SOLVED

Installing ATP Sensor on DC 2019 gives an 0x800070643

Contributor

I have 2 DC Server 2019.

1 DC installed fine, the other give an error on installation : 0x80070643

 

np proxy

no core

Fully patches.

 

[1FE0:10F4][2021-03-23T21:27:05]i001: Burn v3.11.2.4516, Windows v10.0 (Build 17763: Service Pack 0), path: C:\WINDOWS\Temp\{D6EA0EAB-9A71-43B8-BEE0-A4349FB8C26A}\.cr\Azure ATP Sensor Setup.exe
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'AccessKey'
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'ProxyConfiguration'
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'ProxyUserPassword'
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
[1FE0:10F4][2021-03-23T21:27:05]i009: Command Line: '"-burn.clean.room=C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe" -burn.filehandle.attached=704 -burn.filehandle.self=616'
[1FE0:10F4][2021-03-23T21:27:05]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe'
[1FE0:10F4][2021-03-23T21:27:05]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\'
[1FE0:10F4][2021-03-23T21:27:06]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706.log'
[1FE0:10F4][2021-03-23T21:27:07]i000: Setting string variable 'WixBundleName' to value 'Azure Advanced Threat Protection Sensor'
[1FE0:10F4][2021-03-23T21:27:07]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
[1FE0:10F4][2021-03-23T21:27:13]i000: Loading managed bootstrapper application.
[1FE0:10F4][2021-03-23T21:27:17]i000: Creating BA thread to run asynchronously.
[1FE0:10F4][2021-03-23T21:27:24]i100: Detect begin, 5 packages
[1FE0:10F4][2021-03-23T21:27:24]i000: 2021-03-24 01:27:24.8699 Debug DeploymentModel DetectDeploymentAction DetectBegin [\[]Installed=False[\]]
[1FE0:10F4][2021-03-23T21:27:25]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.1.1.2'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting numeric variable 'Kb4019990Windows2008R2Exists' to value 0
[1FE0:10F4][2021-03-23T21:27:25]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting numeric variable 'Kb4019990Windows2012Exists' to value 0
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'NetFrameworkRegistryValue' to value '461814'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'ServerLevelsServerCoreRegistryValue' to value '1'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'ServerLevelsServerGuiShellRegistryValue' to value '1'
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'Kb4019990Windows2008R2Exists' evaluates to false.
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'Kb4019990Windows2012Exists' evaluates to false.
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: Kb4019990Windows2008R2Package, state: Absent, cached: None
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: Kb4019990Windows2012Package, state: Absent, cached: None
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: Complete
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: Complete
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: MsiPackage, state: Absent, cached: None
[1FE0:10F4][2021-03-23T21:27:25]i199: Detect complete, result: 0x0
[1FE0:1FF0][2021-03-23T21:27:25]i000: 2021-03-24 01:27:25.3699 Debug DeploymentModel .ctor [\[]DeploymentAction=Install[\]]
[1FE0:1FF0][2021-03-23T21:27:26]i000: 2021-03-24 01:27:26.7917 Debug DeploymentModel .ctor [\[]IsAfterRestartAndConfigured=False[\]]
[1FE0:1FF0][2021-03-23T21:28:21]i000: 2021-03-24 01:28:21.2695 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=SensorInstallationConfiguration[\]]
[1FE0:1FF0][2021-03-23T21:28:21]i000: 2021-03-24 01:28:21.6601 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=EndpointData[\]]
[1FE0:1FF0][2021-03-23T21:28:25]i000: 2021-03-24 01:28:25.2767 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=ValidateCreateSensorResponse[\]]
[1FE0:1FF0][2021-03-23T21:28:25]i000: 2021-03-24 01:28:25.4127 Info Model ValidateAsync ValidateCreateSensorAsync returned [\[]validateCreateSensorResult=Success[\]]
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting string variable 'IsConfigured' to value 'True'
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting hidden variable 'AccessKey'
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting hidden variable 'ProxyConfiguration'
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting string variable 'InstallationPath' to value 'C:\Program Files\Azure Advanced Threat Protection Sensor'
[1FE0:10F4][2021-03-23T21:28:25]i200: Plan begin, 5 packages, action: Install
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'VersionNT64 = v6.1' evaluates to false.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2008R2Package
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'VersionNT64 = v6.2' evaluates to false.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2012Package
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
[1FE0:10F4][2021-03-23T21:28:25]i000: Setting string variable 'WixBundleRollbackLog_MsiPackage' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage_rollback.log'
[1FE0:10F4][2021-03-23T21:28:25]i000: Setting string variable 'WixBundleLog_MsiPackage' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log'
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: Kb4019990Windows2008R2Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: Kb4019990Windows2012Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: NetFrameworkPackageServer, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: NetFrameworkPackageServerCore, state: Present, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
[1FE0:10F4][2021-03-23T21:28:25]i299: Plan complete, result: 0x0
[1FE0:10F4][2021-03-23T21:28:25]i300: Apply begin
[1FE0:10F4][2021-03-23T21:28:25]i010: Launching elevated engine process.
[1FE0:10F4][2021-03-23T21:28:27]i011: Launched elevated engine process.
[1FE0:10F4][2021-03-23T21:28:27]i012: Connected to elevated engine.
[1524:1788][2021-03-23T21:28:27]i358: Pausing automatic updates.
[1524:1788][2021-03-23T21:28:27]i359: Paused automatic updates.
[1524:1788][2021-03-23T21:28:27]i360: Creating a system restore point.
[1524:1788][2021-03-23T21:28:27]i362: System restore disabled, system restore point not created.
[1524:1788][2021-03-23T21:28:27]i370: Session begin, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, options: 0x7, disable resume: No
[1524:1788][2021-03-23T21:28:27]i000: Caching bundle from: 'C:\WINDOWS\Temp\{6DE9852F-8D93-493F-B36D-48CCE0C42AD0}\.be\Azure ATP Sensor Setup.exe' to: 'C:\ProgramData\Package Cache\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}\Azure ATP Sensor Setup.exe'
[1524:1788][2021-03-23T21:28:27]i320: Registering bundle dependency provider: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, version: 2.0.0.0
[1524:1788][2021-03-23T21:28:27]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: Active, restart initiated: No, disable resume: No
[1524:1ABC][2021-03-23T21:28:28]i305: Verified acquired payload: MsiPackage at path: C:\ProgramData\Package Cache\.unverified\MsiPackage, moving to: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi.
[1524:1788][2021-03-23T21:28:28]i323: Registering package dependency provider: {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}, version: 2.0.0.0, package: MsiPackage
[1524:1788][2021-03-23T21:28:28]i301: Applying execute package: MsiPackage, action: Install, path: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi, arguments: ' ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7" ACCESSKEY="*****" InstallationPath="C:\Program Files\Azure Advanced Threat Protection Sensor" InstalledVersion="" PROXYCONFIGURATION="*****" WixBundleOriginalSourceFolder="C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\"'
[1524:1788][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to install MSI package.
[1524:1788][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to execute MSI package.
[1FE0:10F4][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to configure per-machine MSI package.
[1FE0:10F4][2021-03-23T21:28:54]i000: 2021-03-24 01:28:54.3612 Error Model LogError [\[]methodName=BootstrapperApplication_ExecutePackageComplete status=-2147023293 exception=[\]]
[1FE0:10F4][2021-03-23T21:28:54]i319: Applied execute package: MsiPackage, result: 0x80070643, restart: None
[1FE0:10F4][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to execute MSI package.
[1524:1788][2021-03-23T21:28:54]i318: Skipped rollback of package: MsiPackage, action: Uninstall, already: Absent
[1FE0:10F4][2021-03-23T21:28:54]i319: Applied rollback package: MsiPackage, result: 0x0, restart: None
[1524:1788][2021-03-23T21:28:54]i329: Removed package dependency provider: {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}, package: MsiPackage
[1524:1788][2021-03-23T21:28:54]i351: Removing cached package: MsiPackage, from path: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\
[1524:1788][2021-03-23T21:28:54]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: None, restart: None, disable resume: No
[1524:1788][2021-03-23T21:28:54]i330: Removed bundle dependency provider: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}
[1524:1788][2021-03-23T21:28:54]i352: Removing cached bundle: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, from path: C:\ProgramData\Package Cache\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}\
[1524:1788][2021-03-23T21:28:54]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: None, restart initiated: No, disable resume: No
[1FE0:10F4][2021-03-23T21:28:54]i399: Apply complete, result: 0x80070643, restart: None, ba requested restart: No
[1FE0:1FF0][2021-03-23T21:34:20]i000: 2021-03-24 01:34:20.3723 Debug SensorBootstrapperApplication Run Engine.Quit [\[]deploymentResultStatus=-2147023293 isRestartRequired=False[\]]
[1FE0:10F4][2021-03-23T21:34:20]i500: Shutting down, exit code: 0x80070643
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: AccessKey = *****
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: InstallationPath = C:\Program Files\Azure Advanced Threat Protection Sensor
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: IsConfigured = True
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: Kb4019990Windows2008R2Exists = 0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: Kb4019990Windows2012Exists = 0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: NetFrameworkRegistryValue = 461814
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: RebootPending = 0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: ServerLevelsServerCoreRegistryValue = 1
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: ServerLevelsServerGuiShellRegistryValue = 1
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: VersionNT64 = 10.0.0.0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleAction = 5
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleElevated = 1
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleLog = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706.log
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleLog_MsiPackage = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleManufacturer = Microsoft Corporation
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleName = Azure Advanced Threat Protection Sensor
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleOriginalSource = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleOriginalSourceFolder = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleProviderKey = {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleRollbackLog_MsiPackage = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage_rollback.log
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleSourceProcessFolder = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleSourceProcessPath = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleTag =
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleUILevel = 4
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleVersion = 2.0.0.0
[1FE0:10F4][2021-03-23T21:34:20]i007: Exit code: 0x80070643, restarting: No

 

 

11 Replies
Need to search for the problem in the MSI log in
C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log
Here you go:

[1FE0:10F4][2021-03-23T21:27:05]i001: Burn v3.11.2.4516, Windows v10.0 (Build 17763: Service Pack 0), path: C:\WINDOWS\Temp\{D6EA0EAB-9A71-43B8-BEE0-A4349FB8C26A}\.cr\Azure ATP Sensor Setup.exe
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'AccessKey'
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'ProxyConfiguration'
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing hidden variable 'ProxyUserPassword'
[1FE0:10F4][2021-03-23T21:27:05]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
[1FE0:10F4][2021-03-23T21:27:05]i009: Command Line: '"-burn.clean.room=C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe" -burn.filehandle.attached=704 -burn.filehandle.self=616'
[1FE0:10F4][2021-03-23T21:27:05]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe'
[1FE0:10F4][2021-03-23T21:27:05]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\'
[1FE0:10F4][2021-03-23T21:27:06]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706.log'
[1FE0:10F4][2021-03-23T21:27:07]i000: Setting string variable 'WixBundleName' to value 'Azure Advanced Threat Protection Sensor'
[1FE0:10F4][2021-03-23T21:27:07]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
[1FE0:10F4][2021-03-23T21:27:13]i000: Loading managed bootstrapper application.
[1FE0:10F4][2021-03-23T21:27:17]i000: Creating BA thread to run asynchronously.
[1FE0:10F4][2021-03-23T21:27:24]i100: Detect begin, 5 packages
[1FE0:10F4][2021-03-23T21:27:24]i000: 2021-03-24 01:27:24.8699 Debug DeploymentModel DetectDeploymentAction DetectBegin [\[]Installed=False[\]]
[1FE0:10F4][2021-03-23T21:27:25]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.1.1.2'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting numeric variable 'Kb4019990Windows2008R2Exists' to value 0
[1FE0:10F4][2021-03-23T21:27:25]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting numeric variable 'Kb4019990Windows2012Exists' to value 0
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'NetFrameworkRegistryValue' to value '461814'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'ServerLevelsServerCoreRegistryValue' to value '1'
[1FE0:10F4][2021-03-23T21:27:25]i000: Setting string variable 'ServerLevelsServerGuiShellRegistryValue' to value '1'
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'Kb4019990Windows2008R2Exists' evaluates to false.
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'Kb4019990Windows2012Exists' evaluates to false.
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[1FE0:10F4][2021-03-23T21:27:25]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: Kb4019990Windows2008R2Package, state: Absent, cached: None
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: Kb4019990Windows2012Package, state: Absent, cached: None
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: Complete
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: Complete
[1FE0:10F4][2021-03-23T21:27:25]i101: Detected package: MsiPackage, state: Absent, cached: None
[1FE0:10F4][2021-03-23T21:27:25]i199: Detect complete, result: 0x0
[1FE0:1FF0][2021-03-23T21:27:25]i000: 2021-03-24 01:27:25.3699 Debug DeploymentModel .ctor [\[]DeploymentAction=Install[\]]
[1FE0:1FF0][2021-03-23T21:27:26]i000: 2021-03-24 01:27:26.7917 Debug DeploymentModel .ctor [\[]IsAfterRestartAndConfigured=False[\]]
[1FE0:1FF0][2021-03-23T21:28:21]i000: 2021-03-24 01:28:21.2695 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=SensorInstallationConfiguration[\]]
[1FE0:1FF0][2021-03-23T21:28:21]i000: 2021-03-24 01:28:21.6601 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=EndpointData[\]]
[1FE0:1FF0][2021-03-23T21:28:25]i000: 2021-03-24 01:28:25.2767 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [\[]typeName=ValidateCreateSensorResponse[\]]
[1FE0:1FF0][2021-03-23T21:28:25]i000: 2021-03-24 01:28:25.4127 Info Model ValidateAsync ValidateCreateSensorAsync returned [\[]validateCreateSensorResult=Success[\]]
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting string variable 'IsConfigured' to value 'True'
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting hidden variable 'AccessKey'
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting hidden variable 'ProxyConfiguration'
[1FE0:1FF0][2021-03-23T21:28:25]i000: Setting string variable 'InstallationPath' to value 'C:\Program Files\Azure Advanced Threat Protection Sensor'
[1FE0:10F4][2021-03-23T21:28:25]i200: Plan begin, 5 packages, action: Install
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'VersionNT64 = v6.1' evaluates to false.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2008R2Package
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'VersionNT64 = v6.2' evaluates to false.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2012Package
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
[1FE0:10F4][2021-03-23T21:28:25]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
[1FE0:10F4][2021-03-23T21:28:25]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
[1FE0:10F4][2021-03-23T21:28:25]i000: Setting string variable 'WixBundleRollbackLog_MsiPackage' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage_rollback.log'
[1FE0:10F4][2021-03-23T21:28:25]i000: Setting string variable 'WixBundleLog_MsiPackage' to value 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log'
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: Kb4019990Windows2008R2Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: Kb4019990Windows2012Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: NetFrameworkPackageServer, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: NetFrameworkPackageServerCore, state: Present, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1FE0:10F4][2021-03-23T21:28:25]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
[1FE0:10F4][2021-03-23T21:28:25]i299: Plan complete, result: 0x0
[1FE0:10F4][2021-03-23T21:28:25]i300: Apply begin
[1FE0:10F4][2021-03-23T21:28:25]i010: Launching elevated engine process.
[1FE0:10F4][2021-03-23T21:28:27]i011: Launched elevated engine process.
[1FE0:10F4][2021-03-23T21:28:27]i012: Connected to elevated engine.
[1524:1788][2021-03-23T21:28:27]i358: Pausing automatic updates.
[1524:1788][2021-03-23T21:28:27]i359: Paused automatic updates.
[1524:1788][2021-03-23T21:28:27]i360: Creating a system restore point.
[1524:1788][2021-03-23T21:28:27]i362: System restore disabled, system restore point not created.
[1524:1788][2021-03-23T21:28:27]i370: Session begin, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, options: 0x7, disable resume: No
[1524:1788][2021-03-23T21:28:27]i000: Caching bundle from: 'C:\WINDOWS\Temp\{6DE9852F-8D93-493F-B36D-48CCE0C42AD0}\.be\Azure ATP Sensor Setup.exe' to: 'C:\ProgramData\Package Cache\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}\Azure ATP Sensor Setup.exe'
[1524:1788][2021-03-23T21:28:27]i320: Registering bundle dependency provider: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, version: 2.0.0.0
[1524:1788][2021-03-23T21:28:27]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: Active, restart initiated: No, disable resume: No
[1524:1ABC][2021-03-23T21:28:28]i305: Verified acquired payload: MsiPackage at path: C:\ProgramData\Package Cache\.unverified\MsiPackage, moving to: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi.
[1524:1788][2021-03-23T21:28:28]i323: Registering package dependency provider: {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}, version: 2.0.0.0, package: MsiPackage
[1524:1788][2021-03-23T21:28:28]i301: Applying execute package: MsiPackage, action: Install, path: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi, arguments: ' ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7" ACCESSKEY="*****" InstallationPath="C:\Program Files\Azure Advanced Threat Protection Sensor" InstalledVersion="" PROXYCONFIGURATION="*****" WixBundleOriginalSourceFolder="C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\"'
[1524:1788][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to install MSI package.
[1524:1788][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to execute MSI package.
[1FE0:10F4][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to configure per-machine MSI package.
[1FE0:10F4][2021-03-23T21:28:54]i000: 2021-03-24 01:28:54.3612 Error Model LogError [\[]methodName=BootstrapperApplication_ExecutePackageComplete status=-2147023293 exception=[\]]
[1FE0:10F4][2021-03-23T21:28:54]i319: Applied execute package: MsiPackage, result: 0x80070643, restart: None
[1FE0:10F4][2021-03-23T21:28:54]e000: Error 0x80070643: Failed to execute MSI package.
[1524:1788][2021-03-23T21:28:54]i318: Skipped rollback of package: MsiPackage, action: Uninstall, already: Absent
[1FE0:10F4][2021-03-23T21:28:54]i319: Applied rollback package: MsiPackage, result: 0x0, restart: None
[1524:1788][2021-03-23T21:28:54]i329: Removed package dependency provider: {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}, package: MsiPackage
[1524:1788][2021-03-23T21:28:54]i351: Removing cached package: MsiPackage, from path: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\
[1524:1788][2021-03-23T21:28:54]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: None, restart: None, disable resume: No
[1524:1788][2021-03-23T21:28:54]i330: Removed bundle dependency provider: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}
[1524:1788][2021-03-23T21:28:54]i352: Removing cached bundle: {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, from path: C:\ProgramData\Package Cache\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}\
[1524:1788][2021-03-23T21:28:54]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}, resume: None, restart initiated: No, disable resume: No
[1FE0:10F4][2021-03-23T21:28:54]i399: Apply complete, result: 0x80070643, restart: None, ba requested restart: No
[1FE0:1FF0][2021-03-23T21:34:20]i000: 2021-03-24 01:34:20.3723 Debug SensorBootstrapperApplication Run Engine.Quit [\[]deploymentResultStatus=-2147023293 isRestartRequired=False[\]]
[1FE0:10F4][2021-03-23T21:34:20]i500: Shutting down, exit code: 0x80070643
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: AccessKey = *****
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: InstallationPath = C:\Program Files\Azure Advanced Threat Protection Sensor
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: IsConfigured = True
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: Kb4019990Windows2008R2Exists = 0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: Kb4019990Windows2012Exists = 0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: NetFrameworkRegistryValue = 461814
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: RebootPending = 0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: ServerLevelsServerCoreRegistryValue = 1
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: ServerLevelsServerGuiShellRegistryValue = 1
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: VersionNT64 = 10.0.0.0
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleAction = 5
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleElevated = 1
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleLog = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706.log
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleLog_MsiPackage = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleManufacturer = Microsoft Corporation
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleName = Azure Advanced Threat Protection Sensor
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleOriginalSource = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleOriginalSourceFolder = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleProviderKey = {d3ac0943-d26a-4afb-acb0-a5d3b4f7bdc5}
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleRollbackLog_MsiPackage = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage_rollback.log
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleSourceProcessFolder = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleSourceProcessPath = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleTag =
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleUILevel = 4
[1FE0:10F4][2021-03-23T21:34:20]i410: Variable: WixBundleVersion = 2.0.0.0
[1FE0:10F4][2021-03-23T21:34:20]i007: Exit code: 0x80070643, restarting: No
I think you pasted the previous log again... not the additional file I requested...
Oups :)

