Forum Discussion

Jean-Philippe Breton's avatar
Jean-Philippe Breton
Iron Contributor
Mar 24, 2021
Solved

Installing ATP Sensor on DC 2019 gives an 0x800070643

I have 2 DC Server 2019.

1 DC installed fine, the other give an error on installation : 0x80070643

 

np proxy

no core

Fully patches.

 

[1FE0:10F4][2021-03-23T21:27:05]i001: Burn v3.11.2.4516, Windows v10.0 (Build 17763: Service Pack 0), path: C:\WINDOWS\Temp\{D6EA0EAB-9A71-43B8-BEE0-A4349FB8C26A}\.cr\Azure ATP Sensor Setup.exe
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'AccessKey'
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'ProxyConfiguration'
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'ProxyUserPassword'
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
[1FE0:10F4][2021-03-23T21:27:05]i009: Command Line: '"-burn.clean.room=C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe" -burn.filehandle.attached=704 -burn.filehandle.self=616'
[1FE0:10F4][2021-03-23T21:27:05]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe'
[1FE0:10F4][2021-03-23T21:27:05]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\'
[1FE0:10F4][2021-03-23T21:27:06]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706.log'
[1FE0:10F4][2021-03-23T21:27:07]i000: Setting string variable 'WixBundleName' to value 'Azure Advanced Threat Protection Sensor'
[1FE0:10F4][2021-03-23T21:27:07]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
[1FE0:10F4][2021-03-23T21:27:13]i000: Loading managed bootstrapper application.
[1FE0:10F4][2021-03-23T21:27:17]i000: Creating BA thread to run asynchronously.
[1FE0:10F4][2021-03-23T21:27:24]i100: Detect begin, 5 packages
[1FE0:10F4][2021-03-23T21:27:24]i000: 2021-03-24 01:27:24.8699 Debug DeploymentModel DetectDeploymentAction DetectBegin [\[]Installed=False[\]]
[1FE0:10F4][2021-03-23T21:27:25]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.1.1.2'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting numeric variable 'Kb4019990Windows2008R2Exists' to value 0
[1FE0:10F4][2021-03-23T21:27:25]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting numeric variable 'Kb4019990Windows2012Exists' to value 0
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'NetFrameworkRegistryValue' to value '461814'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'ServerLevelsServerCoreRegistryValue' to value '1'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'ServerLevelsServerGuiShellRegistryValue' to value '1'
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'Kb4019990Windows2008R2Exists' evaluates to false.
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'Kb4019990Windows2012Exists' evaluates to false.
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: Kb4019990Windows2008R2Package, state: Absent, cached: None
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: Kb4019990Windows2012Package, state: Absent, cached: None
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: Complete
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: Complete
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: MsiPackage, state: Absent, cached: None
[1FE0:10F4][2021-03-23T21:27:25]i199: Detect complete, result: 0x0
[1FE0:1FF0][2021-03-23T21:27:25]i000: 2021-03-24 01:27:25.3699 Debug DeploymentModel .ctor [\[]DeploymentAction=Install[\]]
[1FE0:1FF0][2021-03-23T21:27:26]i000: 2021-03-24 01:27:26.7917 Debug DeploymentModel .ctor [\[]IsAfterRestartAndConfigured=False[\]]
[1FE0:1FF0][2021-03-23T21:28:21]i000: 2021-03-24 01:28:21.2695 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=SensorInstallationConfiguration[\]]
[1FE0:1FF0][2021-03-23T21:28:21]i000: 2021-03-24 01:28:21.6601 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=EndpointData[\]]
[1FE0:1FF0][2021-03-23T21:28:25]i000: 2021-03-24 01:28:25.2767 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=ValidateCreateSensorResponse[\]]
[1FE0:1FF0][2021-03-23T21:28:25]i000: 2021-03-24 01:28:25.4127 Info Model ValidateAsync ValidateCreateSensorAsync returned [\[]validateCreateSensorResult=Success[\]]
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting string variable 'IsConfigured' to value 'True'
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting hidden variable 'AccessKey'
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting hidden variable 'ProxyConfiguration'
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting string variable 'InstallationPath' to value 'C:\Program Files\Azure Advanced Threat Protection Sensor'
[1FE0:10F4][2021-03-23T21:28:25]i200: Plan begin, 5 packages, action: Install
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'VersionNT64 = v6.1' evaluates to false.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2008R2Package
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'VersionNT64 = v6.2' evaluates to false.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2012Package
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
[1FE0:10F4][2021-03-23T21:28:25]i000: Setting string variable 'WixBundleRollbackLog_MsiPackage' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage_rollback.log'
[1FE0:10F4][2021-03-23T21:28:25]i000: Setting string variable 'WixBundleLog_MsiPackage' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log'
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: Kb4019990Windows2008R2Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: Kb4019990Windows2012Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: NetFrameworkPackageServer, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: NetFrameworkPackageServerCore, state: Present, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
[1FE0:10F4][2021-03-23T21:28:25]i299: Plan complete, result: 0x0
[1FE0:10F4][2021-03-23T21:28:25]i300: Apply begin
[1FE0:10F4][2021-03-23T21:28:25]i010: Launching elevated engine process.
[1FE0:10F4][2021-03-23T21:28:27]i011: Launched elevated engine process.
[1FE0:10F4][2021-03-23T21:28:27]i012: Connected to elevated engine.
[1524:1788][2021-03-23T21:28:27]i358: Pausing automatic updates.
