Windows Installer Help

Windows Help  > Windows Installer Help  > Method 7: Ensure that DCOM and System Permissions are Correct
Windows Help

Method 7: Ensure that DCOM and System Permissions are Correct

Windows Installer service may fail to start and the following error message may be displayed after you upgrade to Windows Installer 2.0:

The Windows Installer Service could not be accessed. This can occur if you are running Windows in safe mode, or the Windows Installer is not correctly installed. Contact your support personnel for assistance.

Cause of Error

This error is generated in one of the following conditions:

  • In DCOM permissions:
    • Default authentication level is set to None
    • Default Impersonation level is set to Anonymous.
  • Windows Installer tries to access a folder or a registry key to which the system account does not have Full permissions. (NTFS-specific error)

Note: This error does not occur on Microsoft Windows XP, Microsoft Windows Millennium Edition, and Microsoft Windows 98 computers.

Resolution Steps

You need to resolve the error depending on the cause. Discussed below are the methods that you may use to resolve this problem.

However, before you proceed, ensure the following:

  • On a Windows 2000 computer Service Pack 2 is installed.
  • On a Windows NT computer, Service Pack 6 is installed.

Depending on the issue, use one or all of the following methods:

Method 1: Unregister and Then Re-register Windows Installer

  1. Open Start menu and then select Run.
  2. To unregister Windows Installer, in the Open box, type the following command and then select OK.

    msiexec /unregister

  3. To re-register Windows Installer, in the Open box, type the following command and then select OK.

    msiexec /regserver

  4. Attempt to use the Windows Installer application again.

Method 2: Ensure that Appropriate DCOM Permissions are given to the System Account

  1. Open Start menu, select Run, type dcomcnfg, and then click the OK button.
  2. On the Default Properties tab, do the following:
    1. Select Connect from the Default Authentication Level list.
    2. Select Identify in the Default Impersonation Level list, and then click the OK button
  3. Open Start menu again, select Run, type the following command and the select OK.

    explorer /select, %windir%\system32\msisip.dll

  4. Locate and rename the Msisip.dll file to Msisip.bak.
  5. Finally, reinstall Windows 2000 Service Pack 3 on your Windows 2000 computer.

Method 3: Ensure the SYSTEM Account has Full Control Permission

  1. Open the Windows Explorer window, right-click the computer's root hard drive (C: by default), and then select the Properties command.
  2. On the Security tab, and then click the Add button.
  3. In the Select Users, Computers, or Groups dialog box the opens, select the SYSTEM account, click Add, and then click the OK button.
  4. In the Allow column, select the Full Control check box, and then click the OK button.
  5. Finally, navigate to Temp folder, open its properties box, and then on the Security tab, verify that the SYSTEM account has full control on the folder.

Method 4: Verify the registry permissions

  1. Open Start menu, select Run, in the Open box type regedit, and then click the OK button.
  2. In the Registry Editor window that opens, do the following depending on your operating system:
    • On Windows NT, open the Edit menu, select the Permissions command
    • On Windows 2000, open the Security menu, select the Permissions command
  3. In the dialog box that opens ensure that the SYSTEM account is there in the Group or user name section and that it has Full Control permission. If the SYSTEM account is not here, add it and enable Full Control permissions for it.

Method 5: Fix the broken security key for the MsiServer service

  1. Open your Windows 2000 computer.
  2. Open Start menu, select Run, in the Open box type regedit, and then click the OK button.
  3. Navigate to the following registry key:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSIServer\Security

  4. Here, rename Security to Old_Security.
  5. Restart the computer.
  6. Run the Instmsiw.exe file for Windows Installer 2.0 again to resolve the problem with broken key for the MSI service.


Copyright © 2008 WindowsHelp.net All rights reserved | Privacy Policy | Contact us at infowindowshelp.net