Grant full permissions to c:\windows\temp . Yes, it's that easy.
You may have to use the UAC localtoken registry entry and reboot:
C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f
Search hits:
Error 2502
Error 2503
msi installer error 2502
msi installer error 2503