Home

ATP sensor installation failed

%3CLINGO-SUB%20id%3D%22lingo-sub-206741%22%20slang%3D%22en-US%22%3EATP%20sensor%20installation%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-206741%22%20slang%3D%22en-US%22%3E%3CP%3EAfter%20several%20tries%20in%20order%20to%20install%20Azure%20ATP%20sensor%20on%20the%20first%20domain%20controller%20I%20get%20an%20error%20about%20ATP%20service%20but%20without%20clue%20what%20it%20could%20be%20the%20issue.%20I%20reviewed%20event%20logs%2C%20logs%20from%20ATP%20installation.%20All%20pre-requisites%20are%20ok.%20Here%20some%20information%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDomain%20Controller%20is%20Windows%202012%20R2%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%5B1054%3A1058%5D%5B2018-06-21T13%3A07%3A56%5De000%3A%20Error%200x80070643%3A%20Failed%20to%20install%20MSI%20package.%3CBR%20%2F%3E%5B1054%3A1058%5D%5B2018-06-21T13%3A07%3A56%5De000%3A%20Error%200x80070643%3A%20Failed%20to%20execute%20MSI%20package.%3CBR%20%2F%3E%5B0158%3A0EF8%5D%5B2018-06-21T13%3A07%3A56%5De000%3A%20Error%200x80070643%3A%20Failed%20to%20configure%20per-machine%20MSI%20package.%3CBR%20%2F%3E%5B0158%3A0EF8%5D%5B2018-06-21T13%3A07%3A56%5Di000%3A%202018-06-21%2017%3A07%3A56.4824%20Error%20DeploymentProgress%20%5B%5C%5B%5DmethodName%3DBootstrapperApplication_ExecutePackageComplete%20status%3D-2147023293%20exception%3D%5B%5C%5D%5D%3CBR%20%2F%3E%5B0158%3A0EF8%5D%5B2018-06-21T13%3A07%3A56%5Di319%3A%20Applied%20execute%20package%3A%20MsiPackage%2C%20result%3A%200x80070643%2C%20restart%3A%20None%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2018-06-21%2017%3A03%3A48.5340%20Error%20ServiceControllerExtension%20Failed%20to%20change%20service%20status%20%5Bname%3DAATPSensorUpdater%20status%3DRunning%20Exception%3DSystem.ServiceProcess.TimeoutException%3A%20Time%20out%20has%20expired%20and%20the%20operation%20has%20not%20been%20completed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Note%3A%201%3A%201708%3CBR%20%2F%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Note%3A%201%3A%202205%202%3A%26nbsp%3B%203%3A%20Error%3CBR%20%2F%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Note%3A%201%3A%202228%202%3A%26nbsp%3B%203%3A%20Error%204%3A%20SELECT%20%60Message%60%20FROM%20%60Error%60%20WHERE%20%60Error%60%20%3D%201708%3CBR%20%2F%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Note%3A%201%3A%202205%202%3A%26nbsp%3B%203%3A%20Error%3CBR%20%2F%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Note%3A%201%3A%202228%202%3A%26nbsp%3B%203%3A%20Error%204%3A%20SELECT%20%60Message%60%20FROM%20%60Error%60%20WHERE%20%60Error%60%20%3D%201709%3CBR%20%2F%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Product%3A%20Azure%20Advanced%20Threat%20Protection%20Sensor%20--%20Installation%20failed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20information%20about%20it%20will%20be%20helpful.%20I%20was%20researching%20on%20the%20web%20and%20I%20didn%C2%B4t%20find%20anything%20related.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%20and%20thanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-206741%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eazure%20atp%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EInstallation%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESensor%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237066%22%20slang%3D%22en-US%22%3ERe%3A%20ATP%20sensor%20installation%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237066%22%20slang%3D%22en-US%22%3E%3CP%3EATP%20sensor%20installation%20failed%20in%20DC%20Win2008%20R2%20AZURE%20ATP%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A38%5Di001%3A%20Burn%20v3.11.0.1701%2C%20Windows%20v6.1%20(Build%207601%3A%20Service%20Pack%201)%2C%20path%3A%20C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5C%7B8FE602E4-C369-4C08-B978-3FF7FFC48C23%7D%5C.cr%5CAzure%20ATP%20Sensor%20Setup.exe%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A38%5Di000%3A%20Initializing%20hidden%20variable%20'AccessKey'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A38%5Di000%3A%20Initializing%20string%20variable%20'NetFrameworkCommandLineArguments'%20to%20value%20'%2Fpassive%20%2Fshowrmui'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A38%5Di009%3A%20Command%20Line%3A%20'%22-burn.clean.room%3DC%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5CAzure%20ATP%20Sensor%20Setup.exe%22%20-burn.filehandle.attached%3D204%20-burn.filehandle.self%3D212'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A38%5Di000%3A%20Setting%20string%20variable%20'WixBundleOriginalSource'%20to%20value%20'C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5CAzure%20ATP%20Sensor%20Setup.exe'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A38%5Di000%3A%20Setting%20string%20variable%20'WixBundleOriginalSourceFolder'%20to%20value%20'C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5C'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A38%5Di000%3A%20Setting%20string%20variable%20'WixBundleLog'%20to%20value%20'C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438.log'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A38%5Di000%3A%20Setting%20string%20variable%20'WixBundleName'%20to%20value%20'Azure%20Advanced%20Threat%20Protection%20Sensor'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A38%5Di000%3A%20Setting%20string%20variable%20'WixBundleManufacturer'%20to%20value%20'Microsoft%20Corporation'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A38%5Di000%3A%20Loading%20prerequisite%20bootstrapper%20application%20because%20managed%20host%20could%20not%20be%20loaded%2C%20error%3A%200x80131700.%3CBR%20%2F%3E%5B1CEC%3A2324%5D%5B2018-08-24T15%3A14%3A39%5Di000%3A%20Setting%20numeric%20variable%20'WixStdBALanguageId'%20to%20value%201033%3CBR%20%2F%3E%5B1CEC%3A2324%5D%5B2018-08-24T15%3A14%3A39%5Di000%3A%20Setting%20version%20variable%20'WixBundleFileVersion'%20to%20value%20'2.0.0.0'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di100%3A%20Detect%20begin%2C%205%20packages%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di000%3A%20Setting%20numeric%20variable%20'Kb4019990Windows2008R2Exists'%20to%20value%201%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di000%3A%20Registry%20key%20not%20found.%20Key%20%3D%20'SOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5CComponent%20Based%20Servicing%5CPackages%5CPackage_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di000%3A%20Setting%20numeric%20variable%20'Kb4019990Windows2012Exists'%20to%20value%200%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di000%3A%20Setting%20string%20variable%20'NetFrameworkRegistryValue'%20to%20value%20'379893'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di000%3A%20Registry%20key%20not%20found.%20Key%20%3D%20'SOFTWARE%5CMicrosoft%5CWindows%20NT%5CCurrentVersion%5CServer%5CServerLevels'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di000%3A%20Registry%20key%20not%20found.%20Key%20%3D%20'SOFTWARE%5CMicrosoft%5CWindows%20NT%5CCurrentVersion%5CServer%5CServerLevels'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di052%3A%20Condition%20'Kb4019990Windows2008R2Exists'%20evaluates%20to%20true.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di052%3A%20Condition%20'Kb4019990Windows2012Exists'%20evaluates%20to%20false.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di052%3A%20Condition%20'NetFrameworkRegistryValue%20%26gt%3B%3D%20460798'%20evaluates%20to%20false.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di052%3A%20Condition%20'NetFrameworkRegistryValue%20%26gt%3B%3D%20460798'%20evaluates%20to%20false.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di101%3A%20Detected%20package%3A%20Kb4019990Windows2008R2Package%2C%20state%3A%20Present%2C%20cached%3A%20None%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di101%3A%20Detected%20package%3A%20Kb4019990Windows2012Package%2C%20state%3A%20Absent%2C%20cached%3A%20None%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di101%3A%20Detected%20package%3A%20NetFrameworkPackageServer%2C%20state%3A%20Absent%2C%20cached%3A%20None%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di101%3A%20Detected%20package%3A%20NetFrameworkPackageServerCore%2C%20state%3A%20Absent%2C%20cached%3A%20None%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di101%3A%20Detected%20package%3A%20MsiPackage%2C%20state%3A%20Absent%2C%20cached%3A%20None%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A39%5Di199%3A%20Detect%20complete%2C%20result%3A%200x0%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di200%3A%20Plan%20begin%2C%205%20packages%2C%20action%3A%20Install%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di052%3A%20Condition%20'VersionNT64%20%3D%20v6.1'%20evaluates%20to%20true.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di052%3A%20Condition%20'VersionNT64%20%3D%20v6.1'%20evaluates%20to%20true.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Dw321%3A%20Skipping%20dependency%20registration%20on%20package%20with%20no%20dependency%20providers%3A%20Kb4019990Windows2008R2Package%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di052%3A%20Condition%20'VersionNT64%20%3D%20v6.2'%20evaluates%20to%20false.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di052%3A%20Condition%20'VersionNT64%20%3D%20v6.2'%20evaluates%20to%20false.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Dw321%3A%20Skipping%20dependency%20registration%20on%20package%20with%20no%20dependency%20providers%3A%20Kb4019990Windows2012Package%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di052%3A%20Condition%20'ServerLevelsServerCoreRegistryValue%20%26lt%3B%26gt%3B%201%20OR%20ServerLevelsServerGuiShellRegistryValue%20%3D%201'%20evaluates%20to%20true.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di052%3A%20Condition%20'ServerLevelsServerCoreRegistryValue%20%26lt%3B%26gt%3B%201%20OR%20ServerLevelsServerGuiShellRegistryValue%20%3D%201'%20evaluates%20to%20true.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Dw321%3A%20Skipping%20dependency%20registration%20on%20package%20with%20no%20dependency%20providers%3A%20NetFrameworkPackageServer%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di000%3A%20Setting%20string%20variable%20'NetFrameworkLogPath'%20to%20value%20'C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438_000_NetFrameworkPackageServer.log'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di052%3A%20Condition%20'ServerLevelsServerCoreRegistryValue%20%3D%201%20AND%20ServerLevelsServerGuiShellRegistryValue%20%26lt%3B%26gt%3B%201'%20evaluates%20to%20false.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di052%3A%20Condition%20'ServerLevelsServerCoreRegistryValue%20%3D%201%20AND%20ServerLevelsServerGuiShellRegistryValue%20%26lt%3B%26gt%3B%201'%20evaluates%20to%20false.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Dw321%3A%20Skipping%20dependency%20registration%20on%20package%20with%20no%20dependency%20providers%3A%20NetFrameworkPackageServerCore%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di201%3A%20Planned%20package%3A%20Kb4019990Windows2008R2Package%2C%20state%3A%20Present%2C%20default%20requested%3A%20Present%2C%20ba%20requested%3A%20Present%2C%20execute%3A%20None%2C%20rollback%3A%20None%2C%20cache%3A%20No%2C%20uncache%3A%20No%2C%20dependency%3A%20None%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di201%3A%20Planned%20package%3A%20Kb4019990Windows2012Package%2C%20state%3A%20Absent%2C%20default%20requested%3A%20Absent%2C%20ba%20requested%3A%20None%2C%20execute%3A%20None%2C%20rollback%3A%20None%2C%20cache%3A%20No%2C%20uncache%3A%20No%2C%20dependency%3A%20None%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di201%3A%20Planned%20package%3A%20NetFrameworkPackageServer%2C%20state%3A%20Absent%2C%20default%20requested%3A%20Present%2C%20ba%20requested%3A%20Present%2C%20execute%3A%20Install%2C%20rollback%3A%20None%2C%20cache%3A%20Yes%2C%20uncache%3A%20No%2C%20dependency%3A%20None%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di201%3A%20Planned%20package%3A%20NetFrameworkPackageServerCore%2C%20state%3A%20Absent%2C%20default%20requested%3A%20Absent%2C%20ba%20requested%3A%20None%2C%20execute%3A%20None%2C%20rollback%3A%20None%2C%20cache%3A%20No%2C%20uncache%3A%20No%2C%20dependency%3A%20None%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di201%3A%20Planned%20package%3A%20MsiPackage%2C%20state%3A%20Absent%2C%20default%20requested%3A%20Present%2C%20ba%20requested%3A%20None%2C%20execute%3A%20None%2C%20rollback%3A%20None%2C%20cache%3A%20No%2C%20uncache%3A%20No%2C%20dependency%3A%20None%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di299%3A%20Plan%20complete%2C%20result%3A%200x0%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di300%3A%20Apply%20begin%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di010%3A%20Launching%20elevated%20engine%20process.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A41%5Di011%3A%20Launched%20elevated%20engine%20process.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A14%3A42%5Di012%3A%20Connected%20to%20elevated%20engine.%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A14%3A42%5Di358%3A%20Pausing%20automatic%20updates.%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A14%3A42%5Di359%3A%20Paused%20automatic%20updates.%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A14%3A42%5Di360%3A%20Creating%20a%20system%20restore%20point.%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A14%3A42%5Di362%3A%20System%20restore%20disabled%2C%20system%20restore%20point%20not%20created.%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A14%3A42%5Di370%3A%20Session%20begin%2C%20registration%20key%3A%20SOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5CUninstall%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%2C%20options%3A%200x7%2C%20disable%20resume%3A%20No%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A14%3A42%5Di000%3A%20Caching%20bundle%20from%3A%20'C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5C%7B8288E200-A8EA-4FA0-8AF9-E67477E64A3D%7D%5C.be%5CAzure%20ATP%20Sensor%20Setup.exe'%20to%3A%20'C%3A%5CProgramData%5CPackage%20Cache%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%5CAzure%20ATP%20Sensor%20Setup.exe'%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A14%3A42%5Di320%3A%20Registering%20bundle%20dependency%20provider%3A%20%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%2C%20version%3A%202.0.0.0%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A14%3A42%5Di371%3A%20Updating%20session%2C%20registration%20key%3A%20SOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5CUninstall%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%2C%20resume%3A%20Active%2C%20restart%20initiated%3A%20No%2C%20disable%20resume%3A%20No%3CBR%20%2F%3E%5B1CAC%3A1AD8%5D%5B2018-08-24T15%3A14%3A42%5Di305%3A%20Verified%20acquired%20payload%3A%20NetFrameworkPackageServer%20at%20path%3A%20C%3A%5CProgramData%5CPackage%20Cache%5C.unverified%5CNetFrameworkPackageServer%2C%20moving%20to%3A%20C%3A%5CProgramData%5CPackage%20Cache%5C76054141A492BA307595250BDA05AD4E0694CDC3%5CNDP47-KB3186497-x86-x64-AllOS-ENU.exe.%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A14%3A42%5Di301%3A%20Applying%20execute%20package%3A%20NetFrameworkPackageServer%2C%20action%3A%20Install%2C%20path%3A%20C%3A%5CProgramData%5CPackage%20Cache%5C76054141A492BA307595250BDA05AD4E0694CDC3%5CNDP47-KB3186497-x86-x64-AllOS-ENU.exe%2C%20arguments%3A%20'%22C%3A%5CProgramData%5CPackage%20Cache%5C76054141A492BA307595250BDA05AD4E0694CDC3%5CNDP47-KB3186497-x86-x64-AllOS-ENU.exe%22%20%2Fpassive%20%2Fshowrmui%20%2Fnorestart%20%2FChainingPackage%20%22Azure%20Advanced%20Threat%20Protection%20Sensor%22%20%2Flog%20%22C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438_000_NetFrameworkPackageServer.log.html%22'%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A18%3A21%5Di319%3A%20Applied%20execute%20package%3A%20NetFrameworkPackageServer%2C%20result%3A%200x0%2C%20restart%3A%20Initiated%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A18%3A21%5Di372%3A%20Session%20end%2C%20registration%20key%3A%20SOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5CUninstall%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%2C%20resume%3A%20Reboot%20Pending%2C%20restart%3A%20Initiated%2C%20disable%20resume%3A%20No%3CBR%20%2F%3E%5B1CAC%3A21A8%5D%5B2018-08-24T15%3A18%3A21%5Di371%3A%20Updating%20session%2C%20registration%20key%3A%20SOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5CUninstall%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%2C%20resume%3A%20Reboot%20Pending%2C%20restart%20initiated%3A%20Yes%2C%20disable%20resume%3A%20No%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A18%3A21%5Di399%3A%20Apply%20complete%2C%20result%3A%200x0%2C%20restart%3A%20Initiated%2C%20ba%20requested%20restart%3A%20No%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di500%3A%20Shutting%20down%2C%20exit%20code%3A%200x669%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di000%3A%20The%20prerequisites%20scheduled%20a%20restart.