Hi All,
We are installing MDI sensor in one of the RODC, but pops up with error 0x800070643, shown in snip,
MSI Package.logs:
=== Verbose logging started: 9/3/2022 7:52:31 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\Windows\Temp\{46C9F109-38D6-4D40-AA04-D3F0CBA462CD}\.be\Azure ATP Sensor Setup.exe ===
MSI (c) (F8:30) [07:52:31:254]: Resetting cached policy values
MSI (c) (F8:30) [07:52:31:254]: Machine policy value 'Debug' is 0
MSI (c) (F8:30) [07:52:31:254]: ******* RunEngine:
******* Product: C:\ProgramData\Package Cache\{2022935E-DECA-45B0-81E9-D26DA2E104E7}v2.186.15587.11173\Microsoft.Tri.Sensor.Deployment.Package.msi
******* Action:
******* CommandLine: **********
MSI (c) (F8:30) [07:52:31:254]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (F8:30) [07:52:31:254]: Grabbed execution mutex.
MSI (c) (F8:30) [07:52:31:539]: Cloaking enabled.
MSI (c) (F8:30) [07:52:31:539]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (F8:30) [07:52:31:544]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (DC:EC) [07:52:31:584]: Running installation inside multi-package transaction C:\ProgramData\Package Cache\{2022935E-DECA-45B0-81E9-D26DA2E104E7}v2.186.15587.11173\Microsoft.Tri.Sensor.Deployment.Package.msi
MSI (s) (DC:EC) [07:52:31:584]: Grabbed execution mutex.
MSI (s) (DC:E4) [07:52:31:589]: Resetting cached policy values
MSI (s) (DC:E4) [07:52:31:589]: Machine policy value 'Debug' is 0
MSI (s) (DC:E4) [07:52:31:589]: ******* RunEngine:
******* Product: C:\ProgramData\Package Cache\{2022935E-DECA-45B0-81E9-D26DA2E104E7}v2.186.15587.11173\Microsoft.Tri.Sensor.Deployment.Package.msi
******* Action:
******* CommandLine: **********
MSI (s) (DC:E4) [07:52:31:619]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (DC:E4) [07:52:31:624]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (DC:E4) [07:52:31:624]: SRSetRestorePoint skipped for this transaction.
MSI (s) (DC:E4) [07:52:31:629]: File will have security applied from OpCode.
MSI (s) (DC:E4) [07:52:31:654]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Package Cache\{2022935E-DECA-45B0-81E9-D26DA2E104E7}v2.186.15587.11173\Microsoft.Tri.Sensor.Deployment.Package.msi' against software restriction policy
MSI (s) (DC:E4) [07:52:31:659]: Note: 1: 2262 2: DigitalSignature 3: -2147287038
MSI (s) (DC:E4) [07:52:31:659]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{2022935E-DECA-45B0-81E9-D26DA2E104E7}v2.186.15587.11173\Microsoft.Tri.Sensor.Deployment.Package.msi is not digitally signed
MSI (s) (DC:E4) [07:52:31:774]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{2022935E-DECA-45B0-81E9-D26DA2E104E7}v2.186.15587.11173\Microsoft.Tri.Sensor.Deployment.Package.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (DC:E4) [07:52:31:774]: MSCOREE not loaded loading copy from system32
MSI (s) (DC:E4) [07:52:31:799]: End dialog not enabled
MSI (s) (DC:E4) [07:52:31:799]: Original package ==> C:\ProgramData\Package Cache\{2022935E-DECA-45B0-81E9-D26DA2E104E7}v2.186.15587.11173\Microsoft.Tri.Sensor.Deployment.Package.msi
MSI (s) (DC:E4) [07:52:31:799]: Package we're running from ==> C:\Windows\Installer\abbd9a65.msi
MSI (s) (DC:E4) [07:52:31:804]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (DC:E4) [07:52:31:804]: APPCOMPAT: looking for appcompat database entry with ProductCode '{2022935E-DECA-45B0-81E9-D26DA2E104E7}'.
