Installing ATP Sensor on DC 2019 gives an 0x800070643

Oups 🙂

Here his the good one:

=== Verbose logging started: 3/23/2021 21:28:28 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\WINDOWS\Temp\{6DE9852F-8D93-493F-B36D-48CCE0C42AD0}\.be\Azure ATP Sensor Setup.exe ===
MSI (c) (24:68) [21:28:28:530]: Resetting cached policy values
MSI (c) (24:68) [21:28:28:530]: Machine policy value 'Debug' is 0
MSI (c) (24:68) [21:28:28:530]: ******* RunEngine:
******* Product: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
******* Action:
******* CommandLine: **********
MSI (c) (24:68) [21:28:28:530]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (24:68) [21:28:28:530]: Grabbed execution mutex.
MSI (c) (24:68) [21:28:28:608]: Cloaking enabled.
MSI (c) (24:68) [21:28:28:608]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (24:68) [21:28:28:624]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (B8:04) [21:28:28:687]: Running installation inside multi-package transaction C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
MSI (s) (B8:04) [21:28:28:687]: Grabbed execution mutex.
MSI (s) (B8:0C) [21:28:28:687]: Resetting cached policy values
MSI (s) (B8:0C) [21:28:28:687]: Machine policy value 'Debug' is 0
MSI (s) (B8:0C) [21:28:28:687]: ******* RunEngine:
******* Product: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
******* Action:
******* CommandLine: **********
MSI (s) (B8:0C) [21:28:28:687]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (B8:0C) [21:28:28:733]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (B8:0C) [21:28:28:733]: SRSetRestorePoint skipped for this transaction.
MSI (s) (B8:0C) [21:28:28:733]: File will have security applied from OpCode.
MSI (s) (B8:0C) [21:28:28:749]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi' against software restriction policy
MSI (s) (B8:0C) [21:28:28:749]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi has a digital signature
MSI (s) (B8:0C) [21:28:29:077]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (B8:0C) [21:28:29:093]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (B8:0C) [21:28:29:093]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (B8:0C) [21:28:29:093]: MSCOREE not loaded loading copy from system32
MSI (s) (B8:0C) [21:28:29:265]: End dialog not enabled
MSI (s) (B8:0C) [21:28:29:265]: Original package ==> C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
MSI (s) (B8:0C) [21:28:29:265]: Package we're running from ==> C:\WINDOWS\Installer\d29df.msi
MSI (s) (B8:0C) [21:28:29:265]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (B8:0C) [21:28:29:265]: APPCOMPAT: looking for appcompat database entry with ProductCode '{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}'.
MSI (s) (B8:0C) [21:28:29:265]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (B8:0C) [21:28:29:343]: Machine policy value 'TransformsSecure' is 1
MSI (s) (B8:0C) [21:28:29:343]: Note: 1: 2262 2: File 3: -2147287038
MSI (s) (B8:0C) [21:28:29:343]: Note: 1: 2205 2: 3: MsiFileHash
MSI (s) (B8:0C) [21:28:29:343]: Machine policy value 'DisablePatch' is 0
MSI (s) (B8:0C) [21:28:29:343]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (B8:0C) [21:28:29:343]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (B8:0C) [21:28:29:343]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (B8:0C) [21:28:29:374]: APPCOMPAT: looking for appcompat database entry with ProductCode '{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}'.
MSI (s) (B8:0C) [21:28:29:374]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (B8:0C) [21:28:29:374]: Transforms are not secure.
MSI (s) (B8:0C) [21:28:29:374]: Note: 1: 2205 2: 3: Control
MSI (s) (B8:0C) [21:28:29:374]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log'.
MSI (s) (B8:0C) [21:28:29:374]: Command Line: ARPSYSTEMCOMPONENT=1 MSIFASTINSTALL=7 ACCESSKEY=********** InstallationPath=C:\Program Files\Azure Advanced Threat Protection Sensor InstalledVersion= PROXYCONFIGURATION=********** WixBundleOriginalSourceFolder=C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\ REBOOT=ReallySuppress CURRENTDIRECTORY=C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=5412
MSI (s) (B8:0C) [21:28:29:374]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{0BAD7848-8937-41EC-8BCD-23F9A2B0F3E0}'.