[1524:1788][2021-03-23T21:28:27]i359: Paused automatic updates.
[1524:1788][2021-03-23T21:28:27]i360: Creating a system restore point.
[1524:1788][2021-03-23T21:28:27]i362: System restore disabled, system restore point not created.
[1524:1788][2021-03-23T21:28:27]i370: Session begin, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, options: 0x7, disable resume: No
[1524:1788][2021-03-23T21:28:27]i000: Caching bundle from: 'C:\WINDOWS\Temp\{6DE9852F-8D93-493F-B36D-48CCE0C42AD0}\.be\Azure ATP Sensor Setup.exe' to: 'C:\ProgramData\Package Cache\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}\Azure ATP Sensor Setup.exe'
[1524:1788][2021-03-23T21:28:27]i320: Registering bundle dependency provider: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, version: 2.0.0.0
[1524:1788][2021-03-23T21:28:27]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: Active, restart initiated: No, disable resume: No
[1524:1ABC][2021-03-23T21:28:28]i305: Verified acquired payload: MsiPackage at path: C:\ProgramData\Package Cache\.unverified\MsiPackage, moving to: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi.
[1524:1788][2021-03-23T21:28:28]i323: Registering package dependency provider: {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}, version: 2.0.0.0, package: MsiPackage
[1524:1788][2021-03-23T21:28:28]i301: Applying execute package: MsiPackage, action: Install, path: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi, arguments: ' ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7" ACCESSKEY="*****" InstallationPath="C:\Program Files\Azure Advanced Threat Protection Sensor" InstalledVersion="" PROXYCONFIGURATION="*****" WixBundleOriginalSourceFolder="C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\"'
[1524:1788][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to install MSI package.
[1524:1788][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to execute MSI package.
[1FE0:10F4][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to configure per-machine MSI package.
[1FE0:10F4][2021-03-23T21:28:54]i000: 2021-03-24 01:28:54.3612 Error Model LogError [\[]methodName=BootstrapperApplication_ExecutePackageComplete status=-2147023293 exception=[\]]
[1FE0:10F4][2021-03-23T21:28:54]i319: Applied execute package: MsiPackage, result: 0x80070643, restart: None
[1FE0:10F4][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to execute MSI package.
[1524:1788][2021-03-23T21:28:54]i318: Skipped rollback of package: MsiPackage, action: Uninstall, already: Absent
[1FE0:10F4][2021-03-23T21:28:54]i319: Applied rollback package: MsiPackage, result: 0x0, restart: None
[1524:1788][2021-03-23T21:28:54]i329: Removed package dependency provider: {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}, package: MsiPackage
[1524:1788][2021-03-23T21:28:54]i351: Removing cached package: MsiPackage, from path: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\
[1524:1788][2021-03-23T21:28:54]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: None, restart: None, disable resume: No
[1524:1788][2021-03-23T21:28:54]i330: Removed bundle dependency provider: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}
[1524:1788][2021-03-23T21:28:54]i352: Removing cached bundle: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, from path: C:\ProgramData\Package Cache\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}\
[1524:1788][2021-03-23T21:28:54]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: None, restart initiated: No, disable resume: No
[1FE0:10F4][2021-03-23T21:28:54]i399: Apply complete, result: 0x80070643, restart: None, ba requested restart: No
[1FE0:1FF0][2021-03-23T21:34:20]i000: 2021-03-24 01:34:20.3723 Debug SensorBootstrapperApplication Run Engine.Quit [\[]deploymentResultStatus=-2147023293 isRestartRequired=False[\]]
[1FE0:10F4][2021-03-23T21:34:20]i500: Shutting down, exit code: 0x80070643
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: AccessKey = *****
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: InstallationPath = C:\Program Files\Azure Advanced Threat Protection Sensor
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: IsConfigured = True
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: Kb4019990Windows2008R2Exists = 0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: Kb4019990Windows2012Exists = 0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: NetFrameworkRegistryValue = 461814
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: RebootPending = 0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: ServerLevelsServerCoreRegistryValue = 1
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: ServerLevelsServerGuiShellRegistryValue = 1
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: VersionNT64 = 10.0.0.0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleAction = 5
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleElevated = 1
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleLog = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706.log
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleLog_MsiPackage = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleManufacturer = Microsoft Corporation
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleName = Azure Advanced Threat Protection Sensor
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleOriginalSource = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleOriginalSourceFolder = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleProviderKey = {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleRollbackLog_MsiPackage = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage_rollback.log
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleSourceProcessFolder = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleSourceProcessPath = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleTag =
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleUILevel = 4
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleVersion = 2.0.0.0
[1FE0:10F4][2021-03-23T21:34:20]i007: Exit code: 0x80070643, restarting: No