MSI (s) (DC:E4) [07:52:31:804]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (DC:E4) [07:52:31:824]: Machine policy value 'TransformsSecure' is 1
MSI (s) (DC:E4) [07:52:31:824]: Note: 1: 2205 2: 3: MsiFileHash
MSI (s) (DC:E4) [07:52:31:824]: Machine policy value 'DisablePatch' is 0
MSI (s) (DC:E4) [07:52:31:824]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (DC:E4) [07:52:31:824]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (DC:E4) [07:52:31:824]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (DC:E4) [07:52:31:824]: APPCOMPAT: looking for appcompat database entry with ProductCode '{2022935E-DECA-45B0-81E9-D26DA2E104E7}'.
MSI (s) (DC:E4) [07:52:31:824]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (DC:E4) [07:52:31:824]: Transforms are not secure.
MSI (s) (DC:E4) [07:52:31:824]: Note: 1: 2205 2: 3: Control
MSI (s) (DC:E4) [07:52:31:824]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\ADMA05~3\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20220903075218_000_MsiPackage.log'.
MSI (s) (DC:E4) [07:52:31:824]: Command Line: ARPSYSTEMCOMPONENT=1 MSIFASTINSTALL=7 ACCESSKEY=********** DelayedUpdate= InstallationPath=C:\Program Files\Azure Advanced Threat Protection Sensor InstalledVersion= PROXYCONFIGURATION=********** WixBundleOriginalSourceFolder=D:\Azure ATP Sensor Setup (4)\ REBOOT=ReallySuppress CURRENTDIRECTORY=D:\Azure ATP Sensor Setup (4) CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=33016
MSI (s) (DC:E4) [07:52:31:824]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{831A8CD2-5F5D-449D-91E0-B2EB6F6F8A15}'.
MSI (s) (DC:E4) [07:52:31:824]: Product Code passed to Engine.Initialize: ''
MSI (s) (DC:E4) [07:52:31:824]: Product Code from property table before transforms: '{2022935E-DECA-45B0-81E9-D26DA2E104E7}'
MSI (s) (DC:E4) [07:52:31:824]: Product Code from property table after transforms: '{2022935E-DECA-45B0-81E9-D26DA2E104E7}'
MSI (s) (DC:E4) [07:52:31:824]: Product not registered: beginning first-time install
MSI (s) (DC:E4) [07:52:31:824]: Product {2022935E-DECA-45B0-81E9-D26DA2E104E7} is not managed.
MSI (s) (DC:E4) [07:52:31:824]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (DC:E4) [07:52:31:824]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (DC:E4) [07:52:31:824]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (DC:E4) [07:52:31:829]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (DC:E4) [07:52:31:829]: Adding new sources is allowed.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (DC:E4) [07:52:31:829]: Package name extracted from package path: 'Microsoft.Tri.Sensor.Deployment.Package.msi'
MSI (s) (DC:E4) [07:52:31:829]: Package to be registered: 'Microsoft.Tri.Sensor.Deployment.Package.msi'
MSI (s) (DC:E4) [07:52:31:829]: Note: 1: 2205 2: 3: Error
MSI (s) (DC:E4) [07:52:31:829]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (DC:E4) [07:52:31:829]: Machine policy value 'DisableMsi' is 1
MSI (s) (DC:E4) [07:52:31:829]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (DC:E4) [07:52:31:829]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (DC:E4) [07:52:31:829]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (DC:E4) [07:52:31:829]: Running product '{2022935E-DECA-45B0-81E9-D26DA2E104E7}' with elevated privileges: Product is assigned.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding ARPSYSTEMCOMPONENT property. Its value is '1'.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding MSIFASTINSTALL property. Its value is '7'.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding ACCESSKEY property. Its value is '**********'.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding INSTALLATIONPATH property. Its value is 'C:\Program Files\Azure Advanced Threat Protection Sensor'.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding WIXBUNDLEORIGINALSOURCEFOLDER property. Its value is 'D:\Azure ATP Sensor Setup (4)\'.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'D:\Azure ATP Sensor Setup (4)'.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (DC:E4) [07:52:31:829]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '33016'.