MSI (s) (B8:0C) [21:28:29:374]: Product Code passed to Engine.Initialize: ''
MSI (s) (B8:0C) [21:28:29:374]: Product Code from property table before transforms: '{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}'
MSI (s) (B8:0C) [21:28:29:374]: Product Code from property table after transforms: '{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}'
MSI (s) (B8:0C) [21:28:29:374]: Product not registered: beginning first-time install
MSI (s) (B8:0C) [21:28:29:374]: Product {C5D46D5F-4BD9-4120-BE93-43672FC3C74F} is not managed.
MSI (s) (B8:0C) [21:28:29:374]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (B8:0C) [21:28:29:374]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (B8:0C) [21:28:29:374]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (B8:0C) [21:28:29:374]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (B8:0C) [21:28:29:421]: Adding new sources is allowed.
MSI (s) (B8:0C) [21:28:29:421]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (B8:0C) [21:28:29:421]: Package name extracted from package path: 'Microsoft.Tri.Sensor.Deployment.Package.msi'
MSI (s) (B8:0C) [21:28:29:421]: Package to be registered: 'Microsoft.Tri.Sensor.Deployment.Package.msi'
MSI (s) (B8:0C) [21:28:29:421]: Note: 1: 2205 2: 3: Error
MSI (s) (B8:0C) [21:28:29:437]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (B8:0C) [21:28:29:437]: Machine policy value 'DisableMsi' is 1
MSI (s) (B8:0C) [21:28:29:437]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (B8:0C) [21:28:29:437]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (B8:0C) [21:28:29:437]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (B8:0C) [21:28:29:437]: Running product '{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}' with elevated privileges: Product is assigned.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding ARPSYSTEMCOMPONENT property. Its value is '1'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding MSIFASTINSTALL property. Its value is '7'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding ACCESSKEY property. Its value is '**********'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding INSTALLATIONPATH property. Its value is 'C:\Program Files\Azure Advanced Threat Protection Sensor'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding WIXBUNDLEORIGINALSOURCEFOLDER property. Its value is 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '5412'.
MSI (s) (B8:0C) [21:28:29:437]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (B8:0C) [21:28:29:499]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is '149948302d66b744b97447c1d702a5f6'.
MSI (s) (B8:0C) [21:28:29:499]: RESTART MANAGER: Session opened.
MSI (s) (B8:0C) [21:28:29:499]: TRANSFORMS property is now:
MSI (s) (B8:0C) [21:28:29:499]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '500'.
MSI (s) (B8:0C) [21:28:29:499]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming
MSI (s) (B8:0C) [21:28:29:499]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\Favorites
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\Documents
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Local
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\Pictures
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\Desktop
MSI (s) (B8:0C) [21:28:29:577]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (B8:0C) [21:28:29:577]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI (s) (B8:0C) [21:28:29:577]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (B8:0C) [21:28:29:577]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (B8:0C) [21:28:29:577]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (B8:0C) [21:28:29:577]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\d29df.msi'.
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi'.
MSI (s) (B8:0C) [21:28:29:577]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (B8:0C) [21:28:29:577]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (B8:0C) [21:28:29:577]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (B8:0C) [21:28:29:577]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (B8:0C) [21:28:29:577]: Machine policy value 'DisableRollback' is 0
MSI (s) (B8:0C) [21:28:29:577]: User policy value 'DisableRollback' is 0
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding MsiUISourceResOnly property. Its value is '1'.
=== Logging started: 3/23/2021 21:28:29 ===
MSI (s) (B8:0C) [21:28:29:577]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (B8:0C) [21:28:29:577]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (s) (B8:0C) [21:28:29:812]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (B8:0C) [21:28:29:812]: Doing action: INSTALL
MSI (s) (B8:0C) [21:28:29:827]: Note: 1: 2205 2: 3: ActionText
Action start 21:28:29: INSTALL.
MSI (s) (B8:0C) [21:28:30:280]: Running ExecuteSequence
MSI (s) (B8:0C) [21:28:30:280]: Doing action: FindRelatedProducts
MSI (s) (B8:0C) [21:28:30:280]: Note: 1: 2205 2: 3: ActionText
Action start 21:28:30: FindRelatedProducts.
MSI (s) (B8:0C) [21:28:30:694]: Doing action: LaunchConditions
MSI (s) (B8:0C) [21:28:30:694]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: FindRelatedProducts. Return value 1.
Action start 21:28:30: LaunchConditions.
MSI (s) (B8:0C) [21:28:30:709]: Doing action: ValidateProductID
MSI (s) (B8:0C) [21:28:30:709]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: LaunchConditions. Return value 1.
Action start 21:28:30: ValidateProductID.
