My favorites | Sign in
Logo
             
New issue | Search
for
| Advanced search | Search tips
Issue 119: Install Fails - "forbidden by system policy" - on W2K8 with low-rights user
11 people starred this issue and may be notified of changes. Back to list
Status:  WontFix
Owner:  all-bugs-test@chromium.org
Closed:  Jan 2009
Cc:  kuchhal@chromium.org
Type-Bug
Pri-3
OS-All
Area-Installer
Mstone-X


Sign in to add a comment
 
Reported by StamosGeek, Sep 02, 2008
What steps will reproduce the problem?
1. Create a non-administrator user on Windows 2008 x64 Standard
2. Attempt to install Chrome from inside IE7 or using ChromeSetup.exe
3. After the "download" completes, error 1625 "This installation is 
forbidden by system policy" is thrown.

What is the expected result?

Since Chrome is installing into AppData\Local, it should not need local 
administrative access to complete the install.  If Administrative access 
is necessary, then the OS's CredUI should be triggered by a signed binary 
manifest. 

What happens instead?

An error pops during install.  This makes it impossible to use Chrome as a 
low rights user, since installing as Administrator installs into 
\User\Administrator\AppData\Local\ and Chrome is not available to other 
users on the system.  An alternative fix would be an install mode that 
allows the user to choose the more traditional Program Files location for 
the binaries.


Install Error 1625.jpg
15.3 KB Download
Comment 1 by nolan.brubaker, Sep 02, 2008
I can confirm that this has happened to me on Server 2008, as well.  Re-running 
ChromeSetup.exe (build 0.2.149.27 (1583)) as administrator allows the install to 
complete.
Comment 2 by bilbas, Sep 03, 2008
I can confirm this also. The main problem is that administrator cannot install 
Chrome system-wide and I can't use it under unprivileged account.
Comment 3 by pankajmittal3, Sep 03, 2008
it also need to bypass the firewall i think google has to remove that to make its 
browser proper google must to provide just a simple single exe file if you have then 
u can install it on ur machine. I dont think other validation is needed for that bcz 
its free.
Comment 4 by tim.ove....@gmail.com, Sep 03, 2008
Same for me. 
Comment 5 by stephen.oakman, Sep 03, 2008
And for me. Running Windows 2008 server and google gears fails to install because of 
a system policy. Have tried the fix for adding a software policy (as per this link: http://www.venkat.org/2008/09/installing-google-chrome-on-windows.html) but still no 
joy and can only enjoy Chrome when logged on as the Administrator which isn't ideal.
Comment 6 by stephen.oakman, Sep 03, 2008
I've managed to install now and it seems to work. If you go to 
c:\users\<user>\AppData\Local\Google\Update\Download there will be a series of 
folders. Check in these until you find 'chrome_installer.exe'. Run this and this 
will then complete the install process where chrome will run and you'll get the 
chrome shortcut on the desktop plus everything else.

I installed Google Gears directly from http://gears.google.com first though. I'm not 
sure if this needs to be done or not and would be interested to hear from anyone who 
didn't perform this step first to see if this is actually required or not.
Comment 7 by chrisvesper, Sep 04, 2008
Same problem installing under Server 2003, SP2.

Running 'chrome_installer.exe' in the Download subfolder completed the installation
(as per oakman).  I didn't install gears separately and it seems to work just fine.
Comment 8 by gears.team.aa, Sep 04, 2008
FYI, installing Gears separately is unnecessary. When you do that you're installing 
Gears for IE and Firefox on Windows, not Chrome.
Comment 9 by cpu@chromium.org, Sep 04, 2008
Mmm, this might be something like what is discussed in this forum:

http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=590630&SiteID=17


Comment 10 by kuchhal@chromium.org, Sep 05, 2008
(No comment was entered for this change.)
Status: Untriaged
Comment 11 by mike.diack, Sep 06, 2008
I agree. This installation needs a rework. I'm seeing the same problems on an XP Pro
SP3 system - install chrome (beta) as administrator. Then I can't run it as anything
other than administrator, because the executables are installed stupidly in the
profile directory of administrator and are thus unreachable via limited users - which
is what I normally run as.

Why on earth haven't google used a normal installer like they did for Google Earth?

Mike
Comment 12 by dave.e.english, Sep 08, 2008
As a limited user on XP Pro you need to install the application as that user & you 
don't need administrator rights (or power user) to do that, I think.

Google Chrome is a user application, the user installs it & it cannot affect system.  
I guess the advantage is that it makes it very easy to install (widely). It will 
almost certainly change the security landscape, for better or for worse.

Note that it won't run under runas, which could be a pain:

http://code.google.com/p/chromium/issues/detail?id=1470
 
http://groups.google.com/group/chromium-
dev/browse_thread/thread/568bf0c33f072049/dce43ea33781875f

Comment 13 by kuchhal@chromium.org, Sep 11, 2008
(No comment was entered for this change.)
Summary: Install Fails - "forbidden by system policy" - on W2K8 with low-rights user
Labels: -Area-Unknown Area-Installer
Comment 14 by mal.chromium, Oct 23, 2008
(No comment was entered for this change.)
Status: Available
Labels: -Pri-2 Pri-3 Mstone-X
Comment 15 by kuchhal@chromium.org, Jan 05, 2009
This problem also looks like was because of MSI Gears installer. It should be gone in 
the latest releases of Chrome. Closing this bug. If you still have a problem please 
file a new report.
Status: WontFix
Cc: kuch...@chromium.org
Comment 16 by slesko, Jun 02, 2009
this issue is not solved!?&*!*/?
Sign in to add a comment