MSI (s) (DC:E4) [07:52:31:829]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (DC:E4) [07:52:31:849]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is '301d3a3a1368294dbfa907027170f7af'.
MSI (s) (DC:E4) [07:52:31:849]: RESTART MANAGER: Session opened.
MSI (s) (DC:E4) [07:52:31:849]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (s) (DC:E4) [07:52:31:849]: TRANSFORMS property is now:
MSI (s) (DC:E4) [07:52:31:849]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '500'.
MSI (s) (DC:E4) [07:52:31:849]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Roaming
MSI (s) (DC:E4) [07:52:31:854]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\Favorites
MSI (s) (DC:E4) [07:52:31:854]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (DC:E4) [07:52:31:854]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\Documents
MSI (s) (DC:E4) [07:52:31:854]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (DC:E4) [07:52:31:854]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (DC:E4) [07:52:31:854]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (DC:E4) [07:52:31:859]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (DC:E4) [07:52:31:859]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (DC:E4) [07:52:31:859]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Local
MSI (s) (DC:E4) [07:52:31:859]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\Pictures
MSI (s) (DC:E4) [07:52:31:859]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (DC:E4) [07:52:31:864]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (DC:E4) [07:52:31:864]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (DC:E4) [07:52:31:864]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (DC:E4) [07:52:31:864]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (DC:E4) [07:52:31:864]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (DC:E4) [07:52:31:869]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (DC:E4) [07:52:31:869]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (DC:E4) [07:52:31:869]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (DC:E4) [07:52:31:869]: SHELL32::SHGetFolderPath returned: C:\Users\z05338723\Desktop
MSI (s) (DC:E4) [07:52:31:869]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (DC:E4) [07:52:31:869]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (DC:E4) [07:52:31:869]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (DC:E4) [07:52:31:879]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (DC:E4) [07:52:31:879]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (DC:E4) [07:52:31:879]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (DC:E4) [07:52:31:879]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (DC:E4) [07:52:31:879]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (DC:E4) [07:52:31:879]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\abbd9a65.msi'.
MSI (s) (DC:E4) [07:52:31:879]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Package Cache\{2022935E-DECA-45B0-81E9-D26DA2E104E7}v2.186.15587.11173\Microsoft.Tri.Sensor.Deployment.Package.msi'.
MSI (s) (DC:E4) [07:52:31:879]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (DC:E4) [07:52:31:879]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (DC:E4) [07:52:31:879]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (DC:E4) [07:52:31:879]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (DC:E4) [07:52:31:879]: Machine policy value 'DisableRollback' is 0
MSI (s) (DC:E4) [07:52:31:879]: User policy value 'DisableRollback' is 0
MSI (s) (DC:E4) [07:52:31:879]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (s) (DC:E4) [07:52:31:879]: PROPERTY CHANGE: Adding MsiUISourceResOnly property. Its value is '1'.
=== Logging started: 9/3/2022 7:52:31 ===
MSI (s) (DC:E4) [07:52:31:879]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (DC:E4) [07:52:31:879]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (s) (DC:E4) [07:52:31:884]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (DC:E4) [07:52:31:884]: Doing action: INSTALL
MSI (s) (DC:E4) [07:52:31:884]: Note: 1: 2205 2: 3: ActionText
Action start 7:52:31: INSTALL.
MSI (s) (DC:E4) [07:52:31:884]: Running ExecuteSequence
MSI (s) (DC:E4) [07:52:31:884]: Doing action: FindRelatedProducts
MSI (s) (DC:E4) [07:52:31:884]: Note: 1: 2205 2: 3: ActionText
Action start 7:52:31: FindRelatedProducts.
MSI (s) (DC:E4) [07:52:31:889]: Doing action: LaunchConditions
MSI (s) (DC:E4) [07:52:31:889]: Note: 1: 2205 2: 3: ActionText
Action ended 7:52:31: FindRelatedProducts. Return value 1.