MSI (s) (B8:0C) [21:28:30:709]: Doing action: CostInitialize
MSI (s) (B8:0C) [21:28:30:709]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: ValidateProductID. Return value 1.
MSI (s) (B8:0C) [21:28:30:709]: Machine policy value 'MaxPatchCacheSize' is 10
Action start 21:28:30: CostInitialize.
MSI (s) (B8:0C) [21:28:30:709]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (s) (B8:0C) [21:28:30:709]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:725]: Note: 1: 2205 2: 3: Patch
MSI (s) (B8:0C) [21:28:30:725]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (B8:0C) [21:28:30:725]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (B8:0C) [21:28:30:725]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (B8:0C) [21:28:30:725]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: Patch
MSI (s) (B8:0C) [21:28:30:756]: Doing action: FileCost
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: CostInitialize. Return value 1.
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: MsiAssembly
Action start 21:28:30: FileCost.
MSI (s) (B8:0C) [21:28:30:756]: Doing action: CostFinalize
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: FileCost. Return value 1.
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: Patch
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: Condition
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (s) (B8:0C) [21:28:30:756]: Target path resolution complete. Dumping Directory table...
MSI (s) (B8:0C) [21:28:30:756]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (B8:0C) [21:28:30:756]: Dir (target): Key: TARGETDIR , Object: C:\
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
Action start 21:28:30: CostFinalize.
MSI (s) (B8:0C) [21:28:30:756]: Doing action: MigrateFeatureStates
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: CostFinalize. Return value 1.
Action start 21:28:30: MigrateFeatureStates.
MSI (s) (B8:0C) [21:28:30:756]: Doing action: InstallValidate
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: MigrateFeatureStates. Return value 0.
MSI (s) (B8:0C) [21:28:30:772]: PROPERTY CHANGE: Deleting MsiRestartManagerSessionKey property. Its current value is '149948302d66b744b97447c1d702a5f6'.
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Dialog
MSI (s) (B8:0C) [21:28:30:772]: Feature: ProductFeature; Installed: Absent; Request: Local; Action: Local
MSI (s) (B8:0C) [21:28:30:772]: Component: ProductComponent; Installed: Absent; Request: Local; Action: Local
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Registry
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: BindImage
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: ProgId
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Extension
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Font
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Shortcut
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Class
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Icon
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: TypeLib
Action start 21:28:30: InstallValidate.
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
MSI (s) (B8:0C) [21:28:30:772]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Registry
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: BindImage
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: ProgId
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Extension
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Font
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Shortcut
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Class
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Icon
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2727 2:
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: FilesInUse
MSI (s) (B8:0C) [21:28:30:787]: Note: 1: 2727 2:
MSI (s) (B8:0C) [21:28:30:787]: Doing action: InstallInitialize
MSI (s) (B8:0C) [21:28:30:787]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: InstallValidate. Return value 1.
MSI (s) (B8:0C) [21:28:30:787]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (B8:0C) [21:28:30:787]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (B8:0C) [21:28:30:787]: BeginTransaction: Locking Server
MSI (s) (B8:0C) [21:28:30:787]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (B8:0C) [21:28:30:787]: SRSetRestorePoint skipped for this transaction.
MSI (s) (B8:0C) [21:28:30:787]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (B8:0C) [21:28:30:787]: Server not locked: locking for product {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}
Action start 21:28:30: InstallInitialize.
MSI (s) (B8:0C) [21:28:30:866]: Doing action: InstallCustomAction
MSI (s) (B8:0C) [21:28:30:866]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: InstallInitialize. Return value 1.
MSI (s) (B8:D8) [21:28:30:881]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI322C.tmp, Entrypoint: Install
MSI (s) (B8:A8) [21:28:30:881]: Generating random cookie.
MSI (s) (B8:A8) [21:28:30:881]: Created Custom Action Server with PID 3240 (0xCA8).
MSI (s) (B8:E8) [21:28:30:928]: Running as a service.
MSI (s) (B8:D0) [21:28:30:944]: Hello, I'm your 64bit Impersonated custom action server.
Action start 21:28:30: InstallCustomAction.
