Forum Discussion
MDI ATP sensor Installation error 0x800070643
Hi All, We are installing MDI sensor in one of the RODC, but pops up with error 0x800070643, shown in snip, MSI Package.logs: === Verbose logging started: 9/3/2022 7:52:31 Build type: SHI...
EliOfek
Microsoft
MicrosoftMazhar1675 the MSI log won't contain too much info in this case.
Take a look at one of the other logs mentioned here:
There should be better clues in one of them.
Hi..
Trying to install sensor on a core DC, but the installation fails. Here are the logs
[0408:0510][2022-09-15T10:05:44]i001: Burn v3.11.2.4516, Windows v10.0 (Build 20348: Service Pack 0), path: C:\Windows\Temp\{25D777D8-98D7-486B-9CD5-3E51FF2696EC}\.cr\Azure ATP Sensor Setup.exe
[0408:0510][2022-09-15T10:05:44]i000: Initializing hidden variable 'AccessKey'
[0408:0510][2022-09-15T10:05:44]i000: Initializing hidden variable 'ProxyConfiguration'
[0408:0510][2022-09-15T10:05:44]i000: Initializing hidden variable 'ProxyUserPassword'
[0408:0510][2022-09-15T10:05:44]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
[0408:0510][2022-09-15T10:05:44]i009: Command Line: '"-burn.clean.room=C:\Program Files\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe" -burn.filehandle.attached=680 -burn.filehandle.self=672 /quiet NetFrameworkCommandLineArguments=/q AccessKey=*****'
[0408:0510][2022-09-15T10:05:44]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Program Files\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe'
[0408:0510][2022-09-15T10:05:44]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Program Files\Azure ATP Sensor Setup\'
[0408:0510][2022-09-15T10:05:44]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\username\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20220915100544.log'
[0408:0510][2022-09-15T10:05:45]i000: Setting string variable 'WixBundleName' to value 'Azure Advanced Threat Protection Sensor'
[0408:0510][2022-09-15T10:05:45]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
[0408:0510][2022-09-15T10:05:45]i000: Loading managed bootstrapper application.
[0408:0510][2022-09-15T10:05:46]i000: Creating BA thread to run asynchronously.
[0408:0510][2022-09-15T10:05:51]i100: Detect begin, 5 packages
[0408:0510][2022-09-15T10:05:52]i000: 2022-09-15 08:05:51.9905 Debug DeploymentModel DetectDeploymentAction DetectBegin [\[]Installed=False[\]]
[0408:0510][2022-09-15T10:05:52]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.1.1.2'
[0408:0510][2022-09-15T10:05:52]i000: Setting numeric variable 'Kb4019990Windows2008R2Exists' to value 0
[0408:0510][2022-09-15T10:05:52]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'
[0408:0510][2022-09-15T10:05:52]i000: Setting numeric variable 'Kb4019990Windows2012Exists' to value 0
[0408:0510][2022-09-15T10:05:52]i000: Setting string variable 'NetFrameworkRegistryValue' to value '528449'
[0408:0510][2022-09-15T10:05:52]i000: Setting string variable 'ServerLevelsServerCoreRegistryValue' to value '1'
[0408:0510][2022-09-15T10:05:52]i000: Registry value not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels', Value = 'Server-Gui-Shell'
[0408:0510][2022-09-15T10:05:52]i052: Condition 'Kb4019990Windows2008R2Exists' evaluates to false.
[0408:0510][2022-09-15T10:05:52]i052: Condition 'Kb4019990Windows2012Exists' evaluates to false.
