AppLocker helps you control which apps and files users can run. These include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers.
When you run NiceLabel Web Client installation, you might see the following error message:
Setup Error NiceLabel Web Client installation failed: “This installation is forbidden by system policy. Contact your system administrator”. Please check your settings and try again.
NiceLabel Web Client is digitally signed to assure the file authenticity. When you run the install, the resource files unpack and then the main installer (MSI file) starts. NiceLabel uses the InstallAware utility to run the installation. InstallAware slightly modifies the main installer (MSI file), corrupting its digital signature.
If you enable AppLocker, the installer with a mismatching digital signature is not allowed to run and the error message displays. The following AppLocker rule prevents NiceLabel Web Client installer with mismatching digital signature from running: “All digitally signed Windows Installer files – allow”.
We are in contact with InstallAware to resolve the problem.
Until then, use one of the following workarounds:
-
Contact NiceLabel Support for modified NiceLabel Web Client installer. NiceLabel Support can provide a Web Client installer in a form of an MSI file (not EXE). In this case, Windows installs the files without InstallAware.
-
Run the NiceLabel Web Client with elevated permissions. Right-click NiceLabelWeb ClientSetup.exe and select Run as administrator.
-
Disable AppLocker rule. Disable AppLocker app or just the rule that allows running only signed installers. Once you install NiceLabel Web Client, reenable AppLocker.