When Application Manager is running, a Windows Installer package may fail to install with the error:
There is a problem with this Windows Installer package. A DLL required for this install to complete could not be run. Contact your support personnel or package vendor
The Windows Installer package contains custom actions which are written to a temporary file by msiexec.exe with a .tmp extension in the temporary folder (%temp%) for the user running the installation. The Windows Installer then tries to execute this .tmp file but it will be owned by a non-trusted owner and therefore prohibited by Application Manager by default.
A Process Rule can be created to allow *.tmp files to be executed by the Windows Installer process (msiexec.exe) even if they are not owned by a trusted owner. The default Application Manager configuration already has a Process Rule for msiexec.exe so if this is present it can be modified as below:
Note that AppSense strongly recommend that the "Validate MSI (Windows Installer) packages" setting in the "Options" menu under "General Features" is enabled to ensure that only Windows Installer packages that the configuration specifically allow may be run which reduces the risk of a malicious MSI file being able to run arbitrary code via a custom action. This option is enabled in the default configuration.