Here his the good one:

=== Verbose logging started: 3/23/2021 21:28:28 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\WINDOWS\Temp\{6DE9852F-8D93-493F-B36D-48CCE0C42AD0}\.be\Azure ATP Sensor Setup.exe ===
MSI (c) (24:68) [21:28:28:530]: Resetting cached policy values
MSI (c) (24:68) [21:28:28:530]: Machine policy value 'Debug' is 0
MSI (c) (24:68) [21:28:28:530]: ******* RunEngine:
******* Product: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
******* Action:
******* CommandLine: **********
MSI (c) (24:68) [21:28:28:530]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (24:68) [21:28:28:530]: Grabbed execution mutex.
MSI (c) (24:68) [21:28:28:608]: Cloaking enabled.
MSI (c) (24:68) [21:28:28:608]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (24:68) [21:28:28:624]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (B8:04) [21:28:28:687]: Running installation inside multi-package transaction C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
MSI (s) (B8:04) [21:28:28:687]: Grabbed execution mutex.
MSI (s) (B8:0C) [21:28:28:687]: Resetting cached policy values
MSI (s) (B8:0C) [21:28:28:687]: Machine policy value 'Debug' is 0
MSI (s) (B8:0C) [21:28:28:687]: ******* RunEngine:
******* Product: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
******* Action:
******* CommandLine: **********
MSI (s) (B8:0C) [21:28:28:687]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (B8:0C) [21:28:28:733]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (B8:0C) [21:28:28:733]: SRSetRestorePoint skipped for this transaction.
MSI (s) (B8:0C) [21:28:28:733]: File will have security applied from OpCode.
MSI (s) (B8:0C) [21:28:28:749]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi' against software restriction policy
MSI (s) (B8:0C) [21:28:28:749]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi has a digital signature
MSI (s) (B8:0C) [21:28:29:077]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (B8:0C) [21:28:29:093]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (B8:0C) [21:28:29:093]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (B8:0C) [21:28:29:093]: MSCOREE not loaded loading copy from system32
MSI (s) (B8:0C) [21:28:29:265]: End dialog not enabled
MSI (s) (B8:0C) [21:28:29:265]: Original package ==> C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
MSI (s) (B8:0C) [21:28:29:265]: Package we're running from ==> C:\WINDOWS\Installer\d29df.msi
MSI (s) (B8:0C) [21:28:29:265]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (B8:0C) [21:28:29:265]: APPCOMPAT: looking for appcompat database entry with ProductCode '{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}'.
MSI (s) (B8:0C) [21:28:29:265]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (B8:0C) [21:28:29:343]: Machine policy value 'TransformsSecure' is 1
MSI (s) (B8:0C) [21:28:29:343]: Note: 1: 2262 2: File 3: -2147287038
MSI (s) (B8:0C) [21:28:29:343]: Note: 1: 2205 2: 3: MsiFileHash
MSI (s) (B8:0C) [21:28:29:343]: Machine policy value 'DisablePatch' is 0
MSI (s) (B8:0C) [21:28:29:343]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (B8:0C) [21:28:29:343]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (B8:0C) [21:28:29:343]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (B8:0C) [21:28:29:374]: APPCOMPAT: looking for appcompat database entry with ProductCode '{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}'.
MSI (s) (B8:0C) [21:28:29:374]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (B8:0C) [21:28:29:374]: Transforms are not secure.
MSI (s) (B8:0C) [21:28:29:374]: Note: 1: 2205 2: 3: Control
MSI (s) (B8:0C) [21:28:29:374]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log'.
MSI (s) (B8:0C) [21:28:29:374]: Command Line: ARPSYSTEMCOMPONENT=1 MSIFASTINSTALL=7 ACCESSKEY=********** InstallationPath=C:\Program Files\Azure Advanced Threat Protection Sensor InstalledVersion= PROXYCONFIGURATION=********** WixBundleOriginalSourceFolder=C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\ REBOOT=ReallySuppress CURRENTDIRECTORY=C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=5412
MSI (s) (B8:0C) [21:28:29:374]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{0BAD7848-8937-41EC-8BCD-23F9A2B0F3E0}'.
MSI (s) (B8:0C) [21:28:29:374]: Product Code passed to Engine.Initialize: ''
MSI (s) (B8:0C) [21:28:29:374]: Product Code from property table before transforms: '{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}'
MSI (s) (B8:0C) [21:28:29:374]: Product Code from property table after transforms: '{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}'
MSI (s) (B8:0C) [21:28:29:374]: Product not registered: beginning first-time install
MSI (s) (B8:0C) [21:28:29:374]: Product {C5D46D5F-4BD9-4120-BE93-43672FC3C74F} is not managed.
MSI (s) (B8:0C) [21:28:29:374]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (B8:0C) [21:28:29:374]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (B8:0C) [21:28:29:374]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (B8:0C) [21:28:29:374]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (B8:0C) [21:28:29:421]: Adding new sources is allowed.
MSI (s) (B8:0C) [21:28:29:421]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (B8:0C) [21:28:29:421]: Package name extracted from package path: 'Microsoft.Tri.Sensor.Deployment.Package.msi'
MSI (s) (B8:0C) [21:28:29:421]: Package to be registered: 'Microsoft.Tri.Sensor.Deployment.Package.msi'
MSI (s) (B8:0C) [21:28:29:421]: Note: 1: 2205 2: 3: Error
MSI (s) (B8:0C) [21:28:29:437]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (B8:0C) [21:28:29:437]: Machine policy value 'DisableMsi' is 1
MSI (s) (B8:0C) [21:28:29:437]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (B8:0C) [21:28:29:437]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (B8:0C) [21:28:29:437]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (B8:0C) [21:28:29:437]: Running product '{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}' with elevated privileges: Product is assigned.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding ARPSYSTEMCOMPONENT property. Its value is '1'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding MSIFASTINSTALL property. Its value is '7'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding ACCESSKEY property. Its value is '**********'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding INSTALLATIONPATH property. Its value is 'C:\Program Files\Azure Advanced Threat Protection Sensor'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding WIXBUNDLEORIGINALSOURCEFOLDER property. Its value is 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (B8:0C) [21:28:29:437]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '5412'.
MSI (s) (B8:0C) [21:28:29:437]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (B8:0C) [21:28:29:499]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is '149948302d66b744b97447c1d702a5f6'.
MSI (s) (B8:0C) [21:28:29:499]: RESTART MANAGER: Session opened.
MSI (s) (B8:0C) [21:28:29:499]: TRANSFORMS property is now:
MSI (s) (B8:0C) [21:28:29:499]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '500'.
MSI (s) (B8:0C) [21:28:29:499]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming
MSI (s) (B8:0C) [21:28:29:499]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\Favorites
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\Documents
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Local
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\Pictures
MSI (s) (B8:0C) [21:28:29:515]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (B8:0C) [21:28:29:530]: SHELL32::SHGetFolderPath returned: C:\Users\Jean-Philippe_Breton\Desktop
MSI (s) (B8:0C) [21:28:29:577]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (B8:0C) [21:28:29:577]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI (s) (B8:0C) [21:28:29:577]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (B8:0C) [21:28:29:577]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (B8:0C) [21:28:29:577]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (B8:0C) [21:28:29:577]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\d29df.msi'.
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi'.
MSI (s) (B8:0C) [21:28:29:577]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (B8:0C) [21:28:29:577]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (B8:0C) [21:28:29:577]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (B8:0C) [21:28:29:577]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (B8:0C) [21:28:29:577]: Machine policy value 'DisableRollback' is 0
MSI (s) (B8:0C) [21:28:29:577]: User policy value 'DisableRollback' is 0
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (s) (B8:0C) [21:28:29:577]: PROPERTY CHANGE: Adding MsiUISourceResOnly property. Its value is '1'.
=== Logging started: 3/23/2021 21:28:29 ===
MSI (s) (B8:0C) [21:28:29:577]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (B8:0C) [21:28:29:577]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (s) (B8:0C) [21:28:29:812]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (B8:0C) [21:28:29:812]: Doing action: INSTALL
MSI (s) (B8:0C) [21:28:29:827]: Note: 1: 2205 2: 3: ActionText
Action start 21:28:29: INSTALL.
MSI (s) (B8:0C) [21:28:30:280]: Running ExecuteSequence
MSI (s) (B8:0C) [21:28:30:280]: Doing action: FindRelatedProducts
MSI (s) (B8:0C) [21:28:30:280]: Note: 1: 2205 2: 3: ActionText
Action start 21:28:30: FindRelatedProducts.
MSI (s) (B8:0C) [21:28:30:694]: Doing action: LaunchConditions
MSI (s) (B8:0C) [21:28:30:694]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: FindRelatedProducts. Return value 1.
Action start 21:28:30: LaunchConditions.
MSI (s) (B8:0C) [21:28:30:709]: Doing action: ValidateProductID
MSI (s) (B8:0C) [21:28:30:709]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: LaunchConditions. Return value 1.
Action start 21:28:30: ValidateProductID.
MSI (s) (B8:0C) [21:28:30:709]: Doing action: CostInitialize
MSI (s) (B8:0C) [21:28:30:709]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: ValidateProductID. Return value 1.
MSI (s) (B8:0C) [21:28:30:709]: Machine policy value 'MaxPatchCacheSize' is 10
Action start 21:28:30: CostInitialize.
MSI (s) (B8:0C) [21:28:30:709]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (s) (B8:0C) [21:28:30:709]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:725]: Note: 1: 2205 2: 3: Patch
MSI (s) (B8:0C) [21:28:30:725]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (B8:0C) [21:28:30:725]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (B8:0C) [21:28:30:725]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (B8:0C) [21:28:30:725]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: Patch
MSI (s) (B8:0C) [21:28:30:756]: Doing action: FileCost
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: CostInitialize. Return value 1.
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: MsiAssembly
Action start 21:28:30: FileCost.
MSI (s) (B8:0C) [21:28:30:756]: Doing action: CostFinalize
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: FileCost. Return value 1.
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: Patch
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: Condition
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (s) (B8:0C) [21:28:30:756]: Target path resolution complete. Dumping Directory table...
MSI (s) (B8:0C) [21:28:30:756]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (B8:0C) [21:28:30:756]: Dir (target): Key: TARGETDIR , Object: C:\
