Installing on Server Core

[Ray Ellington]

I've tried every combination I can think of and find with the "/?" help and cannot get the Azure ATP Sensor to install on any of my Server Core (2016 or 2012R2) Domain Controllers. Any hints?

Whether I run using /quiet or not the installer process starts for about a second then dies.

[#2]

Hi,

Can you (privately) share the deployment logs from this failing machine?

There are 3 log files for the deployment

Azure Advanced Threat Protection Sensor_$(timestamp).log

Azure Advanced Threat Protection Sensor_$(timestamp)_000_MsiPackage.log

Microsoft.Tri.Sensor.Deployment.Deployer_($timestamp).log

Logs will located at the users temp directory or C:\Windows\Temp

Plus, if it's urgent, I strongly suggest to open a support case.

[#3]

Sure but I can't figure out how to share files privately?

[#4]

Hello Ray, 

this command installed the Sensor on my Server 2016 Core.

"Azure ATP Sensor Setup.exe" /q NetFrameworkCommandLineArguments="q" AccessKey=****************

[#5]

I'm also running into issues with the installation of the sensor on a core DC. Tried it with the suggested command but no luck. Which .NET framework version is required? Got 460805 (4.7).

[#6]

4.7 to 4.7.2 should work fine.

[#7]

okay - still no luck. starting the installer with the suggested commands and the installer just appears for some seconds. where are the logs stored?

[#8]

See the docs about the deployment logs:

https://docs.microsoft.com/en-us/azure-advanced-threat-protection/troubleshooting-atp-using-logs#azu...

[#9]

I am seeing the same issue.  Per the logs it is an issue with a proxy.  Since Windows Core doesn't have Internet Explorer installed on it, I am wondering if it isn't seeing the Proxy settings and thus is failing. 

[#10]

1. LaunchNotepad with elevated permissions
2. Open "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config"
3. Add the following text just above the </Configuration> tag at the bottom of the document:
   ​    <system.net>
           <defaultProxy enabled="true" useDefaultCredentials="true">
               <proxy
               usesystemdefault="true"
               proxyaddress="http://192.168.28.xxx:8080"
               bypassonlocal="true"
               />
           </defaultProxy>​​
       </system.net>
4. Save the config file and restart the computer

[#11]

@Klaus Reiter 

Hi Klaus following your suggestion I've tried from a command prompt on the server core to run the Azure ATP Sensor Setup.exe but still return the error

'"Azure ATP Sensor Setup.exe"' is not recognized as an internal or external command,
operable program or batch file.

Any ideas?

Thanks a lot

Maurizio

[#12]

@ilmauri , This error usually indicated a file damaged during download. can you try with a fresh one?

If it still happens, can you share its version from the details tab, its size, and if you can the file's hash?

https://support.microsoft.com/en-us/help/889768/how-to-compute-the-md5-or-sha-1-cryptographic-hash-v...

[#13]

@Eli Ofek 

Hi Eli

yes you are right, redo the download from Atp portal and setup works fine

Thank you

Maurizio

[#14]

this worked for us. thank you.

[#15]

Hi - Has anyone successfully installed the Azure ATP sensor on Server 2012 R2 Core? I wasn't sure if this was supported.

[#16]

I would assume it would be. It takes a awhile. The event viewer is good place to monitor if there is a issue. But it took a lot longer than I thought it should.

[#17]

@Steven Hoggatt Thank you for your insight! I'll take a look at the Event Viewer to see what I can find.

[#18]

@Klaus Reiter I have downloaded the Azure ATP Sensor to my share location \\server\atp sensor

so how do i install from server core?

"Azure ATP Sensor Setup.exe" /q NetFrameworkCommandLineArguments="q" AccessKey=****************

[#19]

@AusSupport180 just like that.
"Azure ATP Sensor Setup.exe" /q NetFrameworkCommandLineArguments="q" AccessKey=****************

I copied the sensors to the c:\temp folder for each DC but I don't see why you couldn't run it from a UNC path.