OFF2000: "Installation ended prematurely ..." Error with Security Templates in Use

ID: Q230895

The information in this article applies to:

Microsoft Office 2000

SYMPTOMS

When you run Office Setup, the following error message may appear immediately after you click Install Now or Upgrade Now:

Installation ended prematurely because of an error.

When you click OK, Setup ends.

CAUSE

This error may appear if all of the following are true:

You are using Windows NT 4.0.

You are running Office Setup from a CD-ROM drive.

You are using one of the security templates available with the Microsoft Security Configuration Manager.

You have the Restrict CD-ROM access to locally logged on user only security option turned on.

This is because the Windows Installer runs as Local System when it is read off the CD-ROM drive. The problem is that Local System is denied access to the CD-ROM drive when this security policy is set.

NOTE: This error message also may appear if you do not have the Restrict CD-ROM access to locally logged on user only security option turned on but the AllocateCDRoms value under the following registry key is set to 1:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

WORKAROUND

To work around this problem, do either of the following:

Method 1: Run Setup from a network server.

If you are in a networked environment and you have access to an administrative installation of Office 2000, run Setup from this location instead of your CD-ROM drive. The security settings mentioned in the "Cause" section of this article do not affect running Setup from a network server.

Method 2: Turn off the "Restrict CD-ROM access to locally logged on user only" security option.

If you turn off the Restrict CD-ROM access to locally logged on user only security option, you can run Setup from your CD-ROM drive. Please see the documentation on the Microsoft Security Configuration Manager for more information about modifying this setting.

NOTE: You may have to restart after you turn off the Restrict CD-ROM access to locally logged on user only security option before you can run Setup from your CD-ROM drive.

For more information about the Microsoft Security Configuration Manager, visit the following Microsoft Web site:

http://www.microsoft.com/ntserver/security/techdetails/prodarch/securconfig.asp

For more information about the AllocateCDRoms registry setting, please see the following article in the Microsoft Knowledge Base:

Q172520 Access Denied Error When Trying to Access a Shared CD-ROM

MORE INFORMATION

One way to verify whether you are encountering this problem is to create a verbose log file and search for the following text:

MSI (s) (AF:C0): Note: 1: 2318 2: H:\data1.msi
MSI (s) (AF:C0): MainEngineThread is returning 1603
MSI (c) (BB:93): Back from server. Return value: 1603
Action ended 19:53:03: ExecuteAction. Return value 3.
MSI (c) (BB:93): Doing action: FatalError
Action start 19:53:03: FatalError.

To create a verbose log file, do the following:

On the Start menu, click Run.

In the Open box, type the following and then click OK:

<CD-ROM drive>\setup.exe /L*v c:\Officelog.txt

Additional query words: OFF2000 SCM


Keywords          : kbdta DTIR 
Version           : WINDOWS:2000
Platform          : WINDOWS 
Issue type        : kbprb

Last Reviewed: July 28, 1999