PowerShell installation problem - Vista - "This machine disabled for file encryption."

Vista 32 bit Ultimate RTM in a domain - there is a GPO that disables the
Windows Encrypted File System (Computer Configuration, Windows Settings,
Security Settings, Public Key Policies, Encrypting File System (right
click), Properties - no check mark in Allow users to encrypt files using
Encrypting File System (EFS)).

When I try to install PowerShell (Windows6.0-KB928439-x86.msu), I get this
message box:

Windows Update Standalone Installer

Installer encountered an error: 0x8007177f

This machine is disabled for file encryption.

1. Why is "file encryption" required to install PowerShell?
2. Is there a way around this that does not involve enabling the Encrypting
File System?

--
Bruce Sanderson MVP
http://members.shaw.ca/bsanders/
It's perfectly useless to know the right answer to the wrong question.

The Windows PowerShell blog described this issue here:
http://blogs.msdn.com/powershell/arc...erver-faq.aspx

From the post:

When I try to install Windows PowerShell I get the following error
"Installer encountered an error: 0x8007177f . This machine is disabled for
file encryption"

Windows PowerShell is being delivered as an update for Windows Vista.
Currently this requires that "EFS" be enabled on the system.

To enable EFS, press Windows-R and start gpedit.msc. Browse to Computer
Configuration -> Windows Settings -> Security Settings -> Public Key
Policies -> Encrypting File System -> (right-click) Properties, and set the
EFS state to "Allow".

To verify that the above worked, press Windows-R and start rsop.msc. Browse
to the same path as above, and verify the setting.

If your domain administrator has disabled EFS, then you will not be able to
enable it locally. In that case, you will have to depart the domain,
complete the install, then rejoin the domain

Also, once the installation of PowerShell is complete, you can disable EFS.
EFS is not required for the functioning of PowerShell, but only for its
installation.


--
This posting is provided "AS IS" with no warranties, and confers no rights.


"Bruce Sanderson" <bsanders@newsgroups.nospam> wrote in message
news:uk9aK2XyHHA.3788@TK2MSFTNGP02.phx.gbl...
> Vista 32 bit Ultimate RTM in a domain - there is a GPO that disables the
> Windows Encrypted File System (Computer Configuration, Windows Settings,
> Security Settings, Public Key Policies, Encrypting File System (right
> click), Properties - no check mark in Allow users to encrypt files using
> Encrypting File System (EFS)).
>
> When I try to install PowerShell (Windows6.0-KB928439-x86.msu), I get this
> message box:
>
> Windows Update Standalone Installer
>
> Installer encountered an error: 0x8007177f
>
> This machine is disabled for file encryption.
>
> 1. Why is "file encryption" required to install PowerShell?
> 2. Is there a way around this that does not involve enabling the
> Encrypting File System?
>
> --
> Bruce Sanderson MVP
> http://members.shaw.ca/bsanders/
> It's perfectly useless to know the right answer to the wrong question.
>
>
>

Thanks Sean. I can install all the Vista updates delivered by Windows
Update and the occasional update from KB articles - they don't complain
about EFS disabled, so what makes the Power Shell installation so different
that it "requires EFS"?

--
Bruce Sanderson MVP
http://members.shaw.ca/bsanders/
It's perfectly useless to know the right answer to the wrong question.


