App Control: Agents Not Upgrading Via Console, Receiving Error in the Logs "Reconfiguration success or error status: 1625"

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• App Control agents fail to upgrade via console
• Receive error: "Upgrade installer ended without stopping the agent"
• The following messages found in the install log: 
  • Error: 1625
  • "This installation is forbidden by system policy. Contact your system administrator."

MSI (s) (A0:FC) [10:15:14:345]: Adding new sources is not allowed.
MSI (s) (A0:FC) [10:15:14:345]: Warning: rejected attempt to add new source 'C:\ProgramData\Bit9\Parity Agent\' (product: {9F2D4E59-0528-4B22-B664-A6B0B8B482EE})
MSI (s) (A0:FC) [10:15:14:352]: MSI_LUA: Elevation prompt disabled for silent installs
MSI (s) (A0:FC) [10:15:14:360]: Note: 1: 1729
MSI (s) (A0:FC) [10:15:14:360]: Product: Bit9 Agent -- Configuration failed.

MSI (s) (A0:FC) [10:15:14:361]: Windows Installer reconfigured the product. Product Name: Bit9 Agent. Product Version: 8.1.6. Product Language: 1033. Manufacturer: Bit9, Inc.. Reconfiguration success or error status: 1625.

MSI (s) (A0:FC) [10:15:14:372]: MainEngineThread is returning 1625
MSI (s) (A0:F4) [10:15:14:372]: No System Restore sequence number for this installation.
This installation is forbidden by system policy. Contact your system administrator.
C:\ProgramData\Bit9\Parity Agent\ParityHostAgent.msi

Environment

• App Control Agent: 8.1.0 and Higher
• App Control Server Server: 8.1.6
• Microsoft Windows: All Supported Versions

Cause

It is set to "1" the Registry Key: 

HKLM\Software\Policies\Microsoft\Windows\Installer\DisableBrowse

Resolution

1. Open Registry
2. Find 

   HKLM\Software\Policies\Microsoft\Windows\Installer\DisableBrowse

3. Set value to "0".