After you upgrade to Windows Installer version 2.0, the Windows Installer Service may not start, and you may receive the following error message: Note This behavior does not occur in the following products:

•	Microsoft Windows XP
•	Microsoft Windows Millennium Edition
•	Microsoft Windows 98

Back to the top

This behavior can occur when either of the following conditions exist:

•	In the DCOM permissions, the default authentication level is set to None, and the default Impersonation level is set to Anonymous.
•	The system account does not have Full permissions on a folder or registry key that the Windows Installer is trying to access. This is NTFS-specific.

Back to the top

Depending on the issue, use one or all of the following methods:

•	Method 1: Unregister and re-register Windows Installer.
•	Method 2: Verify the DCOM permissions.
•	Method 3: Give Full Control permission to the SYSTEM account.
•	Method 4: Verify the registry permissions.
•	Method 5: Fix the broken security key for the MsiServer service.

Before you begin: Verify that the service pack is installed

If you are using Windows 2000, make sure that SP 2 is installed.
If you are using Windows NT 4.0, make sure that SP 6 is installed.

If you do not install the appropriate service packs, the steps in the "More Information" section of this article may not work as expected.

Back to the top

Method 1: Unregister and re-register the Windows Installer

1.	Click Start, click Run, type MSIEXEC /UNREGISTER, and then click OK. Even if you do this correctly, it may look like nothing occurs.
2.	Click Start, click Run, type MSIEXEC /REGSERVER, and then click OK. Even if you do this correctly, it may look like nothing occurs, or you may briefly see an hourglass. After you run this command, the operation is complete.
3.	Try your Windows Installer-based application again.

Back to the top

Method 2: Verify the DCOM permissions

This method involves changing the DCOM default impersonation level to Identify, removing the Msisip.dll file, and then reinstalling SP 3 for Windows 2000.

To do this, follow these steps:

1.	Click Start, click Run, type dcomcnfg, and then click OK.
2.	On the Default Properties tab: a. In the Default Authentication Level list, click Connect. b. In the Default Impersonation Level list, click Identify, and then click OK.
3.	Click Start, click Run, type explorer /select, %windir%\system32\msisip.dll, and then click OK.
4.	Rename the Msisip.dll file as Msisip.old.
5.	Reinstall Windows 2000 Service Pack 3.

Back to the top

Method 3: Give Full Control permission to the SYSTEM account

1.	Start Windows Explorer, right-click the computer's root hard drive, and then click Properties.
2.	Click the Security tab, and then click Add.
3.	In the Select Users, Computers, or Groups dialog box, click the SYSTEM account, click Add, and then click OK.
4.	Under Allow, click to select the Full Control check box, and then click OK.
5.	Click the TEMP folder and then verify that the SYSTEM account has full control.

Back to the top

Method 4: Verify the registry permissions

1.	Click Start, click Run, then type Regedt32.
2.	For each of the registry hives, follow these steps: a. Select the hive. b. For Windows XP, on the Edit menu, click Permissions. For Windows 2000 and Windows NT 4, on the Security menu, click Permissions.
3.	Verify that the SYSTEM account has been added and that it has Full control. If it does not, add the SYSTEM account with Full control.

Back to the top

Method 5: Fix the broken security key for the MsiServer service

1.	Start the computer by using Windows 2000.
2.	Click Start, click Run, type regedit.exe, and then rename the following key to Old_Security: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSIServer\Security
3.	Restart the computer (you must do this).
4.	Run Instmsiw.exe for installer 2.0 again; this corrects the broken security key for the MSI service.

Back to the top