Forum Discussion
PhilippFoeckeler
Dec 23, 2019Copper Contributor
Azure ATP Sensor install failing (Updater Service do not start)
Hello All! We try to install the Azure ATP Sensor on a DC, setup wizard is running until this point ...then do some retries for about 3 minutes, during this time the service "Azure Advanced T...
- Jun 15, 2020
Actually, the solution in our case was to use Silent Installation (https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-silent-installation#proxy-authentication) and provide the Proxy Information in the commandline.
Thank you all for helping and advising!!!
EliOfek
Microsoft
Dec 28, 2019PhilippFoeckeler , Any chance you can temporary bypass this proxy just to see if it resolves the issue?
At least for the error sample you published, the problem is going to the azure backend, not to localhost.
PhilippFoeckeler
Jan 13, 2020Copper Contributor
EliOfek , First of all Thank you so much for the help so far!!
Unfortunately, we are still stuck at the same point - the system is sensitive and Risk and Security Team do not allow to connect directly to the internet, even if it's temporary..
What we tried in the meantime:
We enabled routing to another Proxy which is used by other Domain Controllers (where the ATP sensor could be installed without any problems).... Proxy can be used in the browser, proxy was set as system proxy.... same issue - no blocks whatsoever are visible at the proxy.
We disabled local endpoint protection for this server (Cisco AMP) during the install....same issue.
I think i will open a Premier Support Ticket so that a MS Engineer can have a look in a remote session on this server....
- Vishal_Sharma_4224Mar 06, 2020
Microsoft
PhilippFoeckeler So the issue has been resolved now 🙂
- Richard AdamsFeb 13, 2020Copper Contributor
I am getting exactly the same error at my client's site. Identical configuration used each time, majority of DCs installation works fine, but on those that don't I see exactly the same issue as you describe.
While the install is proceeding (or stuck mid point as you are seeing), the sensor appears in the console in a stopped state (it is even possible to configure the update settings), but when the client install eventually times out with the error, the sensor gets cleared out of the console as well. The only other symptom I have noticed is the multiple 'unexpected restart' entries in the system log and the ATP Sensor updater service usually stuck in the 'starting state'. I have not found any issues with the WMI performance adaptor either, something I checked because it is a dependency of the Sensor updater service.
- EliOfekFeb 13, 2020
Microsoft
Richard Adams , a bit confused, are you getting the same error during deployment or service start?
- Richard AdamsFeb 13, 2020Copper Contributor
Hi,
Same as the poster's original screenshot. The installation gets stuck (about midway through according to the GUI). After a long wait it removes the sensor from the console, backs out the client install and displays the installation failure error (0x80070643) which suggests proxy issues, but if this was the case how would the client register in Security Center in the first place? I am using exactly the same installation process on all my Client's DCs, so far I have had 15 successful and another 5 or so fail.
Richard