Forum Discussion
LisaMelone
Microsoft
Aug 26, 2021Sensor failing to install on all DCs
Has anyone seen any of these errors? Trying to install the sensor, but it is failing on both VMWare and HyperV DC. .NET 4.8 is installed and it doesn't matter if NPCap is installed or not. Traffic...
- Jan 25, 2022same issue here, last week a server 2019 domain controller installation went fine, now it gives exit code 0x80070643. install via .cmd file with quiet parameter and starting via psexec -s worked for me.
EliOfek
Microsoft
Aug 26, 2021The deployment fails when it tries to give the sensor read access to read logs from the local security event log, either there is a corruption or the machien was hardened to block it...
LisaMelone
Microsoft
Aug 26, 2021The server has been hardened so what do I need to give access to the read logs? Would that be the gMSA that we setup?
- EliOfekAug 26, 2021
Microsoft
No,
The deployment needs permissions to modify the ACL on this log.
Try to give modify ACL permissions to the account running the deployment.- Laurent_CardonJan 20, 2022
Microsoft
Hello,
I'm facing the same issue. Running an "out of the box" WS2019 domain controller (no specific GPOs applied). I'm running the installation using a domain admin account and npcap 1.0 is installed.
I checked the security log and domain admins have Full control on this event log.
Any idea?
Laurent
- MRedbourneJan 24, 2022Copper Contributor
Laurent_Cardon We're having the exact same issue with out out-of-the-box Server 2019 Domain Controller as well. Were you able to resolve this yourself? I'll poke at the above suggestion for ACLs.