Action start 7:52:31: LaunchConditions.
MSI (s) (DC:E4) [07:52:31:889]: Doing action: ValidateProductID
MSI (s) (DC:E4) [07:52:31:889]: Note: 1: 2205 2: 3: ActionText
Action ended 7:52:31: LaunchConditions. Return value 1.
Action start 7:52:31: ValidateProductID.
MSI (s) (DC:E4) [07:52:31:889]: Doing action: CostInitialize
MSI (s) (DC:E4) [07:52:31:889]: Note: 1: 2205 2: 3: ActionText
Action ended 7:52:31: ValidateProductID. Return value 1.
MSI (s) (DC:E4) [07:52:31:889]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (DC:E4) [07:52:31:914]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'F:\'.
MSI (s) (DC:E4) [07:52:31:914]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (DC:E4) [07:52:31:914]: Note: 1: 2205 2: 3: Patch
MSI (s) (DC:E4) [07:52:31:914]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (DC:E4) [07:52:31:914]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (DC:E4) [07:52:31:914]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (DC:E4) [07:52:31:914]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (DC:E4) [07:52:31:914]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (DC:E4) [07:52:31:914]: Note: 1: 2205 2: 3: Patch
Action start 7:52:31: CostInitialize.
MSI (s) (DC:E4) [07:52:31:914]: Doing action: FileCost
MSI (s) (DC:E4) [07:52:31:914]: Note: 1: 2205 2: 3: ActionText
Action ended 7:52:31: CostInitialize. Return value 1.
MSI (s) (DC:E4) [07:52:31:919]: Note: 1: 2205 2: 3: MsiAssembly
Action start 7:52:31: FileCost.
MSI (s) (DC:E4) [07:52:31:919]: Doing action: CostFinalize
MSI (s) (DC:E4) [07:52:31:919]: Note: 1: 2205 2: 3: ActionText
Action ended 7:52:31: FileCost. Return value 1.
MSI (s) (DC:E4) [07:52:31:919]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (DC:E4) [07:52:31:919]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (DC:E4) [07:52:31:919]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (DC:E4) [07:52:31:919]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (DC:E4) [07:52:31:919]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (DC:E4) [07:52:31:919]: Note: 1: 2205 2: 3: Patch
MSI (s) (DC:E4) [07:52:31:919]: Note: 1: 2205 2: 3: Condition
MSI (s) (DC:E4) [07:52:31:919]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'F:\'.
MSI (s) (DC:E4) [07:52:31:919]: Target path resolution complete. Dumping Directory table...
MSI (s) (DC:E4) [07:52:31:919]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (DC:E4) [07:52:31:919]: Dir (target): Key: TARGETDIR , Object: F:\
MSI (s) (DC:E4) [07:52:31:919]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
MSI (s) (DC:E4) [07:52:31:919]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (DC:E4) [07:52:31:919]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
Action start 7:52:31: CostFinalize.
MSI (s) (DC:E4) [07:52:31:919]: Doing action: MigrateFeatureStates
MSI (s) (DC:E4) [07:52:31:919]: Note: 1: 2205 2: 3: ActionText
Action ended 7:52:31: CostFinalize. Return value 1.
Action start 7:52:31: MigrateFeatureStates.
MSI (s) (DC:E4) [07:52:31:924]: Doing action: InstallValidate
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: ActionText
Action ended 7:52:31: MigrateFeatureStates. Return value 0.
MSI (s) (DC:E4) [07:52:31:924]: PROPERTY CHANGE: Deleting MsiRestartManagerSessionKey property. Its current value is '301d3a3a1368294dbfa907027170f7af'.
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Dialog
MSI (s) (DC:E4) [07:52:31:924]: Feature: ProductFeature; Installed: Absent; Request: Local; Action: Local
MSI (s) (DC:E4) [07:52:31:924]: Component: ProductComponent; Installed: Absent; Request: Local; Action: Local
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Registry
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: BindImage
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: ProgId
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Extension
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Font
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Shortcut
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Class
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Icon
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: TypeLib
Action start 7:52:31: InstallValidate.