SFXCA: Extracting custom action to temporary directory: C:\WINDOWS\Installer\MSI322C.tmp-\
SFXCA: Binding to CLR version v4.0.30319
Calling custom action Microsoft.Tri.Sensor.Deployment.Package.Actions!Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions.Install
2021-03-24 01:28:37.6941 Debug CustomActions RunActionGroup InstallActionGroup started
2021-03-24 01:28:37.6941 Debug InstallActionGroup Apply started
2021-03-24 01:28:37.6941 Debug CreateDirectoryDeploymentAction Apply started [suppressFailure=False]
2021-03-24 01:28:39.0223 Debug CreateDirectoryDeploymentAction Apply finished
2021-03-24 01:28:39.0379 Debug DownloadMinorDeploymentPackageBytesAction Apply started [suppressFailure=False]
2021-03-24 01:28:41.4349 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [typeName=GetSensorMinorDeploymentPackageSensorApiDeploymentResponse]
2021-03-24 01:28:41.9817 Debug DownloadMinorDeploymentPackageBytesAction Apply finished
2021-03-24 01:28:41.9817 Debug UnpackDeploymentPackageBytesAction Apply started [suppressFailure=False]
2021-03-24 01:28:43.3880 Debug UnpackDeploymentPackageBytesAction Apply finished
2021-03-24 01:28:43.3880 Debug RunDeployerMajorDeploymentAction Apply started [suppressFailure=False]
2021-03-24 01:28:43.4192 Info RunDeployerMajorDeploymentAction ApplyInternal started [filePath=JdG+3PBL3Dh9yZglfY1LBg== _arguments=z9TVJHShWm8T2CFc22hXBA==]
2021-03-24 01:28:53.8753 Info RunDeployerMajorDeploymentAction ApplyInternal finished [isSuccessful=False]
2021-03-24 01:28:53.8909 Debug InstallActionGroup Revert started
2021-03-24 01:28:53.8909 Warn InstallActionGroup Revert reverting [rollbackAction=UnpackDeploymentPackageBytesAction index=0 count=3]
2021-03-24 01:28:53.8909 Debug UnpackDeploymentPackageBytesAction Revert started
2021-03-24 01:28:53.9847 Debug UnpackDeploymentPackageBytesAction Revert finished
2021-03-24 01:28:54.0003 Warn InstallActionGroup Revert reverting [rollbackAction=DownloadMinorDeploymentPackageBytesAction index=1 count=3]
2021-03-24 01:28:54.0003 Debug DownloadMinorDeploymentPackageBytesAction Revert started
2021-03-24 01:28:54.0003 Debug DownloadMinorDeploymentPackageBytesAction Revert finished
2021-03-24 01:28:54.0003 Warn InstallActionGroup Revert reverting [rollbackAction=CreateDirectoryDeploymentAction index=2 count=3]
2021-03-24 01:28:54.0003 Debug CreateDirectoryDeploymentAction Revert started
2021-03-24 01:28:54.0003 Debug CreateDirectoryDeploymentAction Revert finished
2021-03-24 01:28:54.0003 Debug InstallActionGroup Revert finished
2021-03-24 01:28:54.1097 Error DeploymentAction Failed to apply InstallActionGroup
Microsoft.Tri.Infrastructure.ExtendedException: Apply failed [Type=RunDeployerMajorDeploymentAction]
at Microsoft.Tri.Sensor.Common.DeploymentAction.Apply(Boolean suppressFailure)
at Microsoft.Tri.Sensor.Common.DeploymentActionGroup.Apply(Boolean suppressFailure)
at Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions.RunActionGroup(DeploymentActionGroup deploymentActionGroup, Session session)
2021-03-24 01:28:54.1097 Debug CustomActions RunActionGroup InstallActionGroup finished [result=Failure]
CustomAction InstallCustomAction returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (B8:0C) [21:28:54:267]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (B8:0C) [21:28:54:267]: Machine policy value 'DisableRollback' is 0
MSI (s) (B8:0C) [21:28:54:267]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
Action ended 21:28:54: InstallCustomAction. Return value 3.
MSI (s) (B8:0C) [21:28:54:267]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (B8:0C) [21:28:54:267]: No System Restore sequence number for this installation.
MSI (s) (B8:0C) [21:28:54:267]: Unlocking Server
Action ended 21:28:54: INSTALL. Return value 3.
