We have just migrated to new Server 2022 Core DCs. Identity was setup and working on old DCs fine, but we are getting this error when it installs. We have added the new DCs to the Msa Service Group.
We have configured the new DCs with the MSFT Security Baseline GPO for DCs, but we did this on a another domain and we didn't have issues installing the sensor.
Any ideas? This is the output from the MSIPackage log
MSI (s) (28:D8) [10:20:27:424]: Hello, I'm your 64bit Impersonated custom action server.
Action start 10:20:27: InstallCustomAction.
SFXCA: Extracting custom action to temporary directory: C:\Windows\Installer\MSIC4DE.tmp-\
SFXCA: Binding to CLR version v4.0.30319
Calling custom action Microsoft.Tri.Sensor.Deployment.Package.Actions!Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions.Install
Error: could not load custom action class Microsoft.Tri.Sensor.Deployment.Package.Actions.CustomActions from assembly: Microsoft.Tri.Sensor.Deployment.Package.Actions
System.IO.FileLoadException: Could not load file or assembly 'Microsoft.Tri.Sensor.Deployment.Package.Actions' or one of its dependencies. Access is denied.
File name: 'Microsoft.Tri.Sensor.Deployment.Package.Actions'
at System.Reflection.RuntimeAssembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, RuntimeAssembly locationHint, StackCrawlMark& stackMark, IntPtr pPrivHostBinder, Boolean throwOnFileNotFound, Boolean forIntrospection, Boolean suppressSecurityChecks)
at System.Reflection.RuntimeAssembly.InternalLoadAssemblyName(AssemblyName assemblyRef, Evidence assemblySecurity, RuntimeAssembly reqAssembly, StackCrawlMark& stackMark, IntPtr pPrivHostBinder, Boolean throwOnFileNotFound, Boolean forIntrospection, Boolean suppressSecurityChecks)
at System.Reflection.RuntimeAssembly.InternalLoad(String assemblyString, Evidence assemblySecurity, StackCrawlMark& stackMark, IntPtr pPrivHostBinder, Boolean forIntrospection)
at System.Reflection.RuntimeAssembly.InternalLoad(String assemblyString, Evidence assemblySecurity, StackCrawlMark& stackMark, Boolean forIntrospection)
at System.AppDomain.Load(String assemblyString)
at Microsoft.Deployment.WindowsInstaller.CustomActionProxy.GetCustomActionMethod(Session session, String assemblyName, String className, String methodName)
WRN: Assembly binding logging is turned OFF.
To enable assembly bind failure logging, set the registry value (DWORD) to 1.
Note: There is some performance penalty associated with assembly bind failure logging.
To turn this feature off, remove the registry value .
CustomAction InstallCustomAction returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Using this command to install the sensor .\"Azure ATP sensor Setup.exe" /quiet NetFrameworkCommandLineArguments="/q" AccessKey=""
