[Ololosh]

На удачу напишу сюда.
Домен на win 2008r2 + 4 терминалки для каждого отдела в офисе.
На некоторых терминалках при попытке поставить программу .msi или .exe выдаёт сообщение что запрещены политикой, заданной системным администратором. Пытался различные правила включать локально на сервере, отключать различные доменные политики действующие дополнительно на сервер, ничего не помогло.
Судя по логам:
=== Verbose logging started: 29.03.2017 17:50:37 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\Windows\system32\msiexec.exe ===
MSI (c) (D8:EC) [17:50:37:847]: Font created. Charset: Req=204, Ret=204, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

MSI (c) (D8:EC) [17:50:37:847]: Font created. Charset: Req=204, Ret=204, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

MSI (c) (D8:34) [17:50:37:861]: Resetting cached policy values
MSI (c) (D8:34) [17:50:37:861]: Machine policy value 'Debug' is 0
MSI (c) (D8:34) [17:50:37:861]: ******* RunEngine:
******* Product: C:\temp\jivosite.msi
******* Action: ADVERTISE
******* CommandLine: **********
MSI (c) (D8:34) [17:50:37:862]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (D8:34) [17:50:37:866]: Grabbed execution mutex.
MSI (c) (D8:34) [17:50:38:101]: Cloaking enabled.
MSI (c) (D8:34) [17:50:38:101]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (D8:34) [17:50:38:108]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (E8:64) [17:50:38:127]: Running installation inside multi-package transaction C:\temp\jivosite.msi
MSI (s) (E8:64) [17:50:38:127]: Grabbed execution mutex.
MSI (s) (E8:48) [17:50:38:132]: Resetting cached policy values
MSI (s) (E8:48) [17:50:38:132]: Machine policy value 'Debug' is 0
MSI (s) (E8:48) [17:50:38:132]: ******* RunEngine:
******* Product: C:\temp\jivosite.msi
******* Action: ADVERTISE
******* CommandLine: **********
MSI (s) (E8:48) [17:50:38:134]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (E8:48) [17:50:38:148]: Machine policy value 'LimitSystemRestoreCheckpointing' is 0
MSI (s) (E8:48) [17:50:38:148]: SRSetRestorePoint skipped for this transaction.
MSI (c) (D8:EC) [17:50:38:137]: Font created. Charset: Req=0, Ret=0, Font: Req=, Ret=Arial

MSI (c) (D8:EC) [17:50:38:140]: Font created. Charset: Req=0, Ret=0, Font: Req=, Ret=Arial

MSI (s) (E8:48) [17:50:38:152]: File will have security applied from OpCode.
MSI (s) (E8:48) [17:50:38:231]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\temp\jivosite.msi' against software restriction policy
MSI (s) (E8:48) [17:50:38:231]: SOFTWARE RESTRICTION POLICY: C:\temp\jivosite.msi has a digital signature
MSI (s) (E8:48) [17:50:38:241]: SOFTWARE RESTRICTION POLICY: C:\temp\jivosite.msi is not permitted to run at the 'unrestricted' authorization level.
MSI (s) (E8:48) [17:50:38:241]: Установка C:\temp\jivosite.msi не разрешена политикой ограниченного использования программ. Установщик Windows допускает установку только разрешенных элементов. Уровень авторизации, возвращенный политикой ограничения использования программ, - 0x0 (возвращено состояние 0x0).

MSI (s) (E8:48) [17:50:40:138]: Note: 1: 1718 2: C:\Windows\Installer\bdef3949.msi
MSI (s) (E8:48) [17:50:40:155]: MainEngineThread is returning 1625
MSI (s) (E8:64) [17:50:40:155]: No System Restore sequence number for this installation.
MSI (s) (E8:64) [17:50:40:162]: User policy value 'DisableRollback' is 0
MSI (s) (E8:64) [17:50:40:162]: Machine policy value 'DisableRollback' is 0
MSI (s) (E8:64) [17:50:40:162]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (E8:64) [17:50:40:162]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (E8:64) [17:50:40:163]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (E8:64) [17:50:40:163]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (E8:64) [17:50:40:163]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (E8:64) [17:50:40:163]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (E8:64) [17:50:40:164]: Restoring environment variables
MSI (c) (D8:34) [17:50:40:166]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (D8:34) [17:50:40:167]: MainEngineThread is returning 1625
=== Verbose logging stopped: 29.03.2017 17:50:40 ===

это SOFTWARE RESTRICTION POLICY, в локальных политиках безопастности...там я тоже пробовал удалять доп правила, но всё по старому