 

 

  • EliOfek's avatar
    EliOfek
    Mar 25, 2021
    The service is already there, the sensor was already installed but was not removed in a clean way.
    delete the services manually:
    sc delete AATPSensor
    sc delete AATPSensorUpdater
    And also delete the files from the deployment folder and try again.

19 Replies

    • EliOfek's avatar
      EliOfek
      Icon for Microsoft rankMicrosoft
      Check the logs to see what's is blocking it now.
  • Need to search for the problem in the MSI log in
    C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log
    • Jean-Philippe Breton's avatar
      Jean-Philippe Breton
      Iron Contributor
      Here you go:

      [1FE0:10F4][2021-03-23T21:27:05]i001: Burn v3.11.2.4516, Windows v10.0 (Build 17763: Service Pack 0), path: C:\WINDOWS\Temp\{D6EA0EAB-9A71-43B8-BEE0-A4349FB8C26A}\.cr\Azure ATP Sensor Setup.exe
      [1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'AccessKey'
      [1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'ProxyConfiguration'
      [1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'ProxyUserPassword'
      [1FE0:10F4][2021-03-23T21:27:05]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
      [1FE0:10F4][2021-03-23T21:27:05]i009: Command Line: '"-burn.clean.room=C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe" -burn.filehandle.attached=704 -burn.filehandle.self=616'
      [1FE0:10F4][2021-03-23T21:27:05]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe'
      [1FE0:10F4][2021-03-23T21:27:05]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\'
      [1FE0:10F4][2021-03-23T21:27:06]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706.log'
      [1FE0:10F4][2021-03-23T21:27:07]i000: Setting string variable 'WixBundleName' to value 'Azure Advanced Threat Protection Sensor'
      [1FE0:10F4][2021-03-23T21:27:07]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
      [1FE0:10F4][2021-03-23T21:27:13]i000: Loading managed bootstrapper application.
      [1FE0:10F4][2021-03-23T21:27:17]i000: Creating BA thread to run asynchronously.
      [1FE0:10F4][2021-03-23T21:27:24]i100: Detect begin, 5 packages
      [1FE0:10F4][2021-03-23T21:27:24]i000: 2021-03-24 01:27:24.8699 Debug DeploymentModel DetectDeploymentAction DetectBegin [\[]Installed=False[\]]
      [1FE0:10F4][2021-03-23T21:27:25]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.1.1.2'
      [1FE0:10F4][2021-03-23T21:27:25]i000: Setting numeric variable 'Kb4019990Windows2008R2Exists' to value 0
      [1FE0:10F4][2021-03-23T21:27:25]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'
      [1FE0:10F4][2021-03-23T21:27:25]i000: Setting numeric variable 'Kb4019990Windows2012Exists' to value 0
      [1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'NetFrameworkRegistryValue' to value '461814'
      [1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'ServerLevelsServerCoreRegistryValue' to value '1'
      [1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'ServerLevelsServerGuiShellRegistryValue' to value '1'
      [1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'Kb4019990Windows2008R2Exists' evaluates to false.
      [1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'Kb4019990Windows2012Exists' evaluates to false.
      [1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
      [1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
      [1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: Kb4019990Windows2008R2Package, state: Absent, cached: None
      [1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: Kb4019990Windows2012Package, state: Absent, cached: None
      [1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: Complete
      [1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: Complete
      [1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: MsiPackage, state: Absent, cached: None
      [1FE0:10F4][2021-03-23T21:27:25]i199: Detect complete, result: 0x0
      [1FE0:1FF0][2021-03-23T21:27:25]i000: 2021-03-24 01:27:25.3699 Debug DeploymentModel .ctor [\[]DeploymentAction=Install[\]]
      [1FE0:1FF0][2021-03-23T21:27:26]i000: 2021-03-24 01:27:26.7917 Debug DeploymentModel .ctor [\[]IsAfterRestartAndConfigured=False[\]]
      [1FE0:1FF0][2021-03-23T21:28:21]i000: 2021-03-24 01:28:21.2695 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=SensorInstallationConfiguration[\]]
      [1FE0:1FF0][2021-03-23T21:28:21]i000: 2021-03-24 01:28:21.6601 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=EndpointData[\]]