%20The%20bootstrapper%20application%20will%20be%20reloaded%20after%20the%20computer%20is%20restarted.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di004%3A%20Bootstrapper%20application%20requested%20restart%20at%20shutdown.%20Planned%20to%20restart%20already%3A%20No.%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20Kb4019990Windows2008R2Exists%20%3D%201%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20Kb4019990Windows2012Exists%20%3D%200%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20NetFrameworkCommandLineArguments%20%3D%20%2Fpassive%20%2Fshowrmui%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20NetFrameworkLogPath%20%3D%20C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438_000_NetFrameworkPackageServer.log%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20NetFrameworkRegistryValue%20%3D%20379893%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20VersionNT64%20%3D%206.1.0.0%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleAction%20%3D%205%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleElevated%20%3D%201%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleFileVersion%20%3D%202.0.0.0%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleForcedRestartPackage%20%3D%20NetFrameworkPackageServer%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleLog%20%3D%20C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438.log%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleManufacturer%20%3D%20Microsoft%20Corporation%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleName%20%3D%20Azure%20Advanced%20Threat%20Protection%20Sensor%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleOriginalSource%20%3D%20C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5CAzure%20ATP%20Sensor%20Setup.exe%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleOriginalSourceFolder%20%3D%20C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5C%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleProviderKey%20%3D%20%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleSourceProcessFolder%20%3D%20C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5C%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleSourceProcessPath%20%3D%20C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5CAzure%20ATP%20Sensor%20Setup.exe%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleTag%20%3D%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleUILevel%20%3D%204%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixBundleVersion%20%3D%202.0.0.0%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di410%3A%20Variable%3A%20WixStdBALanguageId%20%3D%201033%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Di007%3A%20Exit%20code%3A%200x669%2C%20restarting%3A%20Yes%3CBR%20%2F%3E%5B1CEC%3A1A74%5D%5B2018-08-24T15%3A20%3A50%5Dw005%3A%20Restarting%20computer...%3CBR%20%2F%3E%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3D%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A01%5Di001%3A%20Burn%20v3.11.0.1701%2C%20Windows%20v6.1%20(Build%207601%3A%20Service%20Pack%201)%2C%20path%3A%20C%3A%5CProgramData%5CPackage%20Cache%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%5CAzure%20ATP%20Sensor%20Setup.exe%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A01%5Di000%3A%20Initializing%20hidden%20variable%20'AccessKey'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A01%5Di000%3A%20Initializing%20string%20variable%20'NetFrameworkCommandLineArguments'%20to%20value%20'%2Fpassive%20%2Fshowrmui'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A01%5Di009%3A%20Command%20Line%3A%20'%22-burn.clean.room%3DC%3A%5CProgramData%5CPackage%20Cache%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%5CAzure%20ATP%20Sensor%20Setup.exe%22%20-burn.filehandle.attached%3D204%20-burn.filehandle.self%3D212%20%2Fburn.log.append%20%22C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438.log%22'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A01%5Di000%3A%20Setting%20string%20variable%20'WixBundleLog'%20to%20value%20'C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438.log'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A02%5Di000%3A%20Setting%20string%20variable%20'WixBundleManufacturer'%20to%20value%20'Microsoft%20Corporation'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A04%5Di000%3A%20Loading%20managed%20bootstrapper%20application.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A08%5Di000%3A%20Creating%20BA%20thread%20to%20run%20asynchronously.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di100%3A%20Detect%20begin%2C%205%20packages%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di000%3A%202018-08-24%2021%3A24%3A13.0254%20Debug%20DeploymentModel%20DetectBegin%20%5B%5C%5B%5DInstalled%3DFalse%5B%5C%5D%5D%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di000%3A%20Setting%20numeric%20variable%20'Kb4019990Windows2008R2Exists'%20to%20value%201%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di000%3A%20Registry%20key%20not%20found.%20Key%20%3D%20'SOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5CComponent%20Based%20Servicing%5CPackages%5CPackage_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di000%3A%20Setting%20numeric%20variable%20'Kb4019990Windows2012Exists'%20to%20value%200%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di000%3A%20Setting%20string%20variable%20'NetFrameworkRegistryValue'%20to%20value%20'460805'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di000%3A%20Registry%20key%20not%20found.%20Key%20%3D%20'SOFTWARE%5CMicrosoft%5CWindows%20NT%5CCurrentVersion%5CServer%5CServerLevels'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di000%3A%20Registry%20key%20not%20found.%20Key%20%3D%20'SOFTWARE%5CMicrosoft%5CWindows%20NT%5CCurrentVersion%5CServer%5CServerLevels'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di052%3A%20Condition%20'Kb4019990Windows2008R2Exists'%20evaluates%20to%20true.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di052%3A%20Condition%20'Kb4019990Windows2012Exists'%20evaluates%20to%20false.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di052%3A%20Condition%20'NetFrameworkRegistryValue%20%26gt%3B%3D%20460798'%20evaluates%20to%20true.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di052%3A%20Condition%20'NetFrameworkRegistryValue%20%26gt%3B%3D%20460798'%20evaluates%20to%20true.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di101%3A%20Detected%20package%3A%20Kb4019990Windows2008R2Package%2C%20state%3A%20Present%2C%20cached%3A%20None%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di101%3A%20Detected%20package%3A%20Kb4019990Windows2012Package%2C%20state%3A%20Absent%2C%20cached%3A%20None%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di101%3A%20Detected%20package%3A%20NetFrameworkPackageServer%2C%20state%3A%20Present%2C%20cached%3A%20Complete%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di101%3A%20Detected%20package%3A%20NetFrameworkPackageServerCore%2C%20state%3A%20Present%2C%20cached%3A%20Complete%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di101%3A%20Detected%20package%3A%20MsiPackage%2C%20state%3A%20Absent%2C%20cached%3A%20None%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A24%3A13%5Di199%3A%20Detect%20complete%2C%20result%3A%200x0%3CBR%20%2F%3E%5B16B0%3A179C%5D%5B2018-08-24T15%3A24%3A13%5Di000%3A%202018-08-24%2021%3A24%3A13.1582%20Debug%20DeploymentModel%20%5B%5C%5B%5DDeploymentAction%3DInstall%5B%5C%5D%5D%3CBR%20%2F%3E%5B16B0%3A179C%5D%5B2018-08-24T15%3A24%3A13%5Di000%3A%202018-08-24%2021%3A24%3A13.5059%20Debug%20DeploymentModel%20%5B%5C%5B%5DIsAfterRestartAndConfigured%3DFalse%5B%5C%5D%5D%3CBR%20%2F%3E%5B16B0%3A179C%5D%5B2018-08-24T15%3A26%3A14%5Di000%3A%202018-08-24%2021%3A26%3A14.7250%20Info%20InteractiveDeploymentManager%20ValidateCreateSensorAsync%20returned%20%5B%5C%5B%5DvalidateCreateSensorResult%3DSuccess%5B%5C%5D%5D%3CBR%20%2F%3E%5B16B0%3A179C%5D%5B2018-08-24T15%3A26%3A14%5Di000%3A%20Setting%20string%20variable%20'IsConfigured'%20to%20value%20'True'%3CBR%20%2F%3E%5B16B0%3A179C%5D%5B2018-08-24T15%3A26%3A14%5Di000%3A%20Setting%20hidden%20variable%20'AccessKey'%3CBR%20%2F%3E%5B16B0%3A179C%5D%5B2018-08-24T15%3A26%3A14%5Di000%3A%20Setting%20string%20variable%20'InstallationPath'%20to%20value%20'C%3A%5CProgram%20Files%5CAzure%20Advanced%20Threat%20Protection%20Sensor'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di200%3A%20Plan%20begin%2C%205%20packages%2C%20action%3A%20Install%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di052%3A%20Condition%20'VersionNT64%20%3D%20v6.1'%20evaluates%20to%20true.