I was trying to update one Windows Server 2016 by standalone patch file. Somehow nothing happened after I double click the installer file. That’s because Windows Server 2016 prevent execute the file due to it’s download from internet.
The quick fix is right click the file – Properties – Check Unblock – Click OK button.
Further more. The file has ADS (alternate data streams) attached. The ADS marked the file as download from internet.
You can run following two PowerShell commands to figure out object and value of the ADS.
PS C:> Get-Item test file.msu -Stream * PSPath : Microsoft.PowerShell.CoreFileSystem::C:Userswzheng110917aDow $DATA PSParentPath : Microsoft.PowerShell.CoreFileSystem::C:Userswzheng110917aDow PSChildName : 20171011_KB4038801_Updates.msu::$DATA PSDrive : C PSProvider : Microsoft.PowerShell.CoreFileSystem PSIsContainer : False FileName : C:Userswzheng110917aDownloads20171011_KB4038801_Updates.msu Stream : :$DATA Length : 1241376269 PSPath : Microsoft.PowerShell.CoreFileSystem::C:Userswzheng110917aDow one.Identifier PSParentPath : Microsoft.PowerShell.CoreFileSystem::C:Userswzheng110917aDow PSChildName : 20171011_KB4038801_Updates.msu:Zone.Identifier PSDrive : C PSProvider : Microsoft.PowerShell.CoreFileSystem PSIsContainer : False FileName : C:Userswzheng110917aDownloads20171011_KB4038801_Updates.msu Stream : Zone.Identifier Length : 26
PS C:> Get-Content testfile.msu -Stream Zone.Identifier [ZoneTransfer] ZoneId=3
You can see the ZoneId is 3. Following is a table to show which type of file it is.
0 My Computer 1 Local Intranet Zone 2 Trusted sites Zone 3 Internet Zone 4 Restricted Sites Zone
For more reference please read Microsoft blog “Alternate Data Streams in NTFS“.
You can use Unblock-File if you want to unblock multiple files.
