SOLVED

Failed to update - ARSoft.Tools.Net.dll is being used by another process.

Brass Contributor

Hi,

We're trying to reinstall existing MDI sensor as it was not reporting to console.

We downloaded the latest package, installation failed and got below in logs.

 

[...]
2024-02-28 13:11:56.8660 Debug DownloadMinorDeploymentPackageBytesAction Revert started
2024-02-28 13:11:56.8660 Debug DownloadMinorDeploymentPackageBytesAction Revert finished
2024-02-28 13:11:56.8660 Debug UpgradeInitializeActionGroup Revert finished
2024-02-28 13:11:56.9129 Error __Error Failed to apply UpgradeInitializeActionGroup
System.IO.IOException: The process cannot access the file 'C:\Program Files\Azure Advanced Threat Protection Sensor\2.230.17681.9355\ARSoft.Tools.Net.dll' because it is being used by another process.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
at Microsoft.Deployment.Compression.ArchiveFileStreamContext.OpenFileWriteStream(String path, Int64 fileSize, DateTime lastWriteTime)
at Microsoft.Deployment.Compression.Cab.CabUnpacker.CabExtractCopyFile(NOTIFICATION notification)
at Microsoft.Deployment.Compression.Cab.NativeMethods.FDI.Copy(Handle hfdi, String pszCabinet, String pszCabPath, Int32 flags, PFNNOTIFY pfnfdin, IntPtr pfnfdid, IntPtr pvUser)
at Microsoft.Deployment.Compression.Cab.CabUnpacker.Unpack(IUnpackStreamContext streamContext, Predicate`1 fileFilter)
at Microsoft.Deployment.Compression.ArchiveInfo.Unpack(String destDirectory, EventHandler`1 progressHandler)
at Microsoft.Tri.Sensor.Common.UnpackDeploymentPackageBytesAction.ApplyInternal()
at Microsoft.Tri.Sensor.Common.DeploymentAction.Apply(Boolean suppressFailure)
at Microsoft.Tri.Sensor.Common.DeploymentActionGroup.Apply(Boolean suppressFailure)
at Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions.RunActionGroup(DeploymentActionGroup deploymentActionGroup, Session session)
2024-02-28 13:11:56.9129 Debug CustomActions RunActionGroup UpgradeInitializeActionGroup finished [result=Failure]
CustomAction UpgradeInitializeCustomAction returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
[...]

 

Main service was stopped and 'updater' service was in starting state.

Does it mean we need to reboot server first to release ARSoft.Tools.Net.dll?

 

Regards,

Przemo

1 Reply
best response confirmed by Przem0 (Brass Contributor)
Solution
Assuming the sensor process is the one who hold the file then yes
1 best response

Accepted Solutions
best response confirmed by Przem0 (Brass Contributor)
Solution
Assuming the sensor process is the one who hold the file then yes

View solution in original post