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Dw321%3A%20Skipping%20dependency%20registration%20on%20package%20with%20no%20dependency%20providers%3A%20Kb4019990Windows2008R2Package%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di052%3A%20Condition%20'VersionNT64%20%3D%20v6.2'%20evaluates%20to%20false.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Dw321%3A%20Skipping%20dependency%20registration%20on%20package%20with%20no%20dependency%20providers%3A%20Kb4019990Windows2012Package%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di052%3A%20Condition%20'ServerLevelsServerCoreRegistryValue%20%26lt%3B%26gt%3B%201%20OR%20ServerLevelsServerGuiShellRegistryValue%20%3D%201'%20evaluates%20to%20true.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Dw321%3A%20Skipping%20dependency%20registration%20on%20package%20with%20no%20dependency%20providers%3A%20NetFrameworkPackageServer%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di052%3A%20Condition%20'ServerLevelsServerCoreRegistryValue%20%3D%201%20AND%20ServerLevelsServerGuiShellRegistryValue%20%26lt%3B%26gt%3B%201'%20evaluates%20to%20false.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Dw321%3A%20Skipping%20dependency%20registration%20on%20package%20with%20no%20dependency%20providers%3A%20NetFrameworkPackageServerCore%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di000%3A%20Setting%20string%20variable%20'WixBundleRollbackLog_MsiPackage'%20to%20value%20'C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438_000_MsiPackage_rollback.log'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di000%3A%20Setting%20string%20variable%20'WixBundleLog_MsiPackage'%20to%20value%20'C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438_000_MsiPackage.log'%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di201%3A%20Planned%20package%3A%20Kb4019990Windows2008R2Package%2C%20state%3A%20Present%2C%20default%20requested%3A%20Present%2C%20ba%20requested%3A%20Present%2C%20execute%3A%20None%2C%20rollback%3A%20None%2C%20cache%3A%20No%2C%20uncache%3A%20No%2C%20dependency%3A%20None%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di201%3A%20Planned%20package%3A%20Kb4019990Windows2012Package%2C%20state%3A%20Absent%2C%20default%20requested%3A%20Absent%2C%20ba%20requested%3A%20Absent%2C%20execute%3A%20None%2C%20rollback%3A%20None%2C%20cache%3A%20No%2C%20uncache%3A%20No%2C%20dependency%3A%20None%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di201%3A%20Planned%20package%3A%20NetFrameworkPackageServer%2C%20state%3A%20Present%2C%20default%20requested%3A%20Present%2C%20ba%20requested%3A%20Present%2C%20execute%3A%20None%2C%20rollback%3A%20None%2C%20cache%3A%20No%2C%20uncache%3A%20No%2C%20dependency%3A%20None%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di201%3A%20Planned%20package%3A%20NetFrameworkPackageServerCore%2C%20state%3A%20Present%2C%20default%20requested%3A%20Absent%2C%20ba%20requested%3A%20Absent%2C%20execute%3A%20None%2C%20rollback%3A%20None%2C%20cache%3A%20No%2C%20uncache%3A%20No%2C%20dependency%3A%20None%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di201%3A%20Planned%20package%3A%20MsiPackage%2C%20state%3A%20Absent%2C%20default%20requested%3A%20Present%2C%20ba%20requested%3A%20Present%2C%20execute%3A%20Install%2C%20rollback%3A%20Uninstall%2C%20cache%3A%20Yes%2C%20uncache%3A%20No%2C%20dependency%3A%20Register%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di299%3A%20Plan%20complete%2C%20result%3A%200x0%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di300%3A%20Apply%20begin%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di010%3A%20Launching%20elevated%20engine%20process.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A14%5Di011%3A%20Launched%20elevated%20engine%20process.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A26%3A15%5Di012%3A%20Connected%20to%20elevated%20engine.%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A26%3A15%5Di358%3A%20Pausing%20automatic%20updates.%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A26%3A15%5Di359%3A%20Paused%20automatic%20updates.%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A26%3A15%5Di360%3A%20Creating%20a%20system%20restore%20point.%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A26%3A15%5Di362%3A%20System%20restore%20disabled%2C%20system%20restore%20point%20not%20created.%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A26%3A15%5Di371%3A%20Updating%20session%2C%20registration%20key%3A%20SOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5CUninstall%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%2C%20resume%3A%20Active%2C%20restart%20initiated%3A%20No%2C%20disable%20resume%3A%20No%3CBR%20%2F%3E%5B16B0%3A1480%5D%5B2018-08-24T15%3A26%3A15%5Di336%3A%20Acquiring%20container%3A%20WixAttachedContainer%2C%20copy%20from%3A%20C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5CAzure%20ATP%20Sensor%20Setup.exe%3CBR%20%2F%3E%5B16B0%3A1480%5D%5B2018-08-24T15%3A26%3A15%5Di000%3A%20Setting%20string%20variable%20'WixBundleLastUsedSource'%20to%20value%20'C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5C'%3CBR%20%2F%3E%5B0680%3A0C88%5D%5B2018-08-24T15%3A26%3A15%5Di305%3A%20Verified%20acquired%20payload%3A%20MsiPackage%20at%20path%3A%20C%3A%5CProgramData%5CPackage%20Cache%5C.unverified%5CMsiPackage%2C%20moving%20to%3A%20C%3A%5CProgramData%5CPackage%20Cache%5C%7B6DF515FA-FB74-49E6-90FD-174E9C7D5751%7Dv2.0.0.0%5CMicrosoft.Tri.Sensor.Deployment.Package.msi.%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A26%3A15%5Di323%3A%20Registering%20package%20dependency%20provider%3A%20%7B6DF515FA-FB74-49E6-90FD-174E9C7D5751%7D%2C%20version%3A%202.0.0.0%2C%20package%3A%20MsiPackage%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A26%3A15%5Di301%3A%20Applying%20execute%20package%3A%20MsiPackage%2C%20action%3A%20Install%2C%20path%3A%20C%3A%5CProgramData%5CPackage%20Cache%5C%7B6DF515FA-FB74-49E6-90FD-174E9C7D5751%7Dv2.0.0.0%5CMicrosoft.Tri.Sensor.Deployment.Package.msi%2C%20arguments%3A%20'%20ARPSYSTEMCOMPONENT%3D%221%22%20MSIFASTINSTALL%3D%227%22%20ACCESSKEY%3D%22*****%22%20InstallationPath%3D%22C%3A%5CProgram%20Files%5CAzure%20Advanced%20Threat%20Protection%20Sensor%22%20InstalledVersion%3D%22%22%20WixBundleOriginalSourceFolder%3D%22C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5C%22'%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A32%3A42%5De000%3A%20Error%200x80070643%3A%20Failed%20to%20install%20MSI%20package.%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A32%3A42%5De000%3A%20Error%200x80070643%3A%20Failed%20to%20execute%20MSI%20package.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A32%3A42%5De000%3A%20Error%200x80070643%3A%20Failed%20to%20configure%20per-machine%20MSI%20package.%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A32%3A42%5Di000%3A%202018-08-24%2021%3A32%3A42.7319%20Error%20DeploymentProgress%20%5B%5C%5B%5DmethodName%3DBootstrapperApplication_ExecutePackageComplete%20status%3D-2147023293%20exception%3D%5B%5C%5D%5D%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A32%3A42%5Di319%3A%20Applied%20execute%20package%3A%20MsiPackage%2C%20result%3A%200x80070643%2C%20restart%3A%20None%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A32%3A42%5De000%3A%20Error%200x80070643%3A%20Failed%20to%20execute%20MSI%20package.