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: _RemoveFilePath
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: MsiFileHash
MSI (s) (DC:E4) [07:52:31:924]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Registry
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: BindImage
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: ProgId
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Extension
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Font
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Shortcut
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Class
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: Icon
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (DC:E4) [07:52:31:924]: Note: 1: 2727 2:
MSI (s) (DC:E4) [07:52:31:934]: Note: 1: 2205 2: 3: FilesInUse
MSI (s) (DC:E4) [07:52:31:954]: Note: 1: 2727 2:
MSI (s) (DC:E4) [07:52:31:954]: Doing action: InstallInitialize
MSI (s) (DC:E4) [07:52:31:954]: Note: 1: 2205 2: 3: ActionText
Action ended 7:52:31: InstallValidate. Return value 1.
MSI (s) (DC:E4) [07:52:31:954]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (DC:E4) [07:52:31:954]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (DC:E4) [07:52:31:954]: BeginTransaction: Locking Server
MSI (s) (DC:E4) [07:52:31:959]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (DC:E4) [07:52:31:959]: SRSetRestorePoint skipped for this transaction.
MSI (s) (DC:E4) [07:52:31:959]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (DC:E4) [07:52:31:959]: Server not locked: locking for product {2022935E-DECA-45B0-81E9-D26DA2E104E7}
Action start 7:52:31: InstallInitialize.
MSI (s) (DC:E4) [07:52:31:994]: Doing action: InstallCustomAction
MSI (s) (DC:E4) [07:52:31:994]: Note: 1: 2205 2: 3: ActionText
Action ended 7:52:31: InstallInitialize. Return value 1.
MSI (s) (DC:00) [07:52:32:174]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9BDC.tmp, Entrypoint: Install
MSI (s) (DC:88) [07:52:32:174]: Generating random cookie.
MSI (s) (DC:88) [07:52:32:179]: Created Custom Action Server with PID 24436 (0x5F74).
MSI (s) (DC:8C) [07:52:32:214]: Running as a service.
MSI (s) (DC:8C) [07:52:32:219]: Hello, I'm your 64bit Impersonated custom action server.
Action start 7:52:31: InstallCustomAction.
SFXCA: Extracting custom action to temporary directory: C:\Windows\Installer\MSI9BDC.tmp-\
SFXCA: Binding to CLR version v4.0.30319
Calling custom action Microsoft.Tri.Sensor.Deployment.Package.Actions!Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions.Install
2022-09-03 05:52:38.2407 Debug CustomActions RunActionGroup InstallActionGroup started
2022-09-03 05:52:38.2557 Debug InstallActionGroup Apply started
2022-09-03 05:52:38.2607 Debug CreateDirectoryDeploymentAction Apply started [suppressFailure=False]
2022-09-03 05:52:38.2607 Debug CreateDirectoryDeploymentAction Apply finished
2022-09-03 05:52:38.2607 Debug DownloadMinorDeploymentPackageBytesAction Apply started [suppressFailure=False]
2022-09-03 05:52:40.3757 Debug DownloadMinorDeploymentPackageBytesAction Apply finished
2022-09-03 05:52:40.3757 Debug UnpackDeploymentPackageBytesAction Apply started [suppressFailure=False]
2022-09-03 05:52:43.0907 Debug UnpackDeploymentPackageBytesAction Apply finished
2022-09-03 05:52:43.0907 Debug RunDeployerMajorDeploymentAction Apply started [suppressFailure=False]
2022-09-03 05:52:43.1207 Info RunDeployerMajorDeploymentAction ApplyInternal started [filePath=JLP+2Wf1EMY7BB4HZ7cPEA== _arguments=0cVOgX+S8RDf7U6zFMMAhg==]
2022-09-03 05:58:00.1109 Info RunDeployerMajorDeploymentAction ApplyInternal finished [isSuccessful=False]
2022-09-03 05:58:00.1109 Debug InstallActionGroup Revert started