MSI (s) (B8:0C) [21:28:30:756]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
Action start 21:28:30: CostFinalize.
MSI (s) (B8:0C) [21:28:30:756]: Doing action: MigrateFeatureStates
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: CostFinalize. Return value 1.
Action start 21:28:30: MigrateFeatureStates.
MSI (s) (B8:0C) [21:28:30:756]: Doing action: InstallValidate
MSI (s) (B8:0C) [21:28:30:756]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: MigrateFeatureStates. Return value 0.
MSI (s) (B8:0C) [21:28:30:772]: PROPERTY CHANGE: Deleting MsiRestartManagerSessionKey property. Its current value is '149948302d66b744b97447c1d702a5f6'.
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Dialog
MSI (s) (B8:0C) [21:28:30:772]: Feature: ProductFeature; Installed: Absent; Request: Local; Action: Local
MSI (s) (B8:0C) [21:28:30:772]: Component: ProductComponent; Installed: Absent; Request: Local; Action: Local
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Registry
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: BindImage
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: ProgId
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Extension
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Font
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Shortcut
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Class
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Icon
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: TypeLib
Action start 21:28:30: InstallValidate.
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
MSI (s) (B8:0C) [21:28:30:772]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Registry
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: BindImage
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: ProgId
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Extension
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Font
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Shortcut
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Class
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: Icon
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2727 2:
MSI (s) (B8:0C) [21:28:30:772]: Note: 1: 2205 2: 3: FilesInUse
MSI (s) (B8:0C) [21:28:30:787]: Note: 1: 2727 2:
MSI (s) (B8:0C) [21:28:30:787]: Doing action: InstallInitialize
MSI (s) (B8:0C) [21:28:30:787]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: InstallValidate. Return value 1.
MSI (s) (B8:0C) [21:28:30:787]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (B8:0C) [21:28:30:787]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (B8:0C) [21:28:30:787]: BeginTransaction: Locking Server
MSI (s) (B8:0C) [21:28:30:787]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (B8:0C) [21:28:30:787]: SRSetRestorePoint skipped for this transaction.
MSI (s) (B8:0C) [21:28:30:787]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (B8:0C) [21:28:30:787]: Server not locked: locking for product {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}
Action start 21:28:30: InstallInitialize.
MSI (s) (B8:0C) [21:28:30:866]: Doing action: InstallCustomAction
MSI (s) (B8:0C) [21:28:30:866]: Note: 1: 2205 2: 3: ActionText
Action ended 21:28:30: InstallInitialize. Return value 1.
MSI (s) (B8:D8) [21:28:30:881]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI322C.tmp, Entrypoint: Install
MSI (s) (B8:A8) [21:28:30:881]: Generating random cookie.
MSI (s) (B8:A8) [21:28:30:881]: Created Custom Action Server with PID 3240 (0xCA8).
MSI (s) (B8:E8) [21:28:30:928]: Running as a service.
MSI (s) (B8:D0) [21:28:30:944]: Hello, I'm your 64bit Impersonated custom action server.
Action start 21:28:30: InstallCustomAction.
SFXCA: Extracting custom action to temporary directory: C:\WINDOWS\Installer\MSI322C.tmp-\
SFXCA: Binding to CLR version v4.0.30319
Calling custom action Microsoft.Tri.Sensor.Deployment.Package.Actions!Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions.Install
2021-03-24 01:28:37.6941 Debug CustomActions RunActionGroup InstallActionGroup started
2021-03-24 01:28:37.6941 Debug InstallActionGroup Apply started
2021-03-24 01:28:37.6941 Debug CreateDirectoryDeploymentAction Apply started [suppressFailure=False]
2021-03-24 01:28:39.0223 Debug CreateDirectoryDeploymentAction Apply finished
2021-03-24 01:28:39.0379 Debug DownloadMinorDeploymentPackageBytesAction Apply started [suppressFailure=False]
2021-03-24 01:28:41.4349 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [typeName=GetSensorMinorDeploymentPackageSensorApiDeploymentResponse]
2021-03-24 01:28:41.9817 Debug DownloadMinorDeploymentPackageBytesAction Apply finished
2021-03-24 01:28:41.9817 Debug UnpackDeploymentPackageBytesAction Apply started [suppressFailure=False]
2021-03-24 01:28:43.3880 Debug UnpackDeploymentPackageBytesAction Apply finished
2021-03-24 01:28:43.3880 Debug RunDeployerMajorDeploymentAction Apply started [suppressFailure=False]
2021-03-24 01:28:43.4192 Info RunDeployerMajorDeploymentAction ApplyInternal started [filePath=JdG+3PBL3Dh9yZglfY1LBg== _arguments=z9TVJHShWm8T2CFc22hXBA==]
2021-03-24 01:28:53.8753 Info RunDeployerMajorDeploymentAction ApplyInternal finished [isSuccessful=False]
2021-03-24 01:28:53.8909 Debug InstallActionGroup Revert started
2021-03-24 01:28:53.8909 Warn InstallActionGroup Revert reverting [rollbackAction=UnpackDeploymentPackageBytesAction index=0 count=3]
2021-03-24 01:28:53.8909 Debug UnpackDeploymentPackageBytesAction Revert started
2021-03-24 01:28:53.9847 Debug UnpackDeploymentPackageBytesAction Revert finished
2021-03-24 01:28:54.0003 Warn InstallActionGroup Revert reverting [rollbackAction=DownloadMinorDeploymentPackageBytesAction index=1 count=3]
2021-03-24 01:28:54.0003 Debug DownloadMinorDeploymentPackageBytesAction Revert started
2021-03-24 01:28:54.0003 Debug DownloadMinorDeploymentPackageBytesAction Revert finished
2021-03-24 01:28:54.0003 Warn InstallActionGroup Revert reverting [rollbackAction=CreateDirectoryDeploymentAction index=2 count=3]
2021-03-24 01:28:54.0003 Debug CreateDirectoryDeploymentAction Revert started
2021-03-24 01:28:54.0003 Debug CreateDirectoryDeploymentAction Revert finished
2021-03-24 01:28:54.0003 Debug InstallActionGroup Revert finished
2021-03-24 01:28:54.1097 Error DeploymentAction Failed to apply InstallActionGroup
Microsoft.Tri.Infrastructure.ExtendedException: Apply failed [Type=RunDeployerMajorDeploymentAction]
at Microsoft.Tri.Sensor.Common.DeploymentAction.Apply(Boolean suppressFailure)
at Microsoft.Tri.Sensor.Common.DeploymentActionGroup.Apply(Boolean suppressFailure)
at Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions.RunActionGroup(DeploymentActionGroup deploymentActionGroup, Session session)
2021-03-24 01:28:54.1097 Debug CustomActions RunActionGroup InstallActionGroup finished [result=Failure]
CustomAction InstallCustomAction returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (B8:0C) [21:28:54:267]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (B8:0C) [21:28:54:267]: Machine policy value 'DisableRollback' is 0
MSI (s) (B8:0C) [21:28:54:267]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
Action ended 21:28:54: InstallCustomAction. Return value 3.
MSI (s) (B8:0C) [21:28:54:267]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (B8:0C) [21:28:54:267]: No System Restore sequence number for this installation.
MSI (s) (B8:0C) [21:28:54:267]: Unlocking Server
Action ended 21:28:54: INSTALL. Return value 3.
Property(S): UpgradeCode = {EDFB49E0-16FA-4535-B268-BD1B81B15DC2}
Property(S): TARGETDIR = C:\
Property(S): ALLUSERS = 1
Property(S): Manufacturer = Microsoft Corporation
Property(S): ProductCode = {C5D46D5F-4BD9-4120-BE93-43672FC3C74F}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Azure Advanced Threat Protection Sensor
Property(S): ProductVersion = 2.0.0.0
Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED
Property(S): MsiHiddenProperties = ACCESSKEY;PROXYCONFIGURATION
Property(S): MsiLogFileLocation = C:\Users\JEAN-P~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210323212706_000_MsiPackage.log
Property(S): PackageCode = {0BAD7848-8937-41EC-8BCD-23F9A2B0F3E0}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): MSIFASTINSTALL = 7
Property(S): ACCESSKEY = **********
Property(S): INSTALLATIONPATH = C:\Program Files\Azure Advanced Threat Protection Sensor
Property(S): WIXBUNDLEORIGINALSOURCEFOLDER = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup\
Property(S): REBOOT = ReallySuppress
Property(S): CURRENTDIRECTORY = C:\Users\Jean-Philippe_Breton\Downloads\Azure ATP Sensor Setup
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 5412
Property(S): VersionDatabase = 500
Property(S): VersionMsi = 5.00
Property(S): VersionNT = 603
Property(S): VersionNT64 = 603
Property(S): WindowsBuild = 9600
Property(S): ServicePackLevel = 0
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 2
Property(S): MsiNTSuiteDataCenter = 1
Property(S): WindowsFolder = C:\WINDOWS\
Property(S): WindowsVolume = C:\
Property(S): System64Folder = C:\WINDOWS\system32\
Property(S): SystemFolder = C:\WINDOWS\SysWOW64\
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Users\JEAN-P~1\AppData\Local\Temp\
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Users\Jean-Philippe_Breton\AppData\Roaming\
Property(S): FavoritesFolder = C:\Users\Jean-Philippe_Breton\Favorites\
Property(S): NetHoodFolder = C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Users\Jean-Philippe_Breton\Documents\
Property(S): PrintHoodFolder = C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): SendToFolder = C:\Users\Jean-Philippe_Breton\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): LocalAppDataFolder = C:\Users\Jean-Philippe_Breton\AppData\Local\
Property(S): MyPicturesFolder = C:\Users\Jean-Philippe_Breton\Pictures\
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FontsFolder = C:\WINDOWS\Fonts\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): MsiAMD64 = 6
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 8192
Property(S): VirtualMemory = 7286
Property(S): AdminUser = 1
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = Jean-Philippe_Breton
Property(S): UserSID = S-1-5-21-3985112737-1076373109-1309005388-1605
Property(S): UserLanguageID = 1033
Property(S): ComputerName = AZ-DC02
Property(S): SystemLanguageID = 1033
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 19
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): MsiTabletPC = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 21:28:54
Property(S): Date = 3/23/2021
Property(S): MsiNetAssemblySupport = 4.7.3190.0
Property(S): MsiWin32AssemblySupport = 6.3.17763.1
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): DATABASE = C:\WINDOWS\Installer\d29df.msi
Property(S): OriginalDatabase = C:\ProgramData\Package Cache\{C5D46D5F-4BD9-4120-BE93-43672FC3C74F}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
Property(S): UILevel = 2
Property(S): MsiUISourceResOnly = 1
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = C:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): INSTALLLEVEL = 1
MSI (s) (B8:0C) [21:28:54:314]: Note: 1: 1708
MSI (s) (B8:0C) [21:28:54:314]: Note: 1: 2205 2: 3: Error
MSI (s) (B8:0C) [21:28:54:314]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708
MSI (s) (B8:0C) [21:28:54:314]: Note: 1: 2205 2: 3: Error
MSI (s) (B8:0C) [21:28:54:314]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
MSI (s) (B8:0C) [21:28:54:314]: Product: Azure Advanced Threat Protection Sensor -- Installation failed.

