GPO fails/unable to run msi

[Andrewp20]

Hello,

I am trying to deploy duo for window logon from GPO. GPO is failing to install MSI and if I try to run the msi manually I get the error duo authentication for windows logon x64 requires local administrator rights.

The shares that the msi is on is available to domain users. I am also a domain admin and get the same error.

Anyone ran into this issue before?

[DuoKristina]

If you can’t even run the msi interactively as a Domain Admin it sounds like the MSIEXEC process isn’t able to elevate or prompt for elevation? Do you have UAC enabled on your clients and is it set to allow elevation requests?