2022-09-03 05:58:00.1109 Warn InstallActionGroup Revert reverting [rollbackAction=UnpackDeploymentPackageBytesAction index=0 count=3]
2022-09-03 05:58:00.1159 Debug UnpackDeploymentPackageBytesAction Revert started
2022-09-03 05:58:00.2509 Debug UnpackDeploymentPackageBytesAction Revert finished
2022-09-03 05:58:00.2559 Warn InstallActionGroup Revert reverting [rollbackAction=DownloadMinorDeploymentPackageBytesAction index=1 count=3]
2022-09-03 05:58:00.2559 Debug DownloadMinorDeploymentPackageBytesAction Revert started
2022-09-03 05:58:00.2559 Debug DownloadMinorDeploymentPackageBytesAction Revert finished
2022-09-03 05:58:00.2559 Warn InstallActionGroup Revert reverting [rollbackAction=CreateDirectoryDeploymentAction index=2 count=3]
2022-09-03 05:58:00.2559 Debug CreateDirectoryDeploymentAction Revert started
2022-09-03 05:58:00.2609 Debug CreateDirectoryDeploymentAction Revert finished
2022-09-03 05:58:00.2609 Debug InstallActionGroup Revert finished
2022-09-03 05:58:00.2809 Error DeploymentAction Failed to apply InstallActionGroup
Microsoft.Tri.Infrastructure.ExtendedException: Apply failed [Type=RunDeployerMajorDeploymentAction]
at Microsoft.Tri.Sensor.Common.DeploymentAction.Apply(Boolean suppressFailure)
at Microsoft.Tri.Sensor.Common.DeploymentActionGroup.Apply(Boolean suppressFailure)
at Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions.RunActionGroup(DeploymentActionGroup deploymentActionGroup, Session session)
2022-09-03 05:58:00.2809 Debug CustomActions RunActionGroup InstallActionGroup finished [result=Failure]
CustomAction InstallCustomAction returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (DC:E4) [07:58:00:540]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (DC:E4) [07:58:00:545]: Machine policy value 'DisableRollback' is 0
MSI (s) (DC:E4) [07:58:00:545]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
Action ended 7:58:00: InstallCustomAction. Return value 3.
MSI (s) (DC:E4) [07:58:00:545]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (DC:E4) [07:58:00:545]: No System Restore sequence number for this installation.
MSI (s) (DC:E4) [07:58:00:545]: Unlocking Server
Action ended 7:58:00: INSTALL. Return value 3.
Property(S): UpgradeCode = {EDFB49E0-16FA-4535-B268-BD1B81B15DC2}
Property(S): TARGETDIR = F:\
Property(S): ALLUSERS = 1
Property(S): Manufacturer = Microsoft Corporation
Property(S): ProductCode = {2022935E-DECA-45B0-81E9-D26DA2E104E7}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Azure Advanced Threat Protection Sensor
Property(S): ProductVersion = 2.186.15587.11173
Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED
Property(S): MsiHiddenProperties = ACCESSKEY;PROXYCONFIGURATION
Property(S): MsiLogFileLocation = C:\Users\ADMA05~3\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20220903075218_000_MsiPackage.log
Property(S): PackageCode = {831A8CD2-5F5D-449D-91E0-B2EB6F6F8A15}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): MSIFASTINSTALL = 7
Property(S): ACCESSKEY = **********
Property(S): INSTALLATIONPATH = C:\Program Files\Azure Advanced Threat Protection Sensor
Property(S): WIXBUNDLEORIGINALSOURCEFOLDER = D:\Azure ATP Sensor Setup (4)\
Property(S): REBOOT = ReallySuppress
Property(S): CURRENTDIRECTORY = D:\Azure ATP Sensor Setup (4)
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 33016
Property(S): MsiSystemRebootPending = 1
Property(S): VersionDatabase = 500
Property(S): VersionMsi = 5.00
Property(S): VersionNT = 603
Property(S): VersionNT64 = 603
Property(S): WindowsBuild = 9600
Property(S): ServicePackLevel = 0
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 2
Property(S): MsiNTSuiteDataCenter = 1
Property(S): WindowsFolder = C:\Windows\
Property(S): WindowsVolume = C:\
Property(S): System64Folder = C:\Windows\system32\
