Unable to deploy .msi with GPO


I’m unable to deploy the DuoWindowsLogon64.msi through Group policy on a Windows Server 2012 R2, clients keep getting error %%1603 from the .msi installer. Other .msi installers run without problems.

Any advice?


Hi kdopt,

Is this a new install via GPO or a package intended to upgrade an earlier version of Duo?

You may want to contact Duo support if you haven’t already, because we may need to see install logs that could contain information best not shared here.


Hi DuoKristina,

Its a new installation via GPO.

I’ve ran a test with command prompt, there seems to be an issue with installing it with the quiet parameter, it shows error “MSI (s) (94:DC) [07:57:08:549]: Product: Duo Authentication for Windows Logon x64 – Duo Authentication for Windows Logon x64 requires local administrative rights to install.”

I will contact support and see if they can fix it, thanks!