      [1FE0:1FF0][2021-03-23T21:28:25]i000: 2021-03-24 01:28:25.2767 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=ValidateCreateSensorResponse[\]]
      [1FE0:1FF0][2021-03-23T21:28:25]i000: 2021-03-24 01:28:25.4127 Info Model ValidateAsync ValidateCreateSensorAsync returned [\[]validateCreateSensorResult=Success[\]]
      [1FE0:1FF0][2021-03-23T21:28:25]i000: Setting string variable 'IsConfigured' to value 'True'
      [1FE0:1FF0][2021-03-23T21:28:25]i000: Setting hidden variable 'AccessKey'
      [1FE0:1FF0][2021-03-23T21:28:25]i000: Setting hidden variable 'ProxyConfiguration'
      [1FE0:1FF0][2021-03-23T21:28:25]i000: Setting string variable 'InstallationPath' to value 'C:\Program Files\Azure Advanced Threat Protection Sensor'
      [1FE0:10F4][2021-03-23T21:28:25]i200: Plan begin, 5 packages, action: Install
      [1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'VersionNT64 = v6.1' evaluates to false.
      [1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2008R2Package
      [1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'VersionNT64 = v6.2' evaluates to false.
      [1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2012Package
      [1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
      [1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
      [1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
      [1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
      [1FE0:10F4][2021-03-23T21:28:25]i000: Setting string variable 'WixBundleRollbackLog_MsiPackage' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage_rollback.log'
      [1FE0:10F4][2021-03-23T21:28:25]i000: Setting string variable 'WixBundleLog_MsiPackage' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log'
      [1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: Kb4019990Windows2008R2Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
      [1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: Kb4019990Windows2012Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
      [1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: NetFrameworkPackageServer, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
      [1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: NetFrameworkPackageServerCore, state: Present, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
      [1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
      [1FE0:10F4][2021-03-23T21:28:25]i299: Plan complete, result: 0x0
      [1FE0:10F4][2021-03-23T21:28:25]i300: Apply begin
      [1FE0:10F4][2021-03-23T21:28:25]i010: Launching elevated engine process.
      [1FE0:10F4][2021-03-23T21:28:27]i011: Launched elevated engine process.
      [1FE0:10F4][2021-03-23T21:28:27]i012: Connected to elevated engine.
      [1524:1788][2021-03-23T21:28:27]i358: Pausing automatic updates.
      [1524:1788][2021-03-23T21:28:27]i359: Paused automatic updates.
      [1524:1788][2021-03-23T21:28:27]i360: Creating a system restore point.
      [1524:1788][2021-03-23T21:28:27]i362: System restore disabled, system restore point not created.
      [1524:1788][2021-03-23T21:28:27]i370: Session begin, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, options: 0x7, disable resume: No
      [1524:1788][2021-03-23T21:28:27]i000: Caching bundle from: 'C:\WINDOWS\Temp\{6DE9852F-8D93-493F-B36D-48CCE0C42AD0}\.be\Azure ATP Sensor Setup.exe' to: 'C:\ProgramData\Package Cache\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}\Azure ATP Sensor Setup.exe'
      [1524:1788][2021-03-23T21:28:27]i320: Registering bundle dependency provider: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, version: 2.0.0.0
      [1524:1788][2021-03-23T21:28:27]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: Active, restart initiated: No, disable resume: No
      [1524:1ABC][2021-03-23T21:28:28]i305: Verified acquired payload: MsiPackage at path: C:\ProgramData\Package Cache\.unverified\MsiPackage, moving to: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi.
      [1524:1788][2021-03-23T21:28:28]i323: Registering package dependency provider: {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}, version: 2.0.0.0, package: MsiPackage
      [1524:1788][2021-03-23T21:28:28]i301: Applying execute package: MsiPackage, action: Install, path: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi, arguments: ' ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7" ACCESSKEY="*****" InstallationPath="C:\Program Files\Azure Advanced Threat Protection Sensor" InstalledVersion="" PROXYCONFIGURATION="*****" WixBundleOriginalSourceFolder="C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\"'