"Sean Barnes [MSFT]" <seanba@online.microsoft.com> wrote in message
news:%23mpMfiYyHHA.3940@TK2MSFTNGP05.phx.gbl...
> The Windows PowerShell blog described this issue here:
> http://blogs.msdn.com/powershell/arc...erver-faq.aspx
>
> From the post:
>
> When I try to install Windows PowerShell I get the following error
> "Installer encountered an error: 0x8007177f . This machine is disabled
> for file encryption"
>
> Windows PowerShell is being delivered as an update for Windows Vista.
> Currently this requires that "EFS" be enabled on the system.
>
> To enable EFS, press Windows-R and start gpedit.msc. Browse to Computer
> Configuration -> Windows Settings -> Security Settings -> Public Key
> Policies -> Encrypting File System -> (right-click) Properties, and set
> the EFS state to "Allow".
>
> To verify that the above worked, press Windows-R and start rsop.msc.
> Browse to the same path as above, and verify the setting.
>
> If your domain administrator has disabled EFS, then you will not be able
> to enable it locally. In that case, you will have to depart the domain,
> complete the install, then rejoin the domain
>
> Also, once the installation of PowerShell is complete, you can disable
> EFS. EFS is not required for the functioning of PowerShell, but only for
> its installation.
>
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
> "Bruce Sanderson" <bsanders@newsgroups.nospam> wrote in message
> news:uk9aK2XyHHA.3788@TK2MSFTNGP02.phx.gbl...
>> Vista 32 bit Ultimate RTM in a domain - there is a GPO that disables the
>> Windows Encrypted File System (Computer Configuration, Windows Settings,
>> Security Settings, Public Key Policies, Encrypting File System (right
>> click), Properties - no check mark in Allow users to encrypt files using
>> Encrypting File System (EFS)).
>>
>> When I try to install PowerShell (Windows6.0-KB928439-x86.msu), I get
>> this message box:
>>
>> Windows Update Standalone Installer
>>
>> Installer encountered an error: 0x8007177f
>>
>> This machine is disabled for file encryption.
>>
>> 1. Why is "file encryption" required to install PowerShell?
>> 2. Is there a way around this that does not involve enabling the
>> Encrypting File System?
>>
>> --
>> Bruce Sanderson MVP
>> http://members.shaw.ca/bsanders/
>> It's perfectly useless to know the right answer to the wrong question.
>>
>>
>>
>

Bruce - unfortunately it is not limited to the powershell install but any
..msu hotfix\update\install. I find this to be quite the PITA. I also dont see
the utility in it.

Chris

"Bruce Sanderson" wrote:

> Thanks Sean. I can install all the Vista updates delivered by Windows
> Update and the occasional update from KB articles - they don't complain
> about EFS disabled, so what makes the Power Shell installation so different
> that it "requires EFS"?
>
> --
> Bruce Sanderson MVP
> http://members.shaw.ca/bsanders/
> It's perfectly useless to know the right answer to the wrong question.
>
>
> "Sean Barnes [MSFT]" <seanba@online.microsoft.com> wrote in message
> news:%23mpMfiYyHHA.3940@TK2MSFTNGP05.phx.gbl...
> > The Windows PowerShell blog described this issue here:
> > http://blogs.msdn.com/powershell/arc...erver-faq.aspx
> >
> > From the post:
> >
> > When I try to install Windows PowerShell I get the following error
> > "Installer encountered an error: 0x8007177f . This machine is disabled
> > for file encryption"
> >
> > Windows PowerShell is being delivered as an update for Windows Vista.
> > Currently this requires that "EFS" be enabled on the system.
> >
> > To enable EFS, press Windows-R and start gpedit.msc. Browse to Computer
> > Configuration -> Windows Settings -> Security Settings -> Public Key
> > Policies -> Encrypting File System -> (right-click) Properties, and set
> > the EFS state to "Allow".
> >
> > To verify that the above worked, press Windows-R and start rsop.msc.
> > Browse to the same path as above, and verify the setting.
> >
> > If your domain administrator has disabled EFS, then you will not be able
> > to enable it locally. In that case, you will have to depart the domain,
> > complete the install, then rejoin the domain
> >
> > Also, once the installation of PowerShell is complete, you can disable
> > EFS. EFS is not required for the functioning of PowerShell, but only for
> > its installation.
> >
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
> > rights.
> >
> >
> > "Bruce Sanderson" <bsanders@newsgroups.nospam> wrote in message
> > news:uk9aK2XyHHA.3788@TK2MSFTNGP02.phx.gbl...
> >> Vista 32 bit Ultimate RTM in a domain - there is a GPO that disables the
> >> Windows Encrypted File System (Computer Configuration, Windows Settings,
> >> Security Settings, Public Key Policies, Encrypting File System (right
> >> click), Properties - no check mark in Allow users to encrypt files using
> >> Encrypting File System (EFS)).
> >>
> >> When I try to install PowerShell (Windows6.0-KB928439-x86.msu), I get
> >> this message box:
> >>
> >> Windows Update Standalone Installer
> >>
> >> Installer encountered an error: 0x8007177f
> >>
> >> This machine is disabled for file encryption.
> >>
> >> 1. Why is "file encryption" required to install PowerShell?
> >> 2. Is there a way around this that does not involve enabling the
> >> Encrypting File System?
> >>
> >> --
> >> Bruce Sanderson MVP
> >> http://members.shaw.ca/bsanders/
> >> It's perfectly useless to know the right answer to the wrong question.
> >>
> >>
> >>
> >
>
>
>