%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A32%3A42%5Di318%3A%20Skipped%20rollback%20of%20package%3A%20MsiPackage%2C%20action%3A%20Uninstall%2C%20already%3A%20Absent%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A32%3A42%5Di319%3A%20Applied%20rollback%20package%3A%20MsiPackage%2C%20result%3A%200x0%2C%20restart%3A%20None%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A32%3A42%5Di329%3A%20Removed%20package%20dependency%20provider%3A%20%7B6DF515FA-FB74-49E6-90FD-174E9C7D5751%7D%2C%20package%3A%20MsiPackage%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A32%3A42%5Di351%3A%20Removing%20cached%20package%3A%20MsiPackage%2C%20from%20path%3A%20C%3A%5CProgramData%5CPackage%20Cache%5C%7B6DF515FA-FB74-49E6-90FD-174E9C7D5751%7Dv2.0.0.0%5C%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A32%3A42%5Di372%3A%20Session%20end%2C%20registration%20key%3A%20SOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5CUninstall%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%2C%20resume%3A%20None%2C%20restart%3A%20None%2C%20disable%20resume%3A%20No%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A32%3A42%5Di330%3A%20Removed%20bundle%20dependency%20provider%3A%20%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A32%3A42%5Di352%3A%20Removing%20cached%20bundle%3A%20%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%2C%20from%20path%3A%20C%3A%5CProgramData%5CPackage%20Cache%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%5C%3CBR%20%2F%3E%5B0680%3A17E4%5D%5B2018-08-24T15%3A32%3A42%5Di371%3A%20Updating%20session%2C%20registration%20key%3A%20SOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5CUninstall%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%2C%20resume%3A%20None%2C%20restart%20initiated%3A%20No%2C%20disable%20resume%3A%20No%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A32%3A42%5Di399%3A%20Apply%20complete%2C%20result%3A%200x80070643%2C%20restart%3A%20None%2C%20ba%20requested%20restart%3A%20No%3CBR%20%2F%3E%5B16B0%3A179C%5D%5B2018-08-24T15%3A35%3A53%5Di000%3A%202018-08-24%2021%3A35%3A53.5496%20Debug%20SensorBootstrapperApplication%20Engine.Quit%20%5B%5C%5B%5DdeploymentResultStatus%3D-2147023293%20isRestartRequired%3DFalse%5B%5C%5D%5D%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di500%3A%20Shutting%20down%2C%20exit%20code%3A%200x80070643%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20AccessKey%20%3D%20*****%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20InstallationPath%20%3D%20C%3A%5CProgram%20Files%5CAzure%20Advanced%20Threat%20Protection%20Sensor%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20IsConfigured%20%3D%20True%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20Kb4019990Windows2008R2Exists%20%3D%201%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20Kb4019990Windows2012Exists%20%3D%200%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20NetFrameworkCommandLineArguments%20%3D%20%2Fpassive%20%2Fshowrmui%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20NetFrameworkRegistryValue%20%3D%20460805%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20RebootPending%20%3D%200%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20VersionNT64%20%3D%206.1.0.0%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleAction%20%3D%205%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleElevated%20%3D%201%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleLastUsedSource%20%3D%20C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5C%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleLog%20%3D%20C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438.log%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleLog_MsiPackage%20%3D%20C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438_000_MsiPackage.log%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleManufacturer%20%3D%20Microsoft%20Corporation%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleName%20%3D%20Azure%20Advanced%20Threat%20Protection%20Sensor%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleOriginalSource%20%3D%20C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5CAzure%20ATP%20Sensor%20Setup.exe%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleOriginalSourceFolder%20%3D%20C%3A%5CUsers%5CXXXXUSER%5CDesktop%5Cshare%5CAzure%20ATP%20Sensor%20Setup%5C%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleProviderKey%20%3D%20%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleRollbackLog_MsiPackage%20%3D%20C%3A%5CUsers%5C~AGUTI~1%5CAppData%5CLocal%5CTemp%5CAzure%20Advanced%20Threat%20Protection%20Sensor_20180824151438_000_MsiPackage_rollback.log%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleSourceProcessFolder%20%3D%20C%3A%5CProgramData%5CPackage%20Cache%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%5C%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleSourceProcessPath%20%3D%20C%3A%5CProgramData%5CPackage%20Cache%5C%7Bbe78eaf0-acf4-4553-89be-9e85e2457915%7D%5CAzure%20ATP%20Sensor%20Setup.exe%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleTag%20%3D%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleUILevel%20%3D%204%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di410%3A%20Variable%3A%20WixBundleVersion%20%3D%202.0.0.0%3CBR%20%2F%3E%5B16B0%3A16AC%5D%5B2018-08-24T15%3A35%3A53%5Di007%3A%20Exit%20code%3A%200x80070643%2C%20restarting%3A%20No%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-208162%22%20slang%3D%22en-US%22%3ERe%3A%20ATP%20sensor%20installation%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-208162%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F158156%22%20target%3D%22_blank%22%3E%40Anderson%20Lacruz%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3E%3CP%3EAfter%20several%20tries%20in%20order%20to%20install%20Azure%20ATP%20sensor%20on%20the%20first%20domain%20controller%20I%20get%20an%20error%20about%20ATP%20service%20but%20without%20clue%20what%20it%20could%20be%20the%20issue.%20I%20reviewed%20event%20logs%2C%20logs%20from%20ATP%20installation.%20All%20pre-requisites%20are%20ok.%20Here%20some%20information%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDomain%20Controller%20is%20Windows%202012%20R2%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%5B1054%3A1058%5D%5B2018-06-21T13%3A07%3A56%5De000%3A%20Error%200x80070643%3A%20Failed%20to%20install%20MSI%20package.%3CBR%20%2F%3E%5B1054%3A1058%5D%5B2018-06-21T13%3A07%3A56%5De000%3A%20Error%200x80070643%3A%20Failed%20to%20execute%20MSI%20package.%3CBR%20%2F%3E%5B0158%3A0EF8%5D%5B2018-06-21T13%3A07%3A56%5De000%3A%20Error%200x80070643%3A%20Failed%20to%20configure%20per-machine%20MSI%20package.%3CBR%20%2F%3E%5B0158%3A0EF8%5D%5B2018-06-21T13%3A07%3A56%5Di000%3A%202018-06-21%2017%3A07%3A56.4824%20Error%20DeploymentProgress%20%5B%5C%5B%5DmethodName%3DBootstrapperApplication_ExecutePackageComplete%20status%3D-2147023293%20exception%3D%5B%5C%5D%5D%3CBR%20%2F%3E%5B0158%3A0EF8%5D%5B2018-06-21T13%3A07%3A56%5Di319%3A%20Applied%20execute%20package%3A%20MsiPackage%2C%20result%3A%200x80070643%2C%20restart%3A%20None%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2018-06-21%2017%3A03%3A48.5340%20Error%20ServiceControllerExtension%20Failed%20to%20change%20service%20status%20%5Bname%3DAATPSensorUpdater%20status%3DRunning%20Exception%3DSystem.ServiceProcess.TimeoutException%3A%20Time%20out%20has%20expired%20and%20the%20operation%20has%20not%20been%20completed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Note%3A%201%3A%201708%3CBR%20%2F%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Note%3A%201%3A%202205%202%3A%26nbsp%3B%203%3A%20Error%3CBR%20%2F%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Note%3A%201%3A%202228%202%3A%26nbsp%3B%203%3A%20Error%204%3A%20SELECT%20%60Message%60%20FROM%20%60Error%60%20WHERE%20%60Error%60%20%3D%201708%3CBR%20%2F%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Note%3A%201%3A%202205%202%3A%26nbsp%3B%203%3A%20Error%3CBR%20%2F%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Note%3A%201%3A%202228%202%3A%26nbsp%3B%203%3A%20Error%204%3A%20SELECT%20%60Message%60%20FROM%20%60Error%60%20WHERE%20%60Error%60%20%3D%201709%3CBR%20%2F%3EMSI%20(s)%20(84%3AAC)%20%5B13%3A07%3A56%3A447%5D%3A%20Product%3A%20Azure%20Advanced%20Threat%20Protection%20Sensor%20--%20Installation%20failed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20information%20about%20it%20will%20be%20helpful.%20I%20was%20researching%20on%20the%20web%20and%20I%20didn%C2%B4t%20find%20anything%20related.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%20and%20thanks%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CBR%20%2F%3EThe%20issue%20was%20DNS%20resolution%20with%20the%20ATP%20WorkSpace%20from%20domain%20controller.%20I%20followed%20this%20link%20to%20solve%20the%20issue%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure-advanced-threat-protection%2Fconfigure-proxy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20color%3D%22%230066cc%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure-advanced-threat-protection%2Fconfigure-proxy%3C%2FFONT%3E%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMore%20details%20and%26nbsp%3Berrors%20were%20gotten%26nbsp%3Bfrom%20logs%20generated%20in%20ATP%20folder%20during%20installation%20%2F%20Deployment.and%20before%20the%20rollback.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Anderson Lacruz
New Contributor

