Windows Installer Policies

You can control the Windows Installer behavior on your client computers by using System Policies for Windows Installer. This lets you configure some settings, like preventing users from installing or uninstalling Windows Installer-based applications, and letting restricted users run installations with elevated privileges.

There are two types of Windows Installer policies: machine policies and user policies. A brief explanation of some commonly-used policies follows:

User Policies

AlwaysInstallElevated

Set this property to 1 to let your users install with elevated privileges. The machine policy must also be set to 1 for this policy to take effect.

TransformsAtSource

Set this property to 1 to make Windows Installer search for transforms in the installation source instead of storing them in the Application Data folder of a user's profile.

Machine Policies

AlwaysInstallElevated

Set this property to 1 to let your users install with elevated privileges. The user policy must also be set to 1 for this policy to take effect.

DisableMSI

Use this policy to restrict users without administrative credentials from installing or reinstalling Windows Installer applications, or to completely disable the Windows Installer service.

Set DisableMSI to 0 to allow all install operations. Restricted users will not be able to install IBM i Access Client Solutions.

Set DisableMSI to 1 to allow only managed installations and elevated installations.

Set DisableMSI to 2 to completely disable Windows Installer.

DisablePatch

Set this policy to 1 to restrict Windows Installer from applying patches.

TransformsSecure

Set this policy to 1 to tell Windows Installer to cache transforms in a locked location where users do not have write access.