The fix: http://support.microsoft.com/kb/933595/en-us

"Bruce Sanderson" wrote:

> Thanks Sean. I can install all the Vista updates delivered by Windows
> Update and the occasional update from KB articles - they don't complain
> about EFS disabled, so what makes the Power Shell installation so different
> that it "requires EFS"?
>
> --
> Bruce Sanderson MVP
> http://members.shaw.ca/bsanders/
> It's perfectly useless to know the right answer to the wrong question.
>
>
> "Sean Barnes [MSFT]" <seanba@online.microsoft.com> wrote in message
> news:%23mpMfiYyHHA.3940@TK2MSFTNGP05.phx.gbl...
> > The Windows PowerShell blog described this issue here:
> > http://blogs.msdn.com/powershell/arc...erver-faq.aspx
> >
> > From the post:
> >
> > When I try to install Windows PowerShell I get the following error
> > "Installer encountered an error: 0x8007177f . This machine is disabled
> > for file encryption"
> >
> > Windows PowerShell is being delivered as an update for Windows Vista.
> > Currently this requires that "EFS" be enabled on the system.
> >
> > To enable EFS, press Windows-R and start gpedit.msc. Browse to Computer
> > Configuration -> Windows Settings -> Security Settings -> Public Key
> > Policies -> Encrypting File System -> (right-click) Properties, and set
> > the EFS state to "Allow".
> >
> > To verify that the above worked, press Windows-R and start rsop.msc.
> > Browse to the same path as above, and verify the setting.
> >
> > If your domain administrator has disabled EFS, then you will not be able
> > to enable it locally. In that case, you will have to depart the domain,
> > complete the install, then rejoin the domain
> >
> > Also, once the installation of PowerShell is complete, you can disable
> > EFS. EFS is not required for the functioning of PowerShell, but only for
> > its installation.
> >
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
> > rights.
> >
> >
> > "Bruce Sanderson" <bsanders@newsgroups.nospam> wrote in message
> > news:uk9aK2XyHHA.3788@TK2MSFTNGP02.phx.gbl...
> >> Vista 32 bit Ultimate RTM in a domain - there is a GPO that disables the
> >> Windows Encrypted File System (Computer Configuration, Windows Settings,
> >> Security Settings, Public Key Policies, Encrypting File System (right
> >> click), Properties - no check mark in Allow users to encrypt files using
> >> Encrypting File System (EFS)).
> >>
> >> When I try to install PowerShell (Windows6.0-KB928439-x86.msu), I get
> >> this message box:
> >>
> >> Windows Update Standalone Installer
> >>
> >> Installer encountered an error: 0x8007177f
> >>
> >> This machine is disabled for file encryption.
> >>
> >> 1. Why is "file encryption" required to install PowerShell?
> >> 2. Is there a way around this that does not involve enabling the
> >> Encrypting File System?
> >>
> >> --
> >> Bruce Sanderson MVP
> >> http://members.shaw.ca/bsanders/
> >> It's perfectly useless to know the right answer to the wrong question.
> >>
> >>
> >>
> >
>
>
>

Chris: thanks for the KB article link!

