM    1620 (0x0654)
IsFileMicrosoftTrusted Verified file 'C:\WINDOWS\system32\ccmsetup\ccmsetup.cab' is MS signed.    ccmsetup    3/3/2010 3:34:35 PM    1620 (0x0654)
Successfully extracted manifest file C:\WINDOWS\system32\ccmsetup\ccmsetup.xml from file C:\WINDOWS\system32\ccmsetup\ccmsetup.cab.    ccmsetup    3/3/2010 3:34:35 PM    1620 (0x0654)
Loading manifest file: C:\WINDOWS\system32\ccmsetup\ccmsetup.xml    ccmsetup    3/3/2010 3:34:35 PM    1620 (0x0654)
Successfully loaded ccmsetup manifest file.    ccmsetup    3/3/2010 3:34:35 PM    1620 (0x0654)
Couldn't get directory list for directory 'http://wmr-cmsec-adm.mzd.gahs/CCM_Client/ClientPatch'.  This directory may not exist.    ccmsetup    3/3/2010 3:34:36 PM    1620 (0x0654)
Adding file 'http://wmr-cmsec-adm.mzd.gahs:80/CCM_Client/i386/wimgapi.msi' to BITS job, saving as 'C:\WINDOWS\system32\ccmsetup\wimgapi.msi'.    ccmsetup    3/3/2010 3:34:36 PM    1620 (0x0654)
Adding file 'http://wmr-cmsec-adm.mzd.gahs:80/CCM_Client/i386/client.msi' to BITS job, saving as 'C:\WINDOWS\system32\ccmsetup\client.msi'.    ccmsetup    3/3/2010 3:34:36 PM    1620 (0x0654)
Couldn't get directory list for directory 'http://wmr-cmsec-adm.mzd.gahs/CCM_Client/i386/00000409'.  This directory may not exist.    ccmsetup    3/3/2010 3:34:36 PM    1620 (0x0654)
Starting BITS download for client deployment files.    ccmsetup    3/3/2010 3:34:36 PM    1620 (0x0654)
Download Update: Connecting to the server.    ccmsetup    3/3/2010 3:34:37 PM    1620 (0x0654)
Successfully completed BITS download for client deployment files.    ccmsetup    3/3/2010 3:35:04 PM    1620 (0x0654)
Successfully downloaded client files via BITS.    ccmsetup    3/3/2010 3:35:07 PM    1620 (0x0654)
Updated security on object C:\WINDOWS\system32\ccmsetup\.    ccmsetup    3/3/2010 3:35:07 PM    1620 (0x0654)
Couldn't verify 'C:\WINDOWS\system32\ccmsetup\wimgapi.msi' authenticode signature without revocation    ccmsetup    3/3/2010 3:35:38 PM    1620 (0x0654)
SSL Registry key Software\Microsoft\CCM not found, assuming Client SSL is disabled.    ccmsetup    3/3/2010 3:35:38 PM    1620 (0x0654)
Certificate doesn't have EKU, meaning good for all usages.    ccmsetup    3/3/2010 3:35:38 PM    1620 (0x0654)
IsMSSignedByFileHash Verified file 'C:\WINDOWS\system32\ccmsetup\wimgapi.msi' is MS signed.    ccmsetup    3/3/2010 3:35:38 PM    1620 (0x0654)
Running installation package
  Package:     C:\WINDOWS\system32\ccmsetup\wimgapi.msi
  Log:         C:\WINDOWS\system32\ccmsetup\wimgapi.msi.log
  Properties:  REBOOT=Suppress ALLUSERS=1    ccmsetup    3/3/2010 3:35:38 PM    1620 (0x0654)
Installation failed with error code 1625    ccmsetup    3/3/2010 3:35:39 PM    1620 (0x0654)
Sending Fallback Status Point message, STATEID='311'.    ccmsetup    3/3/2010 3:35:39 PM    1620 (0x0654)
State message with TopicType 800 and TopicId {846B32CA-9F66-400C-851D-EB8D69A6F73E} has been sent to the FSP   
FSPStateMessage    3/3/2010 3:35:39 PM    1620 (0x0654)

The bold is the error im getting.

error code 1625
This installation is forbidden by system policy.  Contact your system administrator.

Source: Windows

there is no group policies to stop the installation.i checked in the OU, Domain group policy & local for windows installer.

Why this client installation is failing?

