Errors During Re-deployment (Full Version)

All Forums >> [Network Security] >> GFI EndPointSecurity



Message

KevinBrown -> Errors During Re-deployment (14.Jul.2008 11:27:11 AM)

Hi I am rolling out the latest client to my users and some machines come back with a "Failed Deployment" message in the manager. The Event viewer on ther PC's shows two messages...

-------------------
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date:  14/07/2008
Time:  15:06:48
User:  N/A
Computer: RDC-PC-14
Description:
Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: 502 (HTTP Response Status)
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
-------------------

Followed By...

-------------------
Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 11316
Date:  14/07/2008
Time:  15:06:52
User:  NT AUTHORITY\SYSTEM
Computer: RDC-PC-14
Description:
Product: GFI EndPointSecurity 4.0 Agent -- Error 1316. A network error occurred while attempting to read from the file: C:\WINDOWS\EndPointSecurity\EndpointSecurityAgntWorkstations.msi
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7b 39 32 37 44 38 46 39   {927D8F9
0008: 30 2d 41 43 37 44 2d 34   0-AC7D-4
0010: 39 35 42 2d 42 36 39 36   95B-B696
0018: 2d 37 30 32 42 44 41 44   -702BDAD
0020: 38 45 44 37 43 7d         8ED7C}

-------------------------------
The following excerpt from C:\Windows\EndpointSecurity\ESEC_v4_AgentInstallMSI.log indicates a permissions problem with the installer folder - there is > 64Gb disk space free.
----------------------------

MSI (s) (04:D4) [16:09:53:375]: Resolving source.
MSI (s) (04:D4) [16:09:53:375]: Resolving source to launched-from source.
MSI (s) (04:D4) [16:09:53:375]: Setting launched-from source as last-used.
MSI (s) (04:D4) [16:09:53:375]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\WINDOWS\EndPointSecurity\'.
MSI (s) (04:D4) [16:09:53:375]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\WINDOWS\EndPointSecurity\'.
MSI (s) (04:D4) [16:09:53:375]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{927D8F90-AC7D-495B-B696-702BDAD8ED7C}'.
MSI (s) (04:D4) [16:09:53:375]: SOURCEDIR ==> C:\WINDOWS\EndPointSecurity\
MSI (s) (04:D4) [16:09:53:375]: SOURCEDIR product ==> {927D8F90-AC7D-495B-B696-702BDAD8ED7C}
MSI (s) (04:D4) [16:09:53:375]: Determining source type
MSI (s) (04:D4) [16:09:53:375]: Note: 1: 2203 2: C:\WINDOWS\EndPointSecurity\EndpointSecurityAgntWorkstations.msi 3: -2147287038
MSI (s) (04:D4) [16:09:53:375]: Note: 1: 1316 2: C:\WINDOWS\EndPointSecurity\EndpointSecurityAgntWorkstations.msi
MSI (s) (04:D4) [16:09:53:375]: Product: GFI EndPointSecurity 4.0 Agent -- Error 1316. A network error occurred while attempting to read from the file: C:\WINDOWS\EndPointSecurity\EndpointSecurityAgntWorkstations.msi
Error 1316. A network error occurred while attempting to read from the file: C:\WINDOWS\EndPointSecurity\EndpointSecurityAgntWorkstations.msi
MSI (s) (04:D4) [16:09:53:375]: Machine policy value 'DisableRollback' is 0
MSI (s) (04:D4) [16:09:53:375]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
Action ended 16:09:53: RegisterProduct. Return value 3.
MSI (s) (04:D4) [16:09:53:390]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (04:D4) [16:09:53:390]: No System Restore sequence number for this installation.
MSI (s) (04:D4) [16:09:53:390]: Unlocking Server
Action ended 16:09:53: INSTALL. Return value 3.

--------------------------------------------------
Monitoring the C:\WINDOWS\Endpoint Security folder shows all the files created correctly before they are deleted again.

Any help with this would be welcome. I am rolling out the latest client and XP is patched all the way to (but not including) SP3. Users local control of the PC is restricted with group policy. 



DrewE -> RE: Errors During Re-deployment (15.Jul.2008 2:23:25 PM)

Most issues with agent deployment will need to be addressed individually with our technical support department.  After reviewing the logs, I cannot think of anything off hand that could quickly address this situation.  You may have some success with disabling any client level anti-virus solutions, as well as trying to remove / delete the agent from the protection policy, deploy the changes, then re-deploy the agent.



Page: [1]