I got around the problem (before I saw your last post!) by linking a GPO
that enabled EFS on a new OU that only had the Vista computer in it,
installing Power Shell, then removing the GPO link.

--
Bruce Sanderson MVP Printing
http://members.shaw.ca/bsanders

It is perfectly useless to know the right answer to the wrong question.



"Chris H [447142]" <ChrisH447142@discussions.microsoft.com> wrote in message
news:9EF3D3E5-69BA-42DA-9BCB-CE57C6B1E4AF@microsoft.com...
> The fix: http://support.microsoft.com/kb/933595/en-us
>
> "Bruce Sanderson" wrote:
>
>> Thanks Sean. I can install all the Vista updates delivered by Windows
>> Update and the occasional update from KB articles - they don't complain
>> about EFS disabled, so what makes the Power Shell installation so
>> different
>> that it "requires EFS"?
>>
>> --
>> Bruce Sanderson MVP
>> http://members.shaw.ca/bsanders/
>> It's perfectly useless to know the right answer to the wrong question.
>>
>>
>> "Sean Barnes [MSFT]" <seanba@online.microsoft.com> wrote in message
>> news:%23mpMfiYyHHA.3940@TK2MSFTNGP05.phx.gbl...
>> > The Windows PowerShell blog described this issue here:
>> > http://blogs.msdn.com/powershell/arc...erver-faq.aspx
>> >
>> > From the post:
>> >
>> > When I try to install Windows PowerShell I get the following error
>> > "Installer encountered an error: 0x8007177f . This machine is disabled
>> > for file encryption"
>> >
>> > Windows PowerShell is being delivered as an update for Windows Vista.
>> > Currently this requires that "EFS" be enabled on the system.
>> >
>> > To enable EFS, press Windows-R and start gpedit.msc. Browse to Computer
>> > Configuration -> Windows Settings -> Security Settings -> Public Key
>> > Policies -> Encrypting File System -> (right-click) Properties, and set
>> > the EFS state to "Allow".
>> >
>> > To verify that the above worked, press Windows-R and start rsop.msc.
>> > Browse to the same path as above, and verify the setting.
>> >
>> > If your domain administrator has disabled EFS, then you will not be
>> > able
>> > to enable it locally. In that case, you will have to depart the domain,
>> > complete the install, then rejoin the domain
>> >
>> > Also, once the installation of PowerShell is complete, you can disable
>> > EFS. EFS is not required for the functioning of PowerShell, but only
>> > for
>> > its installation.
>> >
>> >
>> > --
>> > This posting is provided "AS IS" with no warranties, and confers no
>> > rights.
>> >
>> >
>> > "Bruce Sanderson" <bsanders@newsgroups.nospam> wrote in message
>> > news:uk9aK2XyHHA.3788@TK2MSFTNGP02.phx.gbl...
>> >> Vista 32 bit Ultimate RTM in a domain - there is a GPO that disables
>> >> the
>> >> Windows Encrypted File System (Computer Configuration, Windows
>> >> Settings,
>> >> Security Settings, Public Key Policies, Encrypting File System (right
>> >> click), Properties - no check mark in Allow users to encrypt files
>> >> using
>> >> Encrypting File System (EFS)).
>> >>
>> >> When I try to install PowerShell (Windows6.0-KB928439-x86.msu), I get
>> >> this message box:
>> >>
>> >> Windows Update Standalone Installer
>> >>
>> >> Installer encountered an error: 0x8007177f
>> >>
>> >> This machine is disabled for file encryption.
>> >>
>> >> 1. Why is "file encryption" required to install PowerShell?
>> >> 2. Is there a way around this that does not involve enabling the
>> >> Encrypting File System?
>> >>
>> >> --
>> >> Bruce Sanderson MVP
>> >> http://members.shaw.ca/bsanders/
>> >> It's perfectly useless to know the right answer to the wrong question.
>> >>
>> >>
>> >>
>> >
>>
>>
>>