After several tries in order to install Azure ATP sensor on the first domain controller I get an error about ATP service but without clue what it could be the issue. I reviewed event logs, logs from ATP installation. All pre-requisites are ok. Here some information

 

Domain Controller is Windows 2012 R2

 

[1054:1058][2018-06-21T13:07:56]e000: Error 0x80070643: Failed to install MSI package.
[1054:1058][2018-06-21T13:07:56]e000: Error 0x80070643: Failed to execute MSI package.
[0158:0EF8][2018-06-21T13:07:56]e000: Error 0x80070643: Failed to configure per-machine MSI package.
[0158:0EF8][2018-06-21T13:07:56]i000: 2018-06-21 17:07:56.4824 Error DeploymentProgress [\[]methodName=BootstrapperApplication_ExecutePackageComplete status=-2147023293 exception=[\]]
[0158:0EF8][2018-06-21T13:07:56]i319: Applied execute package: MsiPackage, result: 0x80070643, restart: None

 

 

2018-06-21 17:03:48.5340 Error ServiceControllerExtension Failed to change service status [name=AATPSensorUpdater status=Running Exception=System.ServiceProcess.TimeoutException: Time out has expired and the operation has not been completed.

 

MSI (s) (84:AC) [13:07:56:447]: Note: 1: 1708
MSI (s) (84:AC) [13:07:56:447]: Note: 1: 2205 2:  3: Error
MSI (s) (84:AC) [13:07:56:447]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708
MSI (s) (84:AC) [13:07:56:447]: Note: 1: 2205 2:  3: Error
MSI (s) (84:AC) [13:07:56:447]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
MSI (s) (84:AC) [13:07:56:447]: Product: Azure Advanced Threat Protection Sensor -- Installation failed.

 

Any information about it will be helpful. I was researching on the web and I didn´t find anything related.

 

Regards and thanks

2 Replies

@Anderson Lacruz wrote:

After several tries in order to install Azure ATP sensor on the first domain controller I get an error about ATP service but without clue what it could be the issue. I reviewed event logs, logs from ATP installation. All pre-requisites are ok. Here some information

 

Domain Controller is Windows 2012 R2

 

[1054:1058][2018-06-21T13:07:56]e000: Error 0x80070643: Failed to install MSI package.
[1054:1058][2018-06-21T13:07:56]e000: Error 0x80070643: Failed to execute MSI package.
[0158:0EF8][2018-06-21T13:07:56]e000: Error 0x80070643: Failed to configure per-machine MSI package.
[0158:0EF8][2018-06-21T13:07:56]i000: 2018-06-21 17:07:56.4824 Error DeploymentProgress [\[]methodName=BootstrapperApplication_ExecutePackageComplete status=-2147023293 exception=[\]]
[0158:0EF8][2018-06-21T13:07:56]i319: Applied execute package: MsiPackage, result: 0x80070643, restart: None

 

 

2018-06-21 17:03:48.5340 Error ServiceControllerExtension Failed to change service status [name=AATPSensorUpdater status=Running Exception=System.ServiceProcess.TimeoutException: Time out has expired and the operation has not been completed.

 

MSI (s) (84:AC) [13:07:56:447]: Note: 1: 1708
MSI (s) (84:AC) [13:07:56:447]: Note: 1: 2205 2:  3: Error
MSI (s) (84:AC) [13:07:56:447]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708
MSI (s) (84:AC) [13:07:56:447]: Note: 1: 2205 2:  3: Error
MSI (s) (84:AC) [13:07:56:447]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
MSI (s) (84:AC) [13:07:56:447]: Product: Azure Advanced Threat Protection Sensor -- Installation failed.

 

Any information about it will be helpful. I was researching on the web and I didn´t find anything related.

 

Regards and thanks



The issue was DNS resolution with the ATP WorkSpace from domain controller. I followed this link to solve the issue:

 

https://docs.microsoft.com/en-us/azure-advanced-threat-protection/configure-proxy

 

More details and errors were gotten from logs generated in ATP folder during installation / Deployment.and before the rollback.

ATP sensor installation failed in DC Win2008 R2 AZURE ATP 

 

 

 

 

 

 