MSI (s) (B8:0C) [21:28:54:314]: Windows Installer installed the product. Product Name: Azure Advanced Threat Protection Sensor. Product Version: 2.0.0.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 1603.

MSI (s) (B8:0C) [21:28:54:314]: Deferring clean up of packages/files, if any exist
MSI (s) (B8:0C) [21:28:54:314]: MainEngineThread is returning 1603
MSI (s) (B8:04) [21:28:54:314]: RESTART MANAGER: Session closed.
MSI (s) (B8:04) [21:28:54:314]: No System Restore sequence number for this installation.
=== Logging stopped: 3/23/2021 21:28:54 ===
MSI (s) (B8:04) [21:28:54:330]: User policy value 'DisableRollback' is 0
MSI (s) (B8:04) [21:28:54:330]: Machine policy value 'DisableRollback' is 0
MSI (s) (B8:04) [21:28:54:330]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (B8:04) [21:28:54:330]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (B8:04) [21:28:54:330]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (B8:04) [21:28:54:330]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (B8:04) [21:28:54:345]: Destroying RemoteAPI object.
MSI (s) (B8:A8) [21:28:54:345]: Custom Action Manager thread ending.
MSI (c) (24:68) [21:28:54:345]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (24:68) [21:28:54:345]: MainEngineThread is returning 1603
=== Verbose logging stopped: 3/23/2021 21:28:54 ===

@Jean-Philippe Breton  This one is pointing us to a 3rd log file in the format of

Azure Advanced Threat Protection Microsoft.Tri.Sensor.Deployment.Deployer_YYYYMMDDHHMMSS.log 

Can you get it ?

here it is:

2021-03-24 01:43:15.2149 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [typeName=InstallDeploymentArguments]
2021-03-24 01:43:15.6211 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [typeName=EndpointData]
2021-03-24 01:43:16.4024 Info Program Main Deployer started [arguments=z9TVJHShWm8T2CFc22hXBA==]
2021-03-24 01:43:16.5430 Debug InstallActionGroup Apply started
2021-03-24 01:43:16.5430 Debug CreateCertificateAction Apply started [suppressFailure=False]
2021-03-24 01:43:21.9778 Debug CreateCertificateAction Apply finished
2021-03-24 01:43:21.9778 Debug CreateSensorAction Apply started [suppressFailure=False]
2021-03-24 01:43:22.6340 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [typeName=CreateSensorResponse]
2021-03-24 01:43:22.7590 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [typeName=SensorMandatoryConfiguration]
2021-03-24 01:43:22.7747 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [typeName=EndpointData]
2021-03-24 01:43:23.0247 Debug CreateSensorAction Apply finished
2021-03-24 01:43:23.0247 Debug SaveSensorMandatoryConfigurationAction Apply started [suppressFailure=False]
2021-03-24 01:43:23.0559 Warn JsonSerializerSettingsExtension+JsonSerializationBinder GetTypeFromName [typeName=SensorMandatoryConfiguration]
2021-03-24 01:43:23.0872 Debug SaveSensorMandatoryConfigurationAction Apply finished
2021-03-24 01:43:23.0872 Debug CreateServicesActionGroup Apply started
2021-03-24 01:43:23.0872 Debug CreateServiceAction Apply started [suppressFailure=False]
2021-03-24 01:43:23.0872 Error ServiceControllerExtension CreateService failed [name=AATPSensorUpdater commandLine="C:\Program Files\Azure Advanced Threat Protection Sensor\2.143.13960.48575\Microsoft.Tri.Sensor.Updater.exe" Error=1073]
2021-03-24 01:43:23.0872 Debug CreateServicesActionGroup Revert started
2021-03-24 01:43:23.0872 Debug CreateServicesActionGroup Revert finished
2021-03-24 01:43:23.0872 Debug InstallActionGroup Revert started
2021-03-24 01:43:23.0872 Warn InstallActionGroup Revert reverting [rollbackAction=SaveSensorMandatoryConfigurationAction index=0 count=3]
2021-03-24 01:43:23.0872 Debug SaveSensorMandatoryConfigurationAction Revert started
2021-03-24 01:43:23.0872 Debug SaveSensorMandatoryConfigurationAction Revert finished
2021-03-24 01:43:23.0872 Warn InstallActionGroup Revert reverting [rollbackAction=CreateSensorAction index=1 count=3]
2021-03-24 01:43:23.0872 Debug CreateSensorAction Revert started
2021-03-24 01:43:23.4935 Debug CreateSensorAction Revert finished
2021-03-24 01:43:23.4935 Warn InstallActionGroup Revert reverting [rollbackAction=CreateCertificateAction index=2 count=3]
2021-03-24 01:43:23.4935 Debug CreateCertificateAction Revert started
2021-03-24 01:43:23.5090 Debug CreateCertificateAction Revert finished
2021-03-24 01:43:23.5090 Debug InstallActionGroup Revert finished
2021-03-24 01:43:23.7434 Error DeploymentAction Deployer failed [arguments=z9TVJHShWm8T2CFc22hXBA==]
Microsoft.Tri.Infrastructure.ExtendedException: Apply failed [Type=CreateServiceAction]
at void Microsoft.Tri.Sensor.Common.DeploymentAction.Apply(bool suppressFailure)
at void Microsoft.Tri.Sensor.Common.DeploymentActionGroup.Apply(bool suppressFailure)
at void Microsoft.Tri.Sensor.Common.DeploymentActionGroup.Apply(bool suppressFailure)
at int Microsoft.Tri.Sensor.Deployment.Deployer.Program.Main(string[] commandLineArguments)
This is the root cause:

2021-03-24 01:43:23.0872 Error ServiceControllerExtension CreateService failed [name=AATPSensorUpdater commandLine="C:\Program Files\Azure Advanced Threat Protection Sensor\2.143.13960.48575\Microsoft.Tri.Sensor.Updater.exe" Error=1073]

WE try to create a new windows service named "AATPSensorUpdater " and error 1073 says we cannot because there is already one defined.
Can you run from elevated prompt
sc.exe qc AATPSensorUpdater ?
If it does not exist, it is also possible that the service controller state is not stable, and is pending a reboot that might help to resolve it.

@Eli Ofek interested , running sc.exe qc AATPSensorUpdater:

 

Capture.PNG

best response confirmed by Jean-Philippe Breton (Contributor)
Solution
The service is already there, the sensor was already installed but was not removed in a clean way.
delete the services manually:
sc delete AATPSensor
sc delete AATPSensorUpdater
And also delete the files from the deployment folder and try again.
Thanks for your help Eil!!!! Works like a charm now!!

The same problem... I have 2 DC 2019. I give an error on installation : 0x80070643

No proxy

no core

Can you help me check?

 

Full log file - MsiPackage:

=== Verbose logging started: 08/09/2021 23:27:58 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\Windows\Temp\{B8D83596-2A70-4F3C-8FB8-792FB318C6C2}\.be\Azure ATP Sensor Setup.exe ===
MSI (c) (60:50) [23:27:58:654]: Resetting cached policy values
MSI (c) (60:50) [23:27:58:654]: Machine policy value 'Debug' is 0
MSI (c) (60:50) [23:27:58:654]: ******* RunEngine:
******* Product: C:\ProgramData\Package Cache\{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
******* Action:
******* CommandLine: **********
MSI (c) (60:50) [23:27:58:670]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (60:50) [23:27:58:670]: Grabbed execution mutex.
MSI (c) (60:50) [23:27:58:701]: Cloaking enabled.
MSI (c) (60:50) [23:27:58:701]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (60:50) [23:27:58:707]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (94:40) [23:27:58:707]: Running installation inside multi-package transaction C:\ProgramData\Package Cache\{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
MSI (s) (94:40) [23:27:58:707]: Grabbed execution mutex.
MSI (s) (94:00) [23:27:58:707]: Resetting cached policy values
MSI (s) (94:00) [23:27:58:707]: Machine policy value 'Debug' is 0
MSI (s) (94:00) [23:27:58:707]: ******* RunEngine:
******* Product: C:\ProgramData\Package Cache\{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
******* Action:
******* CommandLine: **********
MSI (s) (94:00) [23:27:58:707]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (94:00) [23:27:58:707]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (94:00) [23:27:58:723]: SRSetRestorePoint skipped for this transaction.
MSI (s) (94:00) [23:27:58:723]: File will have security applied from OpCode.
MSI (s) (94:00) [23:27:58:739]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Package Cache\{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi' against software restriction policy
MSI (s) (94:00) [23:27:58:739]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi has a digital signature
MSI (s) (94:00) [23:27:58:823]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (94:00) [23:27:58:823]: MSCOREE not loaded loading copy from system32
MSI (s) (94:00) [23:27:58:823]: End dialog not enabled
MSI (s) (94:00) [23:27:58:823]: Original package ==> C:\ProgramData\Package Cache\{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
MSI (s) (94:00) [23:27:58:823]: Package we're running from ==> C:\Windows\Installer\901521.msi
MSI (s) (94:00) [23:27:58:823]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (94:00) [23:27:58:823]: APPCOMPAT: looking for appcompat database entry with ProductCode '{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}'.
MSI (s) (94:00) [23:27:58:823]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (94:00) [23:27:58:823]: Machine policy value 'TransformsSecure' is 1
MSI (s) (94:00) [23:27:58:823]: Note: 1: 2262 2: File 3: -2147287038
MSI (s) (94:00) [23:27:58:823]: Note: 1: 2205 2: 3: MsiFileHash
MSI (s) (94:00) [23:27:58:823]: Machine policy value 'DisablePatch' is 0
MSI (s) (94:00) [23:27:58:823]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (94:00) [23:27:58:823]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (94:00) [23:27:58:823]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (94:00) [23:27:58:823]: APPCOMPAT: looking for appcompat database entry with ProductCode '{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}'.
MSI (s) (94:00) [23:27:58:839]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (94:00) [23:27:58:839]: Transforms are not secure.
MSI (s) (94:00) [23:27:58:839]: Note: 1: 2205 2: 3: Control
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\ADMINI~1.GRE\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210908232740_000_MsiPackage.log'.
MSI (s) (94:00) [23:27:58:839]: Command Line: ARPSYSTEMCOMPONENT=1 MSIFASTINSTALL=7 ACCESSKEY=********** InstallationPath=C:\Program Files\Azure Advanced Threat Protection Sensor InstalledVersion= PROXYCONFIGURATION=********** WixBundleOriginalSourceFolder=C:\Azure ATP Sensor Setup\ REBOOT=ReallySuppress CURRENTDIRECTORY=C:\Azure ATP Sensor Setup CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=12640
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{6F8A7B28-5262-426D-A9E7-47443E6A6B39}'.
MSI (s) (94:00) [23:27:58:839]: Product Code passed to Engine.Initialize: ''
MSI (s) (94:00) [23:27:58:839]: Product Code from property table before transforms: '{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}'
MSI (s) (94:00) [23:27:58:839]: Product Code from property table after transforms: '{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}'
MSI (s) (94:00) [23:27:58:839]: Product not registered: beginning first-time install
MSI (s) (94:00) [23:27:58:839]: Product {61E851B5-79C3-44C6-9FCD-1AD4A73553F4} is not managed.
MSI (s) (94:00) [23:27:58:839]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (94:00) [23:27:58:839]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (94:00) [23:27:58:839]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (94:00) [23:27:58:839]: Adding new sources is allowed.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (94:00) [23:27:58:839]: Package name extracted from package path: 'Microsoft.Tri.Sensor.Deployment.Package.msi'
MSI (s) (94:00) [23:27:58:839]: Package to be registered: 'Microsoft.Tri.Sensor.Deployment.Package.msi'
MSI (s) (94:00) [23:27:58:839]: Note: 1: 2205 2: 3: Error
MSI (s) (94:00) [23:27:58:839]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (94:00) [23:27:58:839]: Machine policy value 'DisableMsi' is 1
MSI (s) (94:00) [23:27:58:839]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (94:00) [23:27:58:839]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (94:00) [23:27:58:839]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (94:00) [23:27:58:839]: Running product '{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}' with elevated privileges: Product is assigned.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding ARPSYSTEMCOMPONENT property. Its value is '1'.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding MSIFASTINSTALL property. Its value is '7'.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding ACCESSKEY property. Its value is '**********'.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding INSTALLATIONPATH property. Its value is 'C:\Program Files\Azure Advanced Threat Protection Sensor'.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding WIXBUNDLEORIGINALSOURCEFOLDER property. Its value is 'C:\Azure ATP Sensor Setup\'.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Azure ATP Sensor Setup'.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '12640'.
MSI (s) (94:00) [23:27:58:839]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is '6c5de35935e7d644830a241ae0bf7f8c'.
MSI (s) (94:00) [23:27:58:839]: RESTART MANAGER: Session opened.
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (s) (94:00) [23:27:58:839]: TRANSFORMS property is now:
MSI (s) (94:00) [23:27:58:839]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '500'.
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Roaming
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\Favorites
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\Documents
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Local
MSI (s) (94:00) [23:27:58:839]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\Pictures
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\Users\administrator.xxx\Desktop
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (94:00) [23:27:58:855]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (94:00) [23:27:58:855]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (94:00) [23:27:58:855]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (94:00) [23:27:58:855]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (94:00) [23:27:58:855]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (94:00) [23:27:58:855]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (94:00) [23:27:58:855]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Administrator'.
MSI (s) (94:00) [23:27:58:855]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (94:00) [23:27:58:855]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'N/A'.
MSI (s) (94:00) [23:27:58:855]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\901521.msi'.
MSI (s) (94:00) [23:27:58:855]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Package Cache\{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi'.
MSI (s) (94:00) [23:27:58:855]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (94:00) [23:27:58:855]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (94:00) [23:27:58:855]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (94:00) [23:27:58:870]: Machine policy value 'DisableRollback' is 0
MSI (s) (94:00) [23:27:58:870]: User policy value 'DisableRollback' is 0
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding MsiUISourceResOnly property. Its value is '1'.
=== Logging started: 08/09/2021 23:27:58 ===
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (94:00) [23:27:58:870]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (94:00) [23:27:58:870]: Doing action: INSTALL
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: ActionText
Action start 23:27:58: INSTALL.
MSI (s) (94:00) [23:27:58:870]: Running ExecuteSequence
MSI (s) (94:00) [23:27:58:870]: Doing action: FindRelatedProducts
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: ActionText
Action start 23:27:58: FindRelatedProducts.
MSI (s) (94:00) [23:27:58:870]: Doing action: LaunchConditions
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: ActionText
Action ended 23:27:58: FindRelatedProducts. Return value 1.
Action start 23:27:58: LaunchConditions.
MSI (s) (94:00) [23:27:58:870]: Doing action: ValidateProductID
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: ActionText
Action ended 23:27:58: LaunchConditions. Return value 1.
Action start 23:27:58: ValidateProductID.
MSI (s) (94:00) [23:27:58:870]: Doing action: CostInitialize
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: ActionText
Action ended 23:27:58: ValidateProductID. Return value 1.
MSI (s) (94:00) [23:27:58:870]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: Patch
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: Patch
Action start 23:27:58: CostInitialize.
MSI (s) (94:00) [23:27:58:870]: Doing action: FileCost
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: ActionText
Action ended 23:27:58: CostInitialize. Return value 1.
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: MsiAssembly
Action start 23:27:58: FileCost.
MSI (s) (94:00) [23:27:58:870]: Doing action: CostFinalize
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: ActionText
Action ended 23:27:58: FileCost. Return value 1.
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: Patch
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: Condition
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (s) (94:00) [23:27:58:870]: Target path resolution complete. Dumping Directory table...
MSI (s) (94:00) [23:27:58:870]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (94:00) [23:27:58:870]: Dir (target): Key: TARGETDIR , Object: C:\
MSI (s) (94:00) [23:27:58:870]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
Action start 23:27:58: CostFinalize.
MSI (s) (94:00) [23:27:58:870]: Doing action: MigrateFeatureStates
MSI (s) (94:00) [23:27:58:870]: Note: 1: 2205 2: 3: ActionText
Action ended 23:27:58: CostFinalize. Return value 1.
Action start 23:27:58: MigrateFeatureStates.
MSI (s) (94:00) [23:27:58:886]: Doing action: InstallValidate
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: ActionText
Action ended 23:27:58: MigrateFeatureStates. Return value 0.
MSI (s) (94:00) [23:27:58:886]: PROPERTY CHANGE: Deleting MsiRestartManagerSessionKey property. Its current value is '6c5de35935e7d644830a241ae0bf7f8c'.
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Dialog
MSI (s) (94:00) [23:27:58:886]: Feature: ProductFeature; Installed: Absent; Request: Local; Action: Local
MSI (s) (94:00) [23:27:58:886]: Component: ProductComponent; Installed: Absent; Request: Local; Action: Local
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Registry
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: BindImage
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: ProgId
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Extension
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Font
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Shortcut
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Class
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Icon
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: TypeLib
Action start 23:27:58: InstallValidate.
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
MSI (s) (94:00) [23:27:58:886]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Registry
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: BindImage
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: ProgId
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Extension
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Font
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Shortcut
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Class
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: Icon
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2727 2:
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: FilesInUse
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2727 2:
MSI (s) (94:00) [23:27:58:886]: Doing action: InstallInitialize
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2205 2: 3: ActionText
Action ended 23:27:58: InstallValidate. Return value 1.
MSI (s) (94:00) [23:27:58:886]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (94:00) [23:27:58:886]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (94:00) [23:27:58:886]: BeginTransaction: Locking Server
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (94:00) [23:27:58:886]: SRSetRestorePoint skipped for this transaction.
MSI (s) (94:00) [23:27:58:886]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (94:00) [23:27:58:886]: Server not locked: locking for product {61E851B5-79C3-44C6-9FCD-1AD4A73553F4}
Action start 23:27:58: InstallInitialize.
MSI (s) (94:00) [23:27:58:902]: Doing action: InstallCustomAction
MSI (s) (94:00) [23:27:58:902]: Note: 1: 2205 2: 3: ActionText
Action ended 23:27:58: InstallInitialize. Return value 1.
MSI (s) (94:40) [23:27:58:908]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI15CD.tmp, Entrypoint: Install
MSI (s) (94:6C) [23:27:58:908]: Generating random cookie.
MSI (s) (94:6C) [23:27:58:908]: Created Custom Action Server with PID 12504 (0x30D8).
MSI (s) (94:90) [23:27:58:924]: Running as a service.
MSI (s) (94:E8) [23:27:58:939]: Hello, I'm your 64bit Impersonated custom action server.
Action start 23:27:58: InstallCustomAction.
SFXCA: Extracting custom action to temporary directory: C:\Windows\Installer\MSI15CD.tmp-\
SFXCA: Binding to CLR version v4.0.30319
Calling custom action Microsoft.Tri.Sensor.Deployment.Package.Actions!Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions.Install
2021-09-08 16:28:00.2746 Debug CustomActions RunActionGroup InstallActionGroup started
2021-09-08 16:28:00.2902 Debug InstallActionGroup Apply started
2021-09-08 16:28:00.2902 Debug CreateDirectoryDeploymentAction Apply started [suppressFailure=False]
2021-09-08 16:28:00.2902 Debug CreateDirectoryDeploymentAction Apply finished
2021-09-08 16:28:00.2902 Debug DownloadMinorDeploymentPackageBytesAction Apply started [suppressFailure=False]
2021-09-08 16:28:05.0977 Debug DownloadMinorDeploymentPackageBytesAction Apply finished
2021-09-08 16:28:05.0977 Debug UnpackDeploymentPackageBytesAction Apply started [suppressFailure=False]
2021-09-08 16:28:05.9688 Debug UnpackDeploymentPackageBytesAction Apply finished
2021-09-08 16:28:05.9688 Debug RunDeployerMajorDeploymentAction Apply started [suppressFailure=False]
2021-09-08 16:28:05.9844 Info RunDeployerMajorDeploymentAction ApplyInternal started [filePath=ETAPZ0LIXJS3Ig8prJ1PFA== _arguments=W99/xxf9VqhqIKYVgAACqA==]
2021-09-08 16:28:07.6428 Info RunDeployerMajorDeploymentAction ApplyInternal finished [isSuccessful=False]
2021-09-08 16:28:07.6428 Debug InstallActionGroup Revert started
2021-09-08 16:28:07.6428 Warn InstallActionGroup Revert reverting [rollbackAction=UnpackDeploymentPackageBytesAction index=0 count=3]
2021-09-08 16:28:07.6585 Debug UnpackDeploymentPackageBytesAction Revert started
2021-09-08 16:28:07.6897 Debug UnpackDeploymentPackageBytesAction Revert finished
2021-09-08 16:28:07.6897 Warn InstallActionGroup Revert reverting [rollbackAction=DownloadMinorDeploymentPackageBytesAction index=1 count=3]
2021-09-08 16:28:07.7054 Debug DownloadMinorDeploymentPackageBytesAction Revert started
2021-09-08 16:28:07.7054 Debug DownloadMinorDeploymentPackageBytesAction Revert finished
2021-09-08 16:28:07.7054 Warn InstallActionGroup Revert reverting [rollbackAction=CreateDirectoryDeploymentAction index=2 count=3]
2021-09-08 16:28:07.7054 Debug CreateDirectoryDeploymentAction Revert started
2021-09-08 16:28:07.7054 Debug CreateDirectoryDeploymentAction Revert finished
2021-09-08 16:28:07.7054 Debug InstallActionGroup Revert finished
2021-09-08 16:28:07.7431 Error DeploymentAction Failed to apply InstallActionGroup
Microsoft.Tri.Infrastructure.ExtendedException: Apply failed [Type=RunDeployerMajorDeploymentAction]
at void Microsoft.Tri.Sensor.Common.DeploymentAction.Apply(bool suppressFailure)
at void Microsoft.Tri.Sensor.Common.DeploymentActionGroup.Apply(bool suppressFailure)
at ActionResult Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions.RunActionGroup(DeploymentActionGroup deploymentActionGroup, Session session)
2021-09-08 16:28:07.7431 Debug CustomActions RunActionGroup InstallActionGroup finished [result=Failure]
CustomAction InstallCustomAction returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (94:00) [23:28:07:821]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (94:00) [23:28:07:821]: Machine policy value 'DisableRollback' is 0
MSI (s) (94:00) [23:28:07:821]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
Action ended 23:28:07: InstallCustomAction. Return value 3.
MSI (s) (94:00) [23:28:07:821]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (94:00) [23:28:07:821]: No System Restore sequence number for this installation.
MSI (s) (94:00) [23:28:07:821]: Unlocking Server
Action ended 23:28:07: INSTALL. Return value 3.
Property(S): UpgradeCode = {EDFB49E0-16FA-4535-B268-BD1B81B15DC2}
Property(S): TARGETDIR = C:\
Property(S): ALLUSERS = 1
Property(S): Manufacturer = Microsoft Corporation
Property(S): ProductCode = {61E851B5-79C3-44C6-9FCD-1AD4A73553F4}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Azure Advanced Threat Protection Sensor
Property(S): ProductVersion = 2.0.0.0
Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED
Property(S): MsiHiddenProperties = ACCESSKEY;PROXYCONFIGURATION
Property(S): MsiLogFileLocation = C:\Users\ADMINI~1.GRE\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210908232740_000_MsiPackage.log
Property(S): PackageCode = {6F8A7B28-5262-426D-A9E7-47443E6A6B39}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): MSIFASTINSTALL = 7
Property(S): ACCESSKEY = **********
Property(S): INSTALLATIONPATH = C:\Program Files\Azure Advanced Threat Protection Sensor
Property(S): WIXBUNDLEORIGINALSOURCEFOLDER = C:\Azure ATP Sensor Setup\
Property(S): REBOOT = ReallySuppress
Property(S): CURRENTDIRECTORY = C:\Azure ATP Sensor Setup
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 12640
Property(S): MsiSystemRebootPending = 1
Property(S): VersionDatabase = 500
Property(S): VersionMsi = 5.00
Property(S): VersionNT = 603
Property(S): VersionNT64 = 603
Property(S): WindowsBuild = 9600
Property(S): ServicePackLevel = 0
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 2
Property(S): MsiNTSuiteDataCenter = 1
Property(S): WindowsFolder = C:\Windows\
Property(S): WindowsVolume = C:\
Property(S): System64Folder = C:\Windows\system32\
Property(S): SystemFolder = C:\Windows\SysWOW64\
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Users\ADMINI~1.GRE\AppData\Local\Temp\
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Users\administrator.xxx\AppData\Roaming\
Property(S): FavoritesFolder = C:\Users\administrator.xxx\Favorites\
Property(S): NetHoodFolder = C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Users\administrator.xxx\Documents\
Property(S): PrintHoodFolder = C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): SendToFolder = C:\Users\administrator.xxx\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): LocalAppDataFolder = C:\Users\administrator.xxx\AppData\Local\
Property(S): MyPicturesFolder = C:\Users\administrator.xxx\Pictures\
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): MsiAMD64 = 6
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 12288
Property(S): VirtualMemory = 7407
Property(S): AdminUser = 1
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = administrator
Property(S): UserSID = S-1-5-21-895235092-2957102850-851312084-500
Property(S): UserLanguageID = 1033
Property(S): ComputerName = IDC
Property(S): SystemLanguageID = 1033
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 23
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 23:28:07
Property(S): Date = 9/8/2021
Property(S): MsiNetAssemblySupport = 4.7.3190.0
Property(S): MsiWin32AssemblySupport = 6.3.17763.1
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = Administrator
Property(S): COMPANYNAME = N/A
Property(S): DATABASE = C:\Windows\Installer\901521.msi
Property(S): OriginalDatabase = C:\ProgramData\Package Cache\{61E851B5-79C3-44C6-9FCD-1AD4A73553F4}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi
Property(S): UILevel = 2
Property(S): MsiUISourceResOnly = 1
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = C:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): INSTALLLEVEL = 1
MSI (s) (94:00) [23:28:07:843]: Note: 1: 1708
MSI (s) (94:00) [23:28:07:843]: Note: 1: 2205 2: 3: Error
MSI (s) (94:00) [23:28:07:843]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708
MSI (s) (94:00) [23:28:07:843]: Note: 1: 2205 2: 3: Error
MSI (s) (94:00) [23:28:07:843]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
MSI (s) (94:00) [23:28:07:843]: Product: Azure Advanced Threat Protection Sensor -- Installation failed.