[0408:0510][2022-09-15T10:05:52]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[0408:0510][2022-09-15T10:05:52]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[0408:0510][2022-09-15T10:05:52]i101: Detected package: Kb4019990Windows2008R2Package, state: Absent, cached: None
[0408:0510][2022-09-15T10:05:52]i101: Detected package: Kb4019990Windows2012Package, state: Absent, cached: None
[0408:0510][2022-09-15T10:05:52]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: None
[0408:0510][2022-09-15T10:05:52]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: None
[0408:0510][2022-09-15T10:05:52]i101: Detected package: MsiPackage, state: Absent, cached: None
[0408:0510][2022-09-15T10:05:52]i199: Detect complete, result: 0x0
[0408:0420][2022-09-15T10:05:52]i000: 2022-09-15 08:05:52.0530 Debug DeploymentModel .ctor [\[]DeploymentAction=Install[\]]
[0408:0420][2022-09-15T10:05:52]i000: 2022-09-15 08:05:52.3186 Debug DeploymentModel .ctor [\[]IsAfterRestartAndConfigured=False[\]]
[0408:0420][2022-09-15T10:05:52]i000: 2022-09-15 08:05:52.8186 Error DeploymentManager Run InstallationPath is invalid [\[]directoryState=NotEmpty[\]]
[0408:0420][2022-09-15T10:05:52]i000: 2022-09-15 08:05:52.8186 Debug SensorBootstrapperApplication Run Engine.Quit [\[]deploymentResultStatus=1602 isRestartRequired=False[\]]
[0408:0510][2022-09-15T10:05:52]i500: Shutting down, exit code: 0x642
[0408:0510][2022-09-15T10:05:52]i410: Variable: Kb4019990Windows2008R2Exists = 0
[0408:0510][2022-09-15T10:05:52]i410: Variable: Kb4019990Windows2012Exists = 0
[0408:0510][2022-09-15T10:05:52]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
[0408:0510][2022-09-15T10:05:52]i410: Variable: NetFrameworkRegistryValue = 528449
[0408:0510][2022-09-15T10:05:52]i410: Variable: RebootPending = 0
[0408:0510][2022-09-15T10:05:52]i410: Variable: ServerLevelsServerCoreRegistryValue = 1
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleAction = 5
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleElevated = 1
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleLog = C:\Users\username\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20220915100544.log
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleManufacturer = Microsoft Corporation
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleName = Azure Advanced Threat Protection Sensor
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleOriginalSource = C:\Program Files\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleOriginalSourceFolder = C:\Program Files\Azure ATP Sensor Setup\
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleProviderKey = {77593346-c302-4c18-a373-59383a67f466}
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleSourceProcessFolder = C:\Program Files\Azure ATP Sensor Setup\
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleSourceProcessPath = C:\Program Files\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleTag =
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleUILevel = 2
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleVersion = 2.190.15710.46992
[0408:0510][2022-09-15T10:05:52]i007: Exit code: 0x642, restarting: No
Trying to install sensor on a core DC, but the installation fails. Here are the logs
[0408:0510][2022-09-15T10:05:44]i001: Burn v3.11.2.4516, Windows v10.0 (Build 20348: Service Pack 0), path: C:\Windows\Temp\{25D777D8-98D7-486B-9CD5-3E51FF2696EC}\.cr\Azure ATP Sensor Setup.exe
[0408:0510][2022-09-15T10:05:44]i000: Initializing hidden variable 'AccessKey'
[0408:0510][2022-09-15T10:05:44]i000: Initializing hidden variable 'ProxyConfiguration'
[0408:0510][2022-09-15T10:05:44]i000: Initializing hidden variable 'ProxyUserPassword'
[0408:0510][2022-09-15T10:05:44]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
[0408:0510][2022-09-15T10:05:44]i009: Command Line: '"-burn.clean.room=C:\Program Files\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe" -burn.filehandle.attached=680 -burn.filehandle.self=672 /quiet NetFrameworkCommandLineArguments=/q AccessKey=*****'
[0408:0510][2022-09-15T10:05:44]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Program Files\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe'
[0408:0510][2022-09-15T10:05:44]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Program Files\Azure ATP Sensor Setup\'
[0408:0510][2022-09-15T10:05:44]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\username\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20220915100544.log'
[0408:0510][2022-09-15T10:05:45]i000: Setting string variable 'WixBundleName' to value 'Azure Advanced Threat Protection Sensor'
[0408:0510][2022-09-15T10:05:45]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
[0408:0510][2022-09-15T10:05:45]i000: Loading managed bootstrapper application.
[0408:0510][2022-09-15T10:05:46]i000: Creating BA thread to run asynchronously.