      [1524:1788][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to install MSI package.
      [1524:1788][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to execute MSI package.
      [1FE0:10F4][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to configure per-machine MSI package.
      [1FE0:10F4][2021-03-23T21:28:54]i000: 2021-03-24 01:28:54.3612 Error Model LogError [\[]methodName=BootstrapperApplication_ExecutePackageComplete status=-2147023293 exception=[\]]
      [1FE0:10F4][2021-03-23T21:28:54]i319: Applied execute package: MsiPackage, result: 0x80070643, restart: None
      [1FE0:10F4][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to execute MSI package.
      [1524:1788][2021-03-23T21:28:54]i318: Skipped rollback of package: MsiPackage, action: Uninstall, already: Absent
      [1FE0:10F4][2021-03-23T21:28:54]i319: Applied rollback package: MsiPackage, result: 0x0, restart: None
      [1524:1788][2021-03-23T21:28:54]i329: Removed package dependency provider: {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}, package: MsiPackage
      [1524:1788][2021-03-23T21:28:54]i351: Removing cached package: MsiPackage, from path: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\
      [1524:1788][2021-03-23T21:28:54]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: None, restart: None, disable resume: No
      [1524:1788][2021-03-23T21:28:54]i330: Removed bundle dependency provider: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}
      [1524:1788][2021-03-23T21:28:54]i352: Removing cached bundle: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, from path: C:\ProgramData\Package Cache\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}\
      [1524:1788][2021-03-23T21:28:54]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: None, restart initiated: No, disable resume: No
      [1FE0:10F4][2021-03-23T21:28:54]i399: Apply complete, result: 0x80070643, restart: None, ba requested restart: No
      [1FE0:1FF0][2021-03-23T21:34:20]i000: 2021-03-24 01:34:20.3723 Debug SensorBootstrapperApplication Run Engine.Quit [\[]deploymentResultStatus=-2147023293 isRestartRequired=False[\]]
      [1FE0:10F4][2021-03-23T21:34:20]i500: Shutting down, exit code: 0x80070643
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: AccessKey = *****
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: InstallationPath = C:\Program Files\Azure Advanced Threat Protection Sensor
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: IsConfigured = True
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: Kb4019990Windows2008R2Exists = 0
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: Kb4019990Windows2012Exists = 0
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: NetFrameworkRegistryValue = 461814
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: RebootPending = 0
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: ServerLevelsServerCoreRegistryValue = 1
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: ServerLevelsServerGuiShellRegistryValue = 1
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: VersionNT64 = 10.0.0.0
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleAction = 5
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleElevated = 1
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleLog = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706.log
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleLog_MsiPackage = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleManufacturer = Microsoft Corporation
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleName = Azure Advanced Threat Protection Sensor
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleOriginalSource = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleOriginalSourceFolder = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleProviderKey = {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleRollbackLog_MsiPackage = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage_rollback.log
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleSourceProcessFolder = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleSourceProcessPath = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleTag =
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleUILevel = 4
      [1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleVersion = 2.0.0.0
      [1FE0:10F4][2021-03-23T21:34:20]i007: Exit code: 0x80070643, restarting: No
      • EliOfek's avatar
        EliOfek
        Icon for Microsoft rankMicrosoft
        I think you pasted the previous log again... not the additional file I requested...

Resources