MSI (s) (94:00) [23:28:07:843]: Windows Installer installed the product. Product Name: Azure Advanced Threat Protection Sensor. Product Version: 2.0.0.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 1603.

MSI (s) (94:00) [23:28:07:843]: Deferring clean up of packages/files, if any exist
MSI (s) (94:00) [23:28:07:843]: MainEngineThread is returning 1603
MSI (s) (94:40) [23:28:07:859]: RESTART MANAGER: Session closed.
MSI (s) (94:40) [23:28:07:859]: No System Restore sequence number for this installation.
=== Logging stopped: 08/09/2021 23:28:07 ===
MSI (s) (94:40) [23:28:07:859]: User policy value 'DisableRollback' is 0
MSI (s) (94:40) [23:28:07:859]: Machine policy value 'DisableRollback' is 0
MSI (s) (94:40) [23:28:07:859]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (94:40) [23:28:07:859]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (94:40) [23:28:07:859]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (94:40) [23:28:07:859]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (94:40) [23:28:07:859]: Destroying RemoteAPI object.
MSI (s) (94:6C) [23:28:07:859]: Custom Action Manager thread ending.
MSI (c) (60:50) [23:28:07:859]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (60:50) [23:28:07:859]: MainEngineThread is returning 1603
=== Verbose logging stopped: 08/09/2021 23:28:07 ===