Error 1260 or Access Denied Error when installing or updating BLS-2021

As a note: Windows 2003 and Windows XP are not officially supported by BLS-2021. We strongly encourage you to network a computer with Windows 7 or newer to your scoring system and move BLS to that computer.
 
When trying to install program, the installation fails when installing giving an Access Denied error.  The error may appear such as this:
 
Error 1260: Windows cannot open this program because it has been prevented by a software restriction policy. For more information, open Event Viewer or contact your system administrator.
 
This issue can be caused by a couple of reasons:
  1. This could be caused by Microsoft's update release KB2918614 and/or KB3072630.
  2. This could be related to changes in requirements by Microsoft for companies to use stronger SHA-2 digital signatures to prove that an installer or EXE came from the software developer instead of the weaker SHA-1 digital signature.  Windows XP and Windows 2003 were not updated to support the stronger SHA-2 digital signatures and may cause an install or update process to not complete when validating the digital signature.
If you do receive this error, use the steps below to correct the problem. If you have not yet installed this update, go to "Hide Update" section below to hide the update so that you don’t install it at a later date.
 

What to Do:

Manually make the registry entry yourself. Please note that editing the registry for Windows must be done with caution.
 
 
  1. Open Regedit by holding the WINDOWS key and the R key together to bring up the RUN dialog and enter REGEDIT and press ok.
  2. Locate and then click the following subkey in the registry:   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer
  3. Inside the Installer key, click Edit, point to New and then click DWORD Value
  4. Type SecureRepairPolicy for the name of the DWORD and then press Enter
  5. In the Value data box, type 2, and then click OK 
  6. Locate and then click the following subkey in the registry:   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer
  7. Inside the Installer key, click Edit, point to New and then click Key
  8. Type SecureRepairWhitelist for the name of the key and then press Enter
  9. Double-click the SecureRepairWhitelist key to open it.
  10. Inside the SecureRepairWhitelist key, click Edit, point to New and then click String Value
  11. Set the name of the String Value to, the following name, which includes the braces, {6AB532A2-40CA-4524-9C02-DFBC4FEC2A4A}
  12. Install BLS-2021 (or update BLS-2021 if already installed).
 
You may need to uninstall the Windows Security Update using the Microsoft Windows® Add or Remove Programs function. Then, open the Microsoft Updates window in Internet Explorer to effectively hide the security update. This prevents the update from downloading and installing again.
 
Note: Security update KB2918614 was released August 12, 2014. Security update KB3072630 was released July 14, 2015. Even if you previously performed these steps for KB2918614, you need to follow these steps to prevent KB3072630 from installing.
 
  1. On your Windows desktop, click Start, choose Control Panel, and double-click Add or Remove Programs.
  2. In the Add or Remove Programs window, make sure the Show Updates option is checked.
  3. The update to remove appears in the grouping under Windows Server 2003 – Software Updates.
  4. Click the Security Update for Windows Server 2003 (KB2918614 & KB3072630) option in the list and click Remove.
  5. When the update is removed and no longer displays in the list, close the Add or Remove Programs window.
To hide the update so that it does not download and install again:
  1. Open an Internet Explorer window.
  2. Click the Tools menu and select Windows Update. If the Tools menu is hidden or unavailable, type Alt + T. When the Tools menu opens, select Windows Update.
  3. In the Microsoft Update window, click Custom.
  4. Removing Windows Security Updates KB2918614 & KB3072630
  5. A new window opens, displaying a list of options. Search and locate the Security Update for Windows Server 2003 (KB2918614 & KB3072630) option.
  6. When you locate the update, clear this box.
  7. The Don’t Show This Update Again check box becomes enabled. Click the check box, as shown below.
  8. This completes the procedure. Close the Microsoft Update window.