[1CEC:1A74][2018-08-24T15:14:38]i001: Burn v3.11.0.1701, Windows v6.1 (Build 7601: Service Pack 1), path: C:\Users\~AGUTI~1\AppData\Local\Temp\{8FE602E4-C369-4C08-B978-3FF7FFC48C23}\.cr\Azure ATP Sensor Setup.exe
[1CEC:1A74][2018-08-24T15:14:38]i000: Initializing hidden variable 'AccessKey'
[1CEC:1A74][2018-08-24T15:14:38]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
[1CEC:1A74][2018-08-24T15:14:38]i009: Command Line: '"-burn.clean.room=C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe" -burn.filehandle.attached=204 -burn.filehandle.self=212'
[1CEC:1A74][2018-08-24T15:14:38]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe'
[1CEC:1A74][2018-08-24T15:14:38]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\'
[1CEC:1A74][2018-08-24T15:14:38]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438.log'
[1CEC:1A74][2018-08-24T15:14:38]i000: Setting string variable 'WixBundleName' to value 'Azure Advanced Threat Protection Sensor'
[1CEC:1A74][2018-08-24T15:14:38]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
[1CEC:1A74][2018-08-24T15:14:38]i000: Loading prerequisite bootstrapper application because managed host could not be loaded, error: 0x80131700.
[1CEC:2324][2018-08-24T15:14:39]i000: Setting numeric variable 'WixStdBALanguageId' to value 1033
[1CEC:2324][2018-08-24T15:14:39]i000: Setting version variable 'WixBundleFileVersion' to value '2.0.0.0'
[1CEC:1A74][2018-08-24T15:14:39]i100: Detect begin, 5 packages
[1CEC:1A74][2018-08-24T15:14:39]i000: Setting numeric variable 'Kb4019990Windows2008R2Exists' to value 1
[1CEC:1A74][2018-08-24T15:14:39]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'
[1CEC:1A74][2018-08-24T15:14:39]i000: Setting numeric variable 'Kb4019990Windows2012Exists' to value 0
[1CEC:1A74][2018-08-24T15:14:39]i000: Setting string variable 'NetFrameworkRegistryValue' to value '379893'
[1CEC:1A74][2018-08-24T15:14:39]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
[1CEC:1A74][2018-08-24T15:14:39]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
[1CEC:1A74][2018-08-24T15:14:39]i052: Condition 'Kb4019990Windows2008R2Exists' evaluates to true.
[1CEC:1A74][2018-08-24T15:14:39]i052: Condition 'Kb4019990Windows2012Exists' evaluates to false.
[1CEC:1A74][2018-08-24T15:14:39]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to false.
[1CEC:1A74][2018-08-24T15:14:39]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to false.
[1CEC:1A74][2018-08-24T15:14:39]i101: Detected package: Kb4019990Windows2008R2Package, state: Present, cached: None
[1CEC:1A74][2018-08-24T15:14:39]i101: Detected package: Kb4019990Windows2012Package, state: Absent, cached: None
[1CEC:1A74][2018-08-24T15:14:39]i101: Detected package: NetFrameworkPackageServer, state: Absent, cached: None
[1CEC:1A74][2018-08-24T15:14:39]i101: Detected package: NetFrameworkPackageServerCore, state: Absent, cached: None
[1CEC:1A74][2018-08-24T15:14:39]i101: Detected package: MsiPackage, state: Absent, cached: None
[1CEC:1A74][2018-08-24T15:14:39]i199: Detect complete, result: 0x0
[1CEC:1A74][2018-08-24T15:14:41]i200: Plan begin, 5 packages, action: Install
[1CEC:1A74][2018-08-24T15:14:41]i052: Condition 'VersionNT64 = v6.1' evaluates to true.
[1CEC:1A74][2018-08-24T15:14:41]i052: Condition 'VersionNT64 = v6.1' evaluates to true.
[1CEC:1A74][2018-08-24T15:14:41]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2008R2Package
[1CEC:1A74][2018-08-24T15:14:41]i052: Condition 'VersionNT64 = v6.2' evaluates to false.
[1CEC:1A74][2018-08-24T15:14:41]i052: Condition 'VersionNT64 = v6.2' evaluates to false.
[1CEC:1A74][2018-08-24T15:14:41]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2012Package
[1CEC:1A74][2018-08-24T15:14:41]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
[1CEC:1A74][2018-08-24T15:14:41]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
[1CEC:1A74][2018-08-24T15:14:41]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
[1CEC:1A74][2018-08-24T15:14:41]i000: Setting string variable 'NetFrameworkLogPath' to value 'C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438_000_NetFrameworkPackageServer.log'
[1CEC:1A74][2018-08-24T15:14:41]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
[1CEC:1A74][2018-08-24T15:14:41]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
[1CEC:1A74][2018-08-24T15:14:41]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
[1CEC:1A74][2018-08-24T15:14:41]i201: Planned package: Kb4019990Windows2008R2Package, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1CEC:1A74][2018-08-24T15:14:41]i201: Planned package: Kb4019990Windows2012Package, state: Absent, default requested: Absent, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1CEC:1A74][2018-08-24T15:14:41]i201: Planned package: NetFrameworkPackageServer, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: None, cache: Yes, uncache: No, dependency: None
[1CEC:1A74][2018-08-24T15:14:41]i201: Planned package: NetFrameworkPackageServerCore, state: Absent, default requested: Absent, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1CEC:1A74][2018-08-24T15:14:41]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[1CEC:1A74][2018-08-24T15:14:41]i299: Plan complete, result: 0x0
[1CEC:1A74][2018-08-24T15:14:41]i300: Apply begin
[1CEC:1A74][2018-08-24T15:14:41]i010: Launching elevated engine process.
[1CEC:1A74][2018-08-24T15:14:41]i011: Launched elevated engine process.
[1CEC:1A74][2018-08-24T15:14:42]i012: Connected to elevated engine.
[1CAC:21A8][2018-08-24T15:14:42]i358: Pausing automatic updates.
[1CAC:21A8][2018-08-24T15:14:42]i359: Paused automatic updates.
[1CAC:21A8][2018-08-24T15:14:42]i360: Creating a system restore point.
[1CAC:21A8][2018-08-24T15:14:42]i362: System restore disabled, system restore point not created.
[1CAC:21A8][2018-08-24T15:14:42]i370: Session begin, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{be78eaf0-acf4-4553-89be-9e85e2457915}, options: 0x7, disable resume: No
[1CAC:21A8][2018-08-24T15:14:42]i000: Caching bundle from: 'C:\Users\~AGUTI~1\AppData\Local\Temp\{8288E200-A8EA-4FA0-8AF9-E67477E64A3D}\.be\Azure ATP Sensor Setup.exe' to: 'C:\ProgramData\Package Cache\{be78eaf0-acf4-4553-89be-9e85e2457915}\Azure ATP Sensor Setup.exe'
[1CAC:21A8][2018-08-24T15:14:42]i320: Registering bundle dependency provider: {be78eaf0-acf4-4553-89be-9e85e2457915}, version: 2.0.0.0
[1CAC:21A8][2018-08-24T15:14:42]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{be78eaf0-acf4-4553-89be-9e85e2457915}, resume: Active, restart initiated: No, disable resume: No
[1CAC:1AD8][2018-08-24T15:14:42]i305: Verified acquired payload: NetFrameworkPackageServer at path: C:\ProgramData\Package Cache\.unverified\NetFrameworkPackageServer, moving to: C:\ProgramData\Package Cache\76054141A492BA307595250BDA05AD4E0694CDC3\NDP47-KB3186497-x86-x64-AllOS-ENU.exe.
[1CAC:21A8][2018-08-24T15:14:42]i301: Applying execute package: NetFrameworkPackageServer, action: Install, path: C:\ProgramData\Package Cache\76054141A492BA307595250BDA05AD4E0694CDC3\NDP47-KB3186497-x86-x64-AllOS-ENU.exe, arguments: '"C:\ProgramData\Package Cache\76054141A492BA307595250BDA05AD4E0694CDC3\NDP47-KB3186497-x86-x64-AllOS-ENU.exe" /passive /showrmui /norestart /ChainingPackage "Azure Advanced Threat Protection Sensor" /log "C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438_000_NetFrameworkPackageServer.log.html"'
[1CEC:1A74][2018-08-24T15:18:21]i319: Applied execute package: NetFrameworkPackageServer, result: 0x0, restart: Initiated
[1CAC:21A8][2018-08-24T15:18:21]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{be78eaf0-acf4-4553-89be-9e85e2457915}, resume: Reboot Pending, restart: Initiated, disable resume: No
[1CAC:21A8][2018-08-24T15:18:21]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{be78eaf0-acf4-4553-89be-9e85e2457915}, resume: Reboot Pending, restart initiated: Yes, disable resume: No
[1CEC:1A74][2018-08-24T15:18:21]i399: Apply complete, result: 0x0, restart: Initiated, ba requested restart: No
[1CEC:1A74][2018-08-24T15:20:50]i500: Shutting down, exit code: 0x669
[1CEC:1A74][2018-08-24T15:20:50]i000: The prerequisites scheduled a restart. The bootstrapper application will be reloaded after the computer is restarted.
[1CEC:1A74][2018-08-24T15:20:50]i004: Bootstrapper application requested restart at shutdown. Planned to restart already: No.
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: Kb4019990Windows2008R2Exists = 1
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: Kb4019990Windows2012Exists = 0
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: NetFrameworkLogPath = C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438_000_NetFrameworkPackageServer.log
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: NetFrameworkRegistryValue = 379893
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: VersionNT64 = 6.1.0.0
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleAction = 5
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleElevated = 1
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleFileVersion = 2.0.0.0
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleForcedRestartPackage = NetFrameworkPackageServer
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleLog = C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438.log
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleManufacturer = Microsoft Corporation
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleName = Azure Advanced Threat Protection Sensor
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleOriginalSource = C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleOriginalSourceFolder = C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleProviderKey = {be78eaf0-acf4-4553-89be-9e85e2457915}
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleSourceProcessFolder = C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleSourceProcessPath = C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleTag =
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleUILevel = 4
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixBundleVersion = 2.0.0.0
[1CEC:1A74][2018-08-24T15:20:50]i410: Variable: WixStdBALanguageId = 1033
[1CEC:1A74][2018-08-24T15:20:50]i007: Exit code: 0x669, restarting: Yes
[1CEC:1A74][2018-08-24T15:20:50]w005: Restarting computer...
=======================================
[16B0:16AC][2018-08-24T15:24:01]i001: Burn v3.11.0.1701, Windows v6.1 (Build 7601: Service Pack 1), path: C:\ProgramData\Package Cache\{be78eaf0-acf4-4553-89be-9e85e2457915}\Azure ATP Sensor Setup.exe
[16B0:16AC][2018-08-24T15:24:01]i000: Initializing hidden variable 'AccessKey'
[16B0:16AC][2018-08-24T15:24:01]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
[16B0:16AC][2018-08-24T15:24:01]i009: Command Line: '"-burn.clean.room=C:\ProgramData\Package Cache\{be78eaf0-acf4-4553-89be-9e85e2457915}\Azure ATP Sensor Setup.exe" -burn.filehandle.attached=204 -burn.filehandle.self=212 /burn.log.append "C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438.log"'
[16B0:16AC][2018-08-24T15:24:01]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438.log'
[16B0:16AC][2018-08-24T15:24:02]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
