Forum Discussion

Ray Ellington's avatar
Ray Ellington
Copper Contributor
Mar 06, 2018

Installing on Server Core

I've tried every combination I can think of and find with the "/?" help and cannot get the Azure ATP Sensor to install on any of my Server Core (2016 or 2012R2) Domain Controllers. Any hints?

 

Whether I run using /quiet or not the installer process starts for about a second then dies.

18 Replies

  • Derald Stone's avatar
    Derald Stone
    Copper Contributor

    I am seeing the same issue.  Per the logs it is an issue with a proxy.  Since Windows Core doesn't have Internet Explorer installed on it, I am wondering if it isn't seeing the Proxy settings and thus is failing. 

    • Joe Stern's avatar
      Joe Stern
      Iron Contributor
      1. LaunchNotepad with elevated permissions
      2. Open "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config"
      3. Add the following text just above the </Configuration> tag at the bottom of the document:
        ​    <system.net>
                <defaultProxy enabled="true" useDefaultCredentials="true">
                    <proxy
                    usesystemdefault="true"
                    proxyaddress="http://192.168.28.xxx:8080"
                    bypassonlocal="true"
                    />
                </defaultProxy>​​
            </system.net>
      4. Save the config file and restart the computer
  • atsmb's avatar
    atsmb
    Copper Contributor

    I'm also running into issues with the installation of the sensor on a core DC. Tried it with the suggested command but no luck. Which .NET framework version is required? Got 460805 (4.7).

      • atsmb's avatar
        atsmb
        Copper Contributor

        okay - still no luck. starting the installer with the suggested commands and the installer just appears for some seconds. where are the logs stored?

  • Klaus Reiter's avatar
    Klaus Reiter
    Copper Contributor

    Hello Ray, 

    this command installed the Sensor on my Server 2016 Core.

    "Azure ATP Sensor Setup.exe" /q NetFrameworkCommandLineArguments="q" AccessKey=****************

     

    • AusSupport180's avatar
      AusSupport180
      Brass Contributor

      Klaus Reiter I have downloaded the Azure ATP Sensor to my share location \\server\atp sensor

      so how do i install from server core?

       

      "Azure ATP Sensor Setup.exe" /q NetFrameworkCommandLineArguments="q" AccessKey=****************

      • Steven Hoggatt's avatar
        Steven Hoggatt
        Copper Contributor

        AusSupport180 just like that.
        "Azure ATP Sensor Setup.exe" /q NetFrameworkCommandLineArguments="q" AccessKey=****************

         

        I copied the sensors to the c:\temp folder for each DC but I don't see why you couldn't run it from a UNC path.

      • meliss0215's avatar
        meliss0215
        Copper Contributor

        Hi - Has anyone successfully installed the Azure ATP sensor on Server 2012 R2 Core? I wasn't sure if this was supported.

    • ilmauri's avatar
      ilmauri
      Copper Contributor

      Klaus Reiter 

      Hi Klaus following your suggestion I've tried from a command prompt on the server core to run the Azure ATP Sensor Setup.exe but still return the error

      '"Azure ATP Sensor Setup.exe"' is not recognized as an internal or external command,
      operable program or batch file.

       

      Any ideas?

      Thanks a lot

      Maurizio

  • Hi,

     

    Can you (privately) share the deployment logs from this failing machine?

     

    There are 3 log files for the deployment

    Azure Advanced Threat Protection Sensor_$(timestamp).log

    Azure Advanced Threat Protection Sensor_$(timestamp)_000_MsiPackage.log

    Microsoft.Tri.Sensor.Deployment.Deployer_($timestamp).log

     

    Logs will located at the users temp directory or C:\Windows\Temp

     

    Plus, if it's urgent, I strongly suggest to open a support case.

     

Resources