Hi, I think I found a workaround.
I am AN administrator, but not THE administrator. Hmmm :-/
I had found the 'Windows Installer system policy' possibility on another forum and ran gpedit.msc (no shortcut to that in admin tools on win 2008!) to set it just in case. I thought I had set up...