[0408:0510][2022-09-15T10:05:51]i100: Detect begin, 5 packages
[0408:0510][2022-09-15T10:05:52]i000: 2022-09-15 08:05:51.9905 Debug DeploymentModel DetectDeploymentAction DetectBegin [\[]Installed=False[\]]
[0408:0510][2022-09-15T10:05:52]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.1.1.2'
[0408:0510][2022-09-15T10:05:52]i000: Setting numeric variable 'Kb4019990Windows2008R2Exists' to value 0
[0408:0510][2022-09-15T10:05:52]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'
[0408:0510][2022-09-15T10:05:52]i000: Setting numeric variable 'Kb4019990Windows2012Exists' to value 0
[0408:0510][2022-09-15T10:05:52]i000: Setting string variable 'NetFrameworkRegistryValue' to value '528449'
[0408:0510][2022-09-15T10:05:52]i000: Setting string variable 'ServerLevelsServerCoreRegistryValue' to value '1'
[0408:0510][2022-09-15T10:05:52]i000: Registry value not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels', Value = 'Server-Gui-Shell'
[0408:0510][2022-09-15T10:05:52]i052: Condition 'Kb4019990Windows2008R2Exists' evaluates to false.
[0408:0510][2022-09-15T10:05:52]i052: Condition 'Kb4019990Windows2012Exists' evaluates to false.
[0408:0510][2022-09-15T10:05:52]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[0408:0510][2022-09-15T10:05:52]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[0408:0510][2022-09-15T10:05:52]i101: Detected package: Kb4019990Windows2008R2Package, state: Absent, cached: None
[0408:0510][2022-09-15T10:05:52]i101: Detected package: Kb4019990Windows2012Package, state: Absent, cached: None
[0408:0510][2022-09-15T10:05:52]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: None
[0408:0510][2022-09-15T10:05:52]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: None
[0408:0510][2022-09-15T10:05:52]i101: Detected package: MsiPackage, state: Absent, cached: None
[0408:0510][2022-09-15T10:05:52]i199: Detect complete, result: 0x0
[0408:0420][2022-09-15T10:05:52]i000: 2022-09-15 08:05:52.0530 Debug DeploymentModel .ctor [\[]DeploymentAction=Install[\]]
[0408:0420][2022-09-15T10:05:52]i000: 2022-09-15 08:05:52.3186 Debug DeploymentModel .ctor [\[]IsAfterRestartAndConfigured=False[\]]
[0408:0420][2022-09-15T10:05:52]i000: 2022-09-15 08:05:52.8186 Error DeploymentManager Run InstallationPath is invalid [\[]directoryState=NotEmpty[\]]
[0408:0420][2022-09-15T10:05:52]i000: 2022-09-15 08:05:52.8186 Debug SensorBootstrapperApplication Run Engine.Quit [\[]deploymentResultStatus=1602 isRestartRequired=False[\]]
[0408:0510][2022-09-15T10:05:52]i500: Shutting down, exit code: 0x642
[0408:0510][2022-09-15T10:05:52]i410: Variable: Kb4019990Windows2008R2Exists = 0
[0408:0510][2022-09-15T10:05:52]i410: Variable: Kb4019990Windows2012Exists = 0
[0408:0510][2022-09-15T10:05:52]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
[0408:0510][2022-09-15T10:05:52]i410: Variable: NetFrameworkRegistryValue = 528449
[0408:0510][2022-09-15T10:05:52]i410: Variable: RebootPending = 0
[0408:0510][2022-09-15T10:05:52]i410: Variable: ServerLevelsServerCoreRegistryValue = 1
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleAction = 5
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleElevated = 1
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleLog = C:\Users\username\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20220915100544.log
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleManufacturer = Microsoft Corporation
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleName = Azure Advanced Threat Protection Sensor
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleOriginalSource = C:\Program Files\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleOriginalSourceFolder = C:\Program Files\Azure ATP Sensor Setup\
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleProviderKey = {77593346-c302-4c18-a373-59383a67f466}
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleSourceProcessFolder = C:\Program Files\Azure ATP Sensor Setup\
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleSourceProcessPath = C:\Program Files\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleTag =
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleUILevel = 2
[0408:0510][2022-09-15T10:05:52]i410: Variable: WixBundleVersion = 2.190.15710.46992
[0408:0510][2022-09-15T10:05:52]i007: Exit code: 0x642, restarting: No
- EliOfekLooks like you are trying to install over an existing installation left overs.
I suggest to contact support to walk you through the steps making sure you are running clean without leftovers.- Thanks 🙂
I did a uninstall and tried it again 🙂