Property(S): UpgradeCode = {EDFB49E0-16FA-4535-B268-BD1B81B15DC2}
Property(S): TARGETDIR = C:\
Property(S): ALLUSERS = 1
Property(S): Manufacturer = Microsoft Corporation
Property(S): ProductCode = {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Azure Advanced Threat Protection Sensor
Property(S): ProductVersion = 2.0.0.0
Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED
Property(S): MsiHiddenProperties = ACCESSKEY;PROXYCONFIGURATION
Property(S): MsiLogFileLocation = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log
Property(S): PackageCode = {0BAD7848-8937-41EC-8BCD-23F9A2B0F3E0}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): MSIFASTINSTALL = 7
Property(S): ACCESSKEY = **********
Property(S): INSTALLATIONPATH = C:\Program Files\Azure Advanced Threat Protection Sensor
Property(S): WIXBUNDLEORIGINALSOURCEFOLDER = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\
Property(S): REBOOT = ReallySuppress
Property(S): CURRENTDIRECTORY = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 5412
Property(S): VersionDatabase = 500
Property(S): VersionMsi = 5.00
Property(S): VersionNT = 603
Property(S): VersionNT64 = 603
Property(S): WindowsBuild = 9600
Property(S): ServicePackLevel = 0
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 2
Property(S): MsiNTSuiteDataCenter = 1
Property(S): WindowsFolder = C:\WINDOWS\
Property(S): WindowsVolume = C:\
Property(S): System64Folder = C:\WINDOWS\system32\
Property(S): SystemFolder = C:\WINDOWS\SysWOW64\
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Users\JEAN-P~1\AppData\Local\Temp\
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Users\Jean-Philippe_Breton\AppData\Roaming\
Property(S): FavoritesFolder = C:\Users\Jean-Philippe_Breton\Favorites\
Property(S): NetHoodFolder = C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Users\Jean-Philippe_Breton\Documents\
Property(S): PrintHoodFolder = C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): SendToFolder = C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): LocalAppDataFolder = C:\Users\Jean-Philippe_Breton\AppData\Local\
Property(S): MyPicturesFolder = C:\Users\Jean-Philippe_Breton\Pictures\
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FontsFolder = C:\WINDOWS\Fonts\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): MsiAMD64 = 6
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 8192
Property(S): VirtualMemory = 7286
Property(S): AdminUser = 1
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = Jean-Philippe_Breton
Property(S): UserSID = S-1-5-21-3985112737-1076373109-1309005388-1605
Property(S): UserLanguageID = 1033
Property(S): ComputerName = AZ-DC02
Property(S): SystemLanguageID = 1033
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 19
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): MsiTabletPC = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 21:28:54
Property(S): Date = 3/23/2021
Property(S): MsiNetAssemblySupport = 4.7.3190.0
Property(S): MsiWin32AssemblySupport = 6.3.17763.1
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): DATABASE = C:\WINDOWS\Installer\d29df.msi
Property(S): OriginalDatabase = C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
Property(S): UILevel = 2
Property(S): MsiUISourceResOnly = 1
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = C:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): INSTALLLEVEL = 1
MSI (s) (B8:0C) [21:28:54:314]: Note: 1: 1708
MSI (s) (B8:0C) [21:28:54:314]: Note: 1: 2205 2: 3: Error
MSI (s) (B8:0C) [21:28:54:314]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708
MSI (s) (B8:0C) [21:28:54:314]: Note: 1: 2205 2: 3: Error
MSI (s) (B8:0C) [21:28:54:314]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
MSI (s) (B8:0C) [21:28:54:314]: Product: Azure Advanced Threat Protection Sensor -- Installation failed.

MSI (s) (B8:0C) [21:28:54:314]: Windows Installer installed the product. Product Name: Azure Advanced Threat Protection Sensor. Product Version: 2.0.0.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 1603.

MSI (s) (B8:0C) [21:28:54:314]: Deferring clean up of packages/files, if any exist
MSI (s) (B8:0C) [21:28:54:314]: MainEngineThread is returning 1603
MSI (s) (B8:04) [21:28:54:314]: RESTART MANAGER: Session closed.
MSI (s) (B8:04) [21:28:54:314]: No System Restore sequence number for this installation.
=== Logging stopped: 3/23/2021 21:28:54 ===
MSI (s) (B8:04) [21:28:54:330]: User policy value 'DisableRollback' is 0
MSI (s) (B8:04) [21:28:54:330]: Machine policy value 'DisableRollback' is 0
MSI (s) (B8:04) [21:28:54:330]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (B8:04) [21:28:54:330]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (B8:04) [21:28:54:330]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (B8:04) [21:28:54:330]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (B8:04) [21:28:54:345]: Destroying RemoteAPI object.
MSI (s) (B8:A8) [21:28:54:345]: Custom Action Manager thread ending.
MSI (c) (24:68) [21:28:54:345]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (24:68) [21:28:54:345]: MainEngineThread is returning 1603
=== Verbose logging stopped: 3/23/2021 21:28:54 ===