If you’re trying to install software on Windows 11 and suddenly get the message “This Installation Is Forbidden by System Policy”, it usually means Windows is blocking the installation due to policy restrictions. This can happen when the installer comes from an unknown source, when system policies are misconfigured, or when you’re trying to install apps that require administrator rights. In some cases, a company-managed Windows device can also enforce restrictions that prevent new apps from being installed.
The good news is that this error is usually fixable, especially on personal PCs. In this guide, we walk you through the most effective ways to fix the “Installation Is Forbidden by System Policy” error on Windows 11 so you can install your program without running into roadblocks.
1. Run the Installer as an Administrator
Sometimes the error appears simply because the installer doesn’t have the right permissions.
- Right-click the installer file (
.exeor.msi). - Choose Run as administrator.
- Click Yes when prompted by User Account Control.
If the installation starts normally, the permissions were the problem.
2. Check if Your PC Is Managed by an Organization
If this message appears:
“Some settings are managed by your organization”
your PC might be controlled by a company or school.
- Open Settings > Accounts > Access work or school.
- See if any work or school account is connected.
- If it’s your personal PC, disconnect the account.
Try the installation again after disconnecting.
3. Allow Windows Installer Through Local Security Policy
Windows sometimes blocks .msi installers if certain policies are enabled.
Enable Windows Installer
- Press Windows + R, type secpol.msc, and press Enter.
- Navigate to:
Security Settings > Software Restriction Policies > Enforcement - Set All software files to All users except local administrators.
- Click Apply.
Disable Software Restriction Rules
If you don’t see Software Restriction Policies:
- Right-click Software Restriction Policies.
- Select New Software Restriction Policies.
- Make sure no disallowed rules are blocking the install.
Try installing your program again.
Note: Local Security Policy is not available in Windows 11 Home.
4. Use Local Group Policy Editor to Allow Installations (Pro & Enterprise)
Group policies may block installer files.
- Press Windows + R, type gpedit.msc, and press Enter.
- Go to:
Computer Configuration > Administrative Templates > Windows Components > Windows Installer - Double-click Prohibit User Installs.
- Set it to Disabled.
- Also set these policies to Not Configured:
- Prevent removable media source for any install
- Disable Windows Installer
- Always install with elevated privileges
Close the editor and restart the PC before trying to install your app again.
5. Modify the Registry to Allow Program Installations
If Group Policy is not available (Windows 11 Home), you can fix the policy via the Registry.
- Press Windows + R, type regedit, and hit Enter.
- Navigate to:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer - Look for values such as:
- DisableMSI
- DisableUserInstalls
If they exist:
- Double-click them.
- Set the value to 0.
If the Installer key does not exist, create it manually.
Restart the PC and retry the installation.
6. Temporarily Disable Smart App Control or SmartScreen
Smart App Control and SmartScreen sometimes block unknown or unsigned installers.
Turn Off Smart App Control
- Open Settings.
- Go to Privacy & security > Windows Security > App & browser control.
- Under Smart App Control, choose Off.
Turn Off SmartScreen
- Go to Reputation-based protection.
- Turn off Check apps and files temporarily.
Try running your installer again.
Remember to turn SmartScreen back on after installation for security.
7. Disable Software Restriction Policies Using Command Prompt
If the registry or policies are corrupted, you can clear restrictions using CMD.
- Right-click the Start button.
- Select Windows Terminal (Admin).
- Run this command:
reg delete HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers /f
Restart the PC and run the installer again.
8. Enable the Windows Installer Service
If the Windows Installer service is disabled, .msi files can throw this policy error.
- Press Windows + R, type services.msc, and press Enter.
- Find Windows Installer.
- Double-click it.
- Set Startup type to Manual.
- Click Start.
Now try installing your app.
9. Move the Installer to a Different Location
Windows can block installers running from network drives or protected folders.
Try moving the installer to:
- Desktop
- Downloads
- Documents
Double-click again and see if the installation works.
10. Turn Off S Mode (If Applicable)
If your PC is in Windows 11 S Mode, you cannot install traditional apps.
- Open Settings.
- Go to System > Activation.
- Expand Switch out of S Mode.
- Select Open Store and switch to normal Windows.
You can now install apps normally.
11. Create a New Administrator Account
A corrupted profile can trigger policy restrictions.
- Open Settings > Accounts > Other users.
- Click Add account and choose a local admin account.
- Log into the new account and run your installer.
If it works, your old profile has damaged policy settings.
12. Reset All System Policies to Default
If none of the methods work, reset all policies manually.
- Open Windows Terminal (Admin).
- Run this command:
RD /S /Q "C:\Windows\System32\GroupPolicy" - Then run:
gpupdate /force
Restart your PC and try installing the program again.
Wrapping Up
The “This Installation Is Forbidden by System Policy” error usually appears when Windows is blocking the installer through group policies, system restrictions, or corrupted registry entries. Once you run the file as an administrator, reset Windows Installer policies, disable Smart App Control, reinstall the installer service, or remove corrupted restriction rules, the installation typically proceeds without any issues.
After applying the fixes in this guide, you should be able to install your application normally without running into system policy blocks again.
