"System administrator has set policies to prevent this installation" error when installing PowerShell 7.4.5 on Windows 11 as admin on a non-domain machine...

Prerequisites

• Write a descriptive title.
• Make sure you are able to repro it on the latest released version
• Search the existing issues.
• Refer to the FAQ.
• Refer to Differences between Windows PowerShell 5.1 and PowerShell.

Steps to reproduce

I am encountering an issue when trying to install PowerShell 7.4.5 on a Windows 11 system using the MSI installer (PowerShell-7.4.5-win-x64.msi). Upon running the installer, I receive an error message stating, "The system administrator has set policies to prevent this installation."

I am logged in as an administrative user, I have unblocked the file

Steps to Reproduce:

1. Download the PowerShell 7.4.5 MSI installer (PowerShell-7.4.5-win-x64.msi) from the official GitHub release page.
2. Run the installer on a Windows 11 machine.
3. Observe the error message.

The certificate does appear revoked, please see screenshot.

Expected behavior

The installer should run and install PowerShell 7.4.5 without displaying the error, assuming proper administrative privileges.

Actual behavior

An error dialog appears with the message: "The system administrator has set policies to prevent this installation.

Error details

=== Verbose logging started: 2024-08-23  14:23:32  Build type: SHIP UNICODE 5.00.10011.00  Calling process: C:\Windows\system32\msiexec.exe ===
MSI (c) (74:E0) [14:23:32:749]: Font created.  Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

MSI (c) (74:E0) [14:23:32:750]: Font created.  Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

MSI (c) (74:F8) [14:23:32:765]: Resetting cached policy values
MSI (c) (74:F8) [14:23:32:765]: Machine policy value 'Debug' is 0
MSI (c) (74:F8) [14:23:32:765]: ******* RunEngine:
           ******* Product: PowerShell-7.4.5-win-x64.msi
           ******* Action: 
           ******* CommandLine: **********
MSI (c) (74:F8) [14:23:32:766]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (74:F8) [14:23:32:782]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi' against software restriction policy
MSI (c) (74:F8) [14:23:32:782]: SOFTWARE RESTRICTION POLICY: C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi has a digital signature
MSI (c) (74:F8) [14:23:32:869]: SOFTWARE RESTRICTION POLICY: C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi is not permitted to run at the 'unrestricted' authorization level.
MSI (c) (74:F8) [14:23:32:869]: SOFTWARE RESTRICTION POLICY: C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi was disallowed because a required certificate in its digital signature has been revoked by its issuer (status = 0x800B010C). The returned execution level was 0
MSI (c) (74:F8) [14:23:32:869]: The installation of C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi is not permitted by software restriction policy. The Windows Installer only allows installation of unrestricted items. The authorization level returned by software restriction policy was 0x0 (status return 0x800b010c).

MSI (c) (74:F8) [14:23:32:869]: Note: 1: 1718 2: C:\Users\Arsalan\downloads\PowerShell-7.4.5-win-x64.msi 
MSI (c) (74:F8) [14:23:32:869]: MainEngineThread is returning 1625
=== Verbose logging stopped: 2024-08-23  14:23:32 ===

Environment data

The system is running Windows 11.
The MSI installer was run from an elevated command prompt.
The error appears despite having administrative privileges.
I checked Group Policies, but no explicit restrictions seem to be in place for MSI installations.
The error might be related to a certificate issue, as indicated by the log entry 0x800B010C, which suggests that a required certificate in the digital signature has been revoked.

Visuals

Start with the PowerShell-7.4.5-win-x64.msi artifact and the provided verbose MSI log, especially the software restriction policy and 0x800B010C certificate-revocation entries. Compare the installer’s signing state with the release artifact; done means the cause is confirmed and the installation behavior or release guidance addresses the reported error.