Sanka

Running installation package
  Package:     C:\WINDOWS\system32\ccmsetup\wimgapi.msi
  Log:         C:\WINDOWS\system32\ccmsetup\wimgapi.msi.log
  Properties:  REBOOT=Suppress ALLUSERS=1    ccmsetup    3/3/2010 3:35:38 PM    1620 (0x0654)
Installation failed with error code 1625    ccmsetup    3/3/2010 3:35:39 PM    1620 (0x0654)
Sending Fallback Status Point message, STATEID='311'.    ccmsetup    3/3/2010 3:35:39 PM    1620 (0x0654)
[...]
Why this client installation is failing?

The logfile tells you where to look for errors ...

Thanks Torsten

below is the log file WIMGAPI.MSI.LOG

=== Verbose logging started: 3/3/2010  16:33:32  Build type: SHIP UNICODE 4.05.6001.00  Calling process: C:\WINDOWS\system32\ccmsetup\ccmsetup.exe ===
MSI (c) (4C:C8) [16:33:32:739]: Resetting cached policy values
MSI (c) (4C:C8) [16:33:32:739]: Machine policy value 'Debug' is 0
MSI (c) (4C:C8) [16:33:32:739]: ******* RunEngine:
           ******* Product: C:\WINDOWS\system32\ccmsetup\wimgapi.msi
           ******* Action:
           ******* CommandLine: **********
MSI (c) (4C:C8) [16:33:32:739]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (4C:C8) [16:33:32:739]: Grabbed execution mutex.
MSI (c) (4C:C8) [16:33:32:851]: Cloaking enabled.
MSI (c) (4C:C8) [16:33:32:851]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (4C:C8) [16:33:32:851]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (F4:D0) [16:33:32:867]: Running installation inside multi-package transaction C:\WINDOWS\system32\ccmsetup\wimgapi.msi
MSI (s) (F4:D0) [16:33:32:867]: Grabbed execution mutex.
MSI (s) (F4:38) [16:33:32:867]: Resetting cached policy values
MSI (s) (F4:38) [16:33:32:867]: Machine policy value 'Debug' is 0
MSI (s) (F4:38) [16:33:32:867]: ******* RunEngine:
           ******* Product: C:\WINDOWS\system32\ccmsetup\wimgapi.msi
           ******* Action:
           ******* CommandLine: **********
MSI (s) (F4:38) [16:33:32:883]: Machine policy value 'DisableUserInstalls' is 1
MSI (s) (F4:38) [16:33:32:995]: File will have security applied from OpCode.
MSI (s) (F4:38) [16:33:33:011]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\WINDOWS\system32\ccmsetup\wimgapi.msi' against software restriction policy
MSI (s) (F4:38) [16:33:33:011]: SOFTWARE RESTRICTION POLICY: C:\WINDOWS\system32\ccmsetup\wimgapi.msi has a digital signature
MSI (s) (F4:38) [16:33:33:011]: SOFTWARE RESTRICTION POLICY: C:\WINDOWS\system32\ccmsetup\wimgapi.msi is permitted to run because the user token authorizes execution (system or service token).
MSI (s) (F4:38) [16:33:33:011]: End dialog not enabled
MSI (s) (F4:38) [16:33:33:011]: Original package ==> C:\WINDOWS\system32\ccmsetup\wimgapi.msi
MSI (s) (F4:38) [16:33:33:011]: Package we're running from ==> C:\WINDOWS\Installer\454d3.msi
MSI (s) (F4:38) [16:33:33:044]: APPCOMPAT: looking for appcompat database entry with ProductCode '{721ABC3B-5F12-4332-9C0C-C11424EF666C}'.
MSI (s) (F4:38) [16:33:33:044]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (F4:38) [16:33:33:044]: MSCOREE not loaded loading copy from system32
MSI (s) (F4:38) [16:33:33:220]: Machine policy value 'TransformsSecure' is 0
MSI (s) (F4:38) [16:33:33:220]: User policy value 'TransformsAtSource' is 0
MSI (s) (F4:38) [16:33:33:236]: Machine policy value 'DisablePatch' is 0
MSI (s) (F4:38) [16:33:33:236]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (F4:38) [16:33:33:236]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (F4:38) [16:33:33:236]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (F4:38) [16:33:33:236]: APPCOMPAT: looking for appcompat database entry with ProductCode '{721ABC3B-5F12-4332-9C0C-C11424EF666C}'.
MSI (s) (F4:38) [16:33:33:236]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (F4:38) [16:33:33:236]: Transforms are not secure.
MSI (s) (F4:38) [16:33:33:236]: Note: 1: 2205 2:  3: Control
MSI (s) (F4:38) [16:33:33:236]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\system32\ccmsetup\wimgapi.msi.log'.
MSI (s) (F4:38) [16:33:33:236]: Command Line: REBOOT=Suppress ALLUSERS=1 CURRENTDIRECTORY=C:\WINDOWS\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=1868
MSI (s) (F4:38) [16:33:33:236]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{2DFC4520-E3CA-41C7-9217-032E026B3AC2}'.
MSI (s) (F4:38) [16:33:33:236]: Product Code passed to Engine.Initialize:           ''
MSI (s) (F4:38) [16:33:33:236]: Product Code from property table before transforms: '{721ABC3B-5F12-4332-9C0C-C11424EF666C}'
MSI (s) (F4:38) [16:33:33:236]: Product Code from property table after transforms:  '{721ABC3B-5F12-4332-9C0C-C11424EF666C}'
MSI (s) (F4:38) [16:33:33:236]: Product not registered: beginning first-time install
MSI (s) (F4:38) [16:33:33:236]: Product {721ABC3B-5F12-4332-9C0C-C11424EF666C} is not managed.
MSI (s) (F4:38) [16:33:33:236]: MSI_LUA: Credential prompt functionality not available on this operating system
MSI (s) (F4:38) [16:33:33:236]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (F4:38) [16:33:33:236]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (F4:38) [16:33:33:236]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (F4:38) [16:33:33:236]: Adding new sources is allowed.
MSI (s) (F4:38) [16:33:33:236]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (F4:38) [16:33:33:236]: Package name extracted from package path: 'wimgapi.msi'
MSI (s) (F4:38) [16:33:33:236]: Package to be registered: 'wimgapi.msi'
MSI (s) (F4:38) [16:33:33:236]: Note: 1: 2205 2:  3: Error
MSI (s) (F4:38) [16:33:33:236]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (F4:38) [16:33:33:236]: PROPERTY CHANGE: Adding ALLUSERS property. Its value is '1'.
MSI (s) (F4:38) [16:33:33:236]: Machine policy value 'DisableMsi' is 2
MSI (s) (F4:38) [16:33:33:236]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (F4:38) [16:33:33:236]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (F4:38) [16:33:33:236]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (F4:38) [16:33:33:236]: Rejecting product '{721ABC3B-5F12-4332-9C0C-C11424EF666C}': Msi is completely disabled.
MSI (s) (F4:38) [16:33:33:236]: Note: 1: 1708
MSI (s) (F4:38) [16:33:33:236]: Product: WIMGAPI -- Installation failed.

MSI (s) (F4:38) [16:33:33:236]: Windows Installer installed the product. Product Name: WIMGAPI. Product Version: 1.0.0.0. Product Language: 1033. Installation success or error status: 1625.

MSI (s) (F4:38) [16:33:33:252]: MainEngineThread is returning 1625
MSI (s) (F4:D0) [16:33:33:252]: No System Restore sequence number for this installation.
Info 1625. This installation is forbidden by system policy.  Contact your system administrator.
C:\WINDOWS\system32\ccmsetup\wimgapi.msi
MSI (s) (F4:D0) [16:33:33:252]: User policy value 'DisableRollback' is 0
MSI (s) (F4:D0) [16:33:33:252]: Machine policy value 'DisableRollback' is 0
MSI (s) (F4:D0) [16:33:33:252]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (F4:D0) [16:33:33:252]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (F4:D0) [16:33:33:252]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (F4:D0) [16:33:33:252]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (F4:D0) [16:33:33:252]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (F4:D0) [16:33:33:252]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (s) (F4:D0) [16:33:33:252]: Restoring environment variables
MSI (c) (4C:C8) [16:33:33:252]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (4C:C8) [16:33:33:252]: MainEngineThread is returning 1625
=== Verbose logging stopped: 3/3/2010  16:33:33 ===


sanka

There actually seems to be a policy that denies the install. To verify, check registry for:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer, DisableMSI.
A value of 2 like your log says will deny all installations of MSIs. Set value to 0 to allow.

• Marked as answer by Eric Zhang CHN Friday, April 09, 2010 7:50 AM

There actually seems to be a policy that denies the install. To verify, check registry for:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer, DisableMSI.
A value of 2 like your log says will deny all installations of MSIs. Set value to 0 to allow.

• Marked as answer by Eric Zhang CHN Friday, April 09, 2010 7:50 AM

I know that this is an old thread, but the issue may be due to not setting the option Program can run: whether or not a user is logged on. The application may have tried to install with user rights vs Run with administrative rights.