[16B0:16AC][2018-08-24T15:24:04]i000: Loading managed bootstrapper application.
[16B0:16AC][2018-08-24T15:24:08]i000: Creating BA thread to run asynchronously.
[16B0:16AC][2018-08-24T15:24:13]i100: Detect begin, 5 packages
[16B0:16AC][2018-08-24T15:24:13]i000: 2018-08-24 21:24:13.0254 Debug DeploymentModel DetectBegin [\[]Installed=False[\]]
[16B0:16AC][2018-08-24T15:24:13]i000: Setting numeric variable 'Kb4019990Windows2008R2Exists' to value 1
[16B0:16AC][2018-08-24T15:24:13]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'
[16B0:16AC][2018-08-24T15:24:13]i000: Setting numeric variable 'Kb4019990Windows2012Exists' to value 0
[16B0:16AC][2018-08-24T15:24:13]i000: Setting string variable 'NetFrameworkRegistryValue' to value '460805'
[16B0:16AC][2018-08-24T15:24:13]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
[16B0:16AC][2018-08-24T15:24:13]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
[16B0:16AC][2018-08-24T15:24:13]i052: Condition 'Kb4019990Windows2008R2Exists' evaluates to true.
[16B0:16AC][2018-08-24T15:24:13]i052: Condition 'Kb4019990Windows2012Exists' evaluates to false.
[16B0:16AC][2018-08-24T15:24:13]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[16B0:16AC][2018-08-24T15:24:13]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[16B0:16AC][2018-08-24T15:24:13]i101: Detected package: Kb4019990Windows2008R2Package, state: Present, cached: None
[16B0:16AC][2018-08-24T15:24:13]i101: Detected package: Kb4019990Windows2012Package, state: Absent, cached: None
[16B0:16AC][2018-08-24T15:24:13]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: Complete
[16B0:16AC][2018-08-24T15:24:13]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: Complete
[16B0:16AC][2018-08-24T15:24:13]i101: Detected package: MsiPackage, state: Absent, cached: None
[16B0:16AC][2018-08-24T15:24:13]i199: Detect complete, result: 0x0
[16B0:179C][2018-08-24T15:24:13]i000: 2018-08-24 21:24:13.1582 Debug DeploymentModel [\[]DeploymentAction=Install[\]]
[16B0:179C][2018-08-24T15:24:13]i000: 2018-08-24 21:24:13.5059 Debug DeploymentModel [\[]IsAfterRestartAndConfigured=False[\]]
[16B0:179C][2018-08-24T15:26:14]i000: 2018-08-24 21:26:14.7250 Info InteractiveDeploymentManager ValidateCreateSensorAsync returned [\[]validateCreateSensorResult=Success[\]]
[16B0:179C][2018-08-24T15:26:14]i000: Setting string variable 'IsConfigured' to value 'True'
[16B0:179C][2018-08-24T15:26:14]i000: Setting hidden variable 'AccessKey'
[16B0:179C][2018-08-24T15:26:14]i000: Setting string variable 'InstallationPath' to value 'C:\Program Files\Azure Advanced Threat Protection Sensor'
[16B0:16AC][2018-08-24T15:26:14]i200: Plan begin, 5 packages, action: Install
[16B0:16AC][2018-08-24T15:26:14]i052: Condition 'VersionNT64 = v6.1' evaluates to true.
[16B0:16AC][2018-08-24T15:26:14]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2008R2Package
[16B0:16AC][2018-08-24T15:26:14]i052: Condition 'VersionNT64 = v6.2' evaluates to false.
[16B0:16AC][2018-08-24T15:26:14]w321: Skipping dependency registration on package with no dependency providers: Kb4019990Windows2012Package
[16B0:16AC][2018-08-24T15:26:14]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
[16B0:16AC][2018-08-24T15:26:14]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
[16B0:16AC][2018-08-24T15:26:14]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
[16B0:16AC][2018-08-24T15:26:14]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
[16B0:16AC][2018-08-24T15:26:14]i000: Setting string variable 'WixBundleRollbackLog_MsiPackage' to value 'C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438_000_MsiPackage_rollback.log'
[16B0:16AC][2018-08-24T15:26:14]i000: Setting string variable 'WixBundleLog_MsiPackage' to value 'C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438_000_MsiPackage.log'
[16B0:16AC][2018-08-24T15:26:14]i201: Planned package: Kb4019990Windows2008R2Package, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[16B0:16AC][2018-08-24T15:26:14]i201: Planned package: Kb4019990Windows2012Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[16B0:16AC][2018-08-24T15:26:14]i201: Planned package: NetFrameworkPackageServer, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[16B0:16AC][2018-08-24T15:26:14]i201: Planned package: NetFrameworkPackageServerCore, state: Present, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
[16B0:16AC][2018-08-24T15:26:14]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
[16B0:16AC][2018-08-24T15:26:14]i299: Plan complete, result: 0x0
[16B0:16AC][2018-08-24T15:26:14]i300: Apply begin
[16B0:16AC][2018-08-24T15:26:14]i010: Launching elevated engine process.
[16B0:16AC][2018-08-24T15:26:14]i011: Launched elevated engine process.
[16B0:16AC][2018-08-24T15:26:15]i012: Connected to elevated engine.
[0680:17E4][2018-08-24T15:26:15]i358: Pausing automatic updates.
[0680:17E4][2018-08-24T15:26:15]i359: Paused automatic updates.
[0680:17E4][2018-08-24T15:26:15]i360: Creating a system restore point.
[0680:17E4][2018-08-24T15:26:15]i362: System restore disabled, system restore point not created.
[0680:17E4][2018-08-24T15:26:15]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{be78eaf0-acf4-4553-89be-9e85e2457915}, resume: Active, restart initiated: No, disable resume: No
[16B0:1480][2018-08-24T15:26:15]i336: Acquiring container: WixAttachedContainer, copy from: C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[16B0:1480][2018-08-24T15:26:15]i000: Setting string variable 'WixBundleLastUsedSource' to value 'C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\'
[0680:0C88][2018-08-24T15:26:15]i305: Verified acquired payload: MsiPackage at path: C:\ProgramData\Package Cache\.unverified\MsiPackage, moving to: C:\ProgramData\Package Cache\{6DF515FA-FB74-49E6-90FD-174E9C7D5751}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi.
[0680:17E4][2018-08-24T15:26:15]i323: Registering package dependency provider: {6DF515FA-FB74-49E6-90FD-174E9C7D5751}, version: 2.0.0.0, package: MsiPackage
[0680:17E4][2018-08-24T15:26:15]i301: Applying execute package: MsiPackage, action: Install, path: C:\ProgramData\Package Cache\{6DF515FA-FB74-49E6-90FD-174E9C7D5751}v2.0.0.0\Microsoft.Tri.Sensor.Deployment.Package.msi, arguments: ' ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7" ACCESSKEY="*****" InstallationPath="C:\Program Files\Azure Advanced Threat Protection Sensor" InstalledVersion="" WixBundleOriginalSourceFolder="C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\"'
[0680:17E4][2018-08-24T15:32:42]e000: Error 0x80070643: Failed to install MSI package.
[0680:17E4][2018-08-24T15:32:42]e000: Error 0x80070643: Failed to execute MSI package.
[16B0:16AC][2018-08-24T15:32:42]e000: Error 0x80070643: Failed to configure per-machine MSI package.
[16B0:16AC][2018-08-24T15:32:42]i000: 2018-08-24 21:32:42.7319 Error DeploymentProgress [\[]methodName=BootstrapperApplication_ExecutePackageComplete status=-2147023293 exception=[\]]
[16B0:16AC][2018-08-24T15:32:42]i319: Applied execute package: MsiPackage, result: 0x80070643, restart: None
[16B0:16AC][2018-08-24T15:32:42]e000: Error 0x80070643: Failed to execute MSI package.
[0680:17E4][2018-08-24T15:32:42]i318: Skipped rollback of package: MsiPackage, action: Uninstall, already: Absent
[16B0:16AC][2018-08-24T15:32:42]i319: Applied rollback package: MsiPackage, result: 0x0, restart: None
[0680:17E4][2018-08-24T15:32:42]i329: Removed package dependency provider: {6DF515FA-FB74-49E6-90FD-174E9C7D5751}, package: MsiPackage
[0680:17E4][2018-08-24T15:32:42]i351: Removing cached package: MsiPackage, from path: C:\ProgramData\Package Cache\{6DF515FA-FB74-49E6-90FD-174E9C7D5751}v2.0.0.0\
[0680:17E4][2018-08-24T15:32:42]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{be78eaf0-acf4-4553-89be-9e85e2457915}, resume: None, restart: None, disable resume: No
[0680:17E4][2018-08-24T15:32:42]i330: Removed bundle dependency provider: {be78eaf0-acf4-4553-89be-9e85e2457915}
[0680:17E4][2018-08-24T15:32:42]i352: Removing cached bundle: {be78eaf0-acf4-4553-89be-9e85e2457915}, from path: C:\ProgramData\Package Cache\{be78eaf0-acf4-4553-89be-9e85e2457915}\
[0680:17E4][2018-08-24T15:32:42]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{be78eaf0-acf4-4553-89be-9e85e2457915}, resume: None, restart initiated: No, disable resume: No
[16B0:16AC][2018-08-24T15:32:42]i399: Apply complete, result: 0x80070643, restart: None, ba requested restart: No
[16B0:179C][2018-08-24T15:35:53]i000: 2018-08-24 21:35:53.5496 Debug SensorBootstrapperApplication Engine.Quit [\[]deploymentResultStatus=-2147023293 isRestartRequired=False[\]]
[16B0:16AC][2018-08-24T15:35:53]i500: Shutting down, exit code: 0x80070643
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: AccessKey = *****
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: InstallationPath = C:\Program Files\Azure Advanced Threat Protection Sensor
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: IsConfigured = True
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: Kb4019990Windows2008R2Exists = 1
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: Kb4019990Windows2012Exists = 0
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: NetFrameworkRegistryValue = 460805
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: RebootPending = 0
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: VersionNT64 = 6.1.0.0
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleAction = 5
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleElevated = 1
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleLastUsedSource = C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleLog = C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438.log
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleLog_MsiPackage = C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438_000_MsiPackage.log
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleManufacturer = Microsoft Corporation
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleName = Azure Advanced Threat Protection Sensor
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleOriginalSource = C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\Azure ATP Sensor Setup.exe
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleOriginalSourceFolder = C:\Users\XXXXUSER\Desktop\share\Azure ATP Sensor Setup\
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleProviderKey = {be78eaf0-acf4-4553-89be-9e85e2457915}
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleRollbackLog_MsiPackage = C:\Users\~AGUTI~1\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20180824151438_000_MsiPackage_rollback.log
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleSourceProcessFolder = C:\ProgramData\Package Cache\{be78eaf0-acf4-4553-89be-9e85e2457915}\
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleSourceProcessPath = C:\ProgramData\Package Cache\{be78eaf0-acf4-4553-89be-9e85e2457915}\Azure ATP Sensor Setup.exe
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleTag =
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleUILevel = 4
[16B0:16AC][2018-08-24T15:35:53]i410: Variable: WixBundleVersion = 2.0.0.0
[16B0:16AC][2018-08-24T15:35:53]i007: Exit code: 0x80070643, restarting: No