Property(S): SystemFolder = C:\Windows\SysWOW64\
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Users\ADMA05~3\AppData\Local\Temp\
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Users\adma053387\AppData\Roaming\
Property(S): FavoritesFolder = C:\Users\adma053387\Favorites\
Property(S): NetHoodFolder = C:\Users\adma053387\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Users\adma053387\Documents\
Property(S): PrintHoodFolder = C:\Users\adma053387\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Users\adma053387\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): SendToFolder = C:\Users\adma053387\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): LocalAppDataFolder = C:\Users\adma053387\AppData\Local\
Property(S): MyPicturesFolder = C:\Users\adma053387\Pictures\
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): MsiAMD64 = 6
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 14336
Property(S): VirtualMemory = 9096
Property(S): AdminUser = 1
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = adma053387
Property(S): UserSID = S-1-5-21-57968465-1444230245-834515569-374094
Property(S): UserLanguageID = 1033
Property(S): ComputerName = YARWPWEUADDB01
Property(S): SystemLanguageID = 1033
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 23
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 7:58:00
Property(S): Date = 9/3/2022
Property(S): MsiNetAssemblySupport = 4.7.2053.0
Property(S): MsiWin32AssemblySupport = 6.3.14393.4169
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): DATABASE = C:\Windows\Installer\abbd9a65.msi
Property(S): OriginalDatabase = C:\ProgramData\Package Cache\{2022935E-DECA-45B0-81E9-D26DA2E104E7}v2.186.15587.11173\Microsoft.Tri.Sensor.Deployment.Package.msi
Property(S): UILevel = 2
Property(S): MsiUISourceResOnly = 1
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = F:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): INSTALLLEVEL = 1
MSI (s) (DC:E4) [07:58:00:565]: Note: 1: 1708
MSI (s) (DC:E4) [07:58:00:565]: Note: 1: 2205 2: 3: Error
MSI (s) (DC:E4) [07:58:00:565]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708
MSI (s) (DC:E4) [07:58:00:565]: Note: 1: 2205 2: 3: Error
MSI (s) (DC:E4) [07:58:00:565]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
MSI (s) (DC:E4) [07:58:00:565]: Product: Azure Advanced Threat Protection Sensor -- Installation failed.
MSI (s) (DC:E4) [07:58:00:565]: Windows Installer installed the product. Product Name: Azure Advanced Threat Protection Sensor. Product Version: 2.186.15587.11173. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 1603.
MSI (s) (DC:E4) [07:58:00:575]: Deferring clean up of packages/files, if any exist
MSI (s) (DC:E4) [07:58:00:575]: MainEngineThread is returning 1603
MSI (s) (DC:EC) [07:58:00:580]: RESTART MANAGER: Session closed.
MSI (s) (DC:EC) [07:58:00:580]: No System Restore sequence number for this installation.
=== Logging stopped: 9/3/2022 7:58:00 ===
MSI (s) (DC:EC) [07:58:00:585]: User policy value 'DisableRollback' is 0
MSI (s) (DC:EC) [07:58:00:585]: Machine policy value 'DisableRollback' is 0
MSI (s) (DC:EC) [07:58:00:585]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (DC:EC) [07:58:00:585]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (DC:EC) [07:58:00:585]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (DC:EC) [07:58:00:585]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (DC:EC) [07:58:00:585]: Destroying RemoteAPI object.
MSI (s) (DC:88) [07:58:00:585]: Custom Action Manager thread ending.
MSI (c) (F8:30) [07:58:00:595]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (F8:30) [07:58:00:595]: MainEngineThread is returning 1603
=== Verbose logging stopped: 9/3/2022 7:58:00 ===
Kindly, suggest any solutions.
