• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2048
  • Last Modified:

policy or certification issue maybe?

When trying to install a custom VB application on an XP machine, the following message is given

Application Install – Security Warning
Your administrator has blocked this application because it potentially poses a security risk to your computer.
Name:  xxxxxxxxxxx
From: D:\ xxxxxxxxxxxx

Publisher:  Unknown Publisher
Your security settings do not allow this application to be installed on computer.

(I replaced the app's name and location)

The user has admin rights on the laptop. I believe this miight be happening if a group policy
was set on the laptop, or if XP is just having issues with the certification of the software.

Any advise?
1 Solution
if this is happening at a work station the IT boys desabled some features..
BJBExExAuthor Commented:
Thanks for your reply,

I think that might be right, but it's the IT guy having the issue with the software (at a remote location). I can't get my hand on the laptop, but the error message in my original note is the exact error message. I believe this must be an item in the security policy (local or group) that needs to be adjusted, but I'm just not sure what. I am also not certain if group policy is active or not. I am trying to find out more. It is important for us to try and get this operational rather quickly. The app does not have a certification, it is seen as being from an unknown publisher. What I am looking for is the policy setting that would allow an application from an "unknown" publisher to be installed. The app was developed by a co-worker, so we know there is no security issue with it. It works fine on the XP PC it was written and compiled on.
Could you please share the following details:

What is the operating system?

Is the application being installed via Windows Installer, Click Once, Setup.exe ?

If Windows Installer is being used, please run the attached MSI-Verbose-Logging-ON.REG file to generate a verbose log of the next attempt and attached it to a reply message.
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

BJBExExAuthor Commented:
Thanks for your reply.

The laptop is running XP Pro, I believe SP2. Windows Installer was used. Thanks for the links, Unfortunately, the laptop is accross the counrty from me so I can't try it now. I'm sending the links to the app developer to ask him to speak to the user to try the links. I will reply with the requested info when available.

Couple other questions:

Is the attempted install being done through a web browser?

Is the application a .NET application?

Is the D:\ drive a local drive or a network mapped drive?

This is a classic policy message, but there is no Windows Installer specific group policy that would block an install based on code signing.

It would have to be one of these:
*) GPO: Software Restriction Policy - Certificate Rule
*) Web Browser Security (if being installed via browser)
*) GPO: App Locker Policy (Win7 Enterprise ONLY)
*) .NET ClickOnce Security policies

Given the message you are receiving the last seems like a real possibility.

Assuming the App is .NET I would advise that you check whether you are including a ClickOnce manifest when building the App.  Maybe at one time someone thought they'd use click once and changed these settings and now it gets embedded in the MSI and is being processed?

Here is an article that explains some of the GPO settings and Visual Studio settings that might be affecting you: http://msdn.microsoft.com/en-us/library/aa719097(v=vs.71).aspx#clickonce_topic8
Vadim RappCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now