Victoria,
Thanks for the reply. Yes, I've tried that. Both as the original local administrator AND the domain administrator. As local administrator we had to use machine name as domain, and it failed with the same error.
Here's likely the pertinent part of the eConnectInstall.log:
==============
"CAPACK: Extracting custom action to temporary directory: C:\windows\Installer\MSIA625.tmp-\
CAPACK: Binding to CLR version v2.0.50727
Calling custom action Microsoft.Dynamics.Deployment.eConnect.CustomActions!Microsoft.Dynamics.Deployment.eConnect.CustomActions.CreateComPlusApplication.EntryPoint<Microsoft.Dynamics.Deployment.eConnect.CustomActions!Microsoft.Dynamics.Deployment.eConnect.CustomActions.CreateComPlusApplication>
System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at Interop.COMAdmin.COMAdminCatalogClass.GetCollection(String bstrCollName)
at Microsoft.Dynamics.Deployment.eConnect.CustomActions.ComPlus.DeleteIfExists(ComPlusInfo info) in e:\bt\671\Install\eConnect\CustomActions\Common\Support\ComPlus.cs:line 18
at Microsoft.Dynamics.Deployment.eConnect.CustomActions.CreateComPlusApplication.Deferred() in e:\bt\671\Install\eConnect\CustomActions\Common\CreateComPlusApplication.cs:line 32
at Microsoft.Dynamics.Deployment.MsiDeferredCustomAction.Begin()"
==================