- Microsoft Windows XP
- Microsoft Windows Millennium Edition
- Microsoft Windows 98
- In the DCOM permissions, the default authentication level is set to None, and the default Impersonation level is set to Anonymous.
- The system account does not have Full permissions on a folder or registry key that the Windows Installer is trying to access. This is NTFS-specific.
- Method 1: Unregister and re-register Windows Installer.
- Method 2: Verify the DCOM permissions.
- Method 3: Give Full Control permission to the SYSTEM account.
- Method 4: Verify the registry permissions.
- Method 5: Fix the broken security key for the MsiServer service.
Before you begin: Verify that the service pack is installedIf you are using Windows 2000, make sure that SP 2 is installed.
If you are using Windows NT 4.0, make sure that SP 6 is installed.
If you do not install the appropriate service packs, the steps in the "More Information" section of this article may not work as expected.
Method 1: Unregister and re-register the Windows Installer
- Click Start, click Run, type MSIEXEC /UNREGISTER, and then click OK. Even if you do this correctly, it may look like nothing occurs.
- Click Start, click Run, type MSIEXEC /REGSERVER, and then click OK. Even if you do this correctly, it may look like nothing occurs, or you may briefly see an hourglass. After you run this command, the operation is complete.
- Try your Windows Installer-based application again.
Method 2: Verify the DCOM permissionsThis method involves changing the DCOM default impersonation level to Identify, removing the Msisip.dll file, and then reinstalling SP 3 for Windows 2000.
To do this, follow these steps:
- Click Start, click Run, type dcomcnfg, and then click OK.
- On the Default Properties tab:
- In the Default Authentication Level list, click Connect.
- In the Default Impersonation Level list, click Identify, and then click OK.
- Click Start, click Run, type explorer /select, %windir%\system32\msisip.dll, and then click OK.
- Rename the Msisip.dll file as Msisip.old.
- Reinstall Windows 2000 Service Pack 3.
Method 3: Give Full Control permission to the SYSTEM account
- Start Windows Explorer, right-click the computer's root hard drive, and then click Properties.
- Click the Security tab, and then click Add.
- In the Select Users, Computers, or Groups dialog box, click the SYSTEM account, click Add, and then click OK.
- Under Allow, click to select the Full Control check box, and then click OK.
- Click the TEMP folder and then verify that the SYSTEM account has full control.
Method 4: Verify the registry permissions
- Click Start, click Run, then type Regedt32.
- For each of the registry hives, follow these steps:
- Select the hive.
- For Windows XP, on the Edit menu, click Permissions.
For Windows 2000 and Windows NT 4, on the Security menu, click Permissions.
- Verify that the SYSTEM account has been added and that it has Full control. If it does not, add the SYSTEM account with Full control.
Method 5: Fix the broken security key for the MsiServer service
- Start the computer by using Windows 2000.
- Click Start, click Run, type regedit.exe, and then rename the following key to Old_Security:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSIServer\Security
- Restart the computer (you must do this).
- Run Instmsiw.exe for installer 2.0 again; this corrects the broken security key for the MSI service.
Article ID: 319624 - Last Review: Dec 16, 2009 - Revision: 1