Computer-Assigned Programs Cannot Be Deployed from Shares in Different Forests (274274)

SYMPTOMS

If the file server for a computer-assigned package is in a different forest, the assignment is not successful, and you receive error "1612":

The installation source for this product is not available. Verify that the source exists and that you can access it.

One event ID which corresponds to this issue is:

Source: Application Management
        Event ID 102
        The install of application "<Package Name>" from policy 
"<Policy Name>" failed. The error was "The installation source for 
this product is not available. Verify that the source exists and that you
can access it."

CAUSE

Permissions to the file, and share were assigned to the computer account. This behavior is by design because Windows NT LAN Manager (NTLM), not Kerberos, is used when authenticating between forests. Therefore, no computer account authentication takes place, and the package cannot be accessed. If the source files are being stored on a Windows NT 4.0 or Windows 2000 Cluster server, it will only use NTLM for authentication. Machine accounts require Kerberos for authentication; therefore the source files cannot be stored on a Windows NT 4.0 or Windows 2000 Cluster Server.

RESOLUTION

Assign permissions to authenticated users on the file, and share permissions that contain the medium-scale integration (MSI) package.

MORE INFORMATION

For additional information, click the article number below to view the article in the Microsoft Knowledge Base: