Re: Software install failing

From: Darren Mar-Elia (dmanonymous_at_discussions.microsoft.com)
Date: 11/09/04


Date: Tue, 9 Nov 2004 08:38:53 -0800

Rob-
Going back to your previous response--rats! Sorry, I meant Computer
Configuration|Admin Templates|Windows Components|Windows Installer|Logging.
That logging will likely be much more verbose than appmgmt.log. Error 5 is
an Access Denied error. It could mean that the permissions on the share
where the MSI is are inaccessible to the user.

-- 
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
"Rob Oldfield" <sfsd@sdfsdf.sdfs> wrote in message 
news:%23Hx9R8kxEHA.3624@TK2MSFTNGP09.phx.gbl...
> OK.  Managed to figure out how to turn the logging on from here
> http://support.microsoft.com/?kbid=246509
>
> appmgmt.log is showing nothing useful....
>
> "The following 4 managed applications are currently applied to this user.
>    UTMSetup (2) from policy Cut with state 511 and assign count 1.
>    trafficSetup from policy traffic with state 511 and assign count 1.
>    ADMOutputSetup from policy ADMOutput with state 511 and assign count 1.
>    FeeShape from policy FeeShapes with state 511 and assign count 1.
> Found 0 applications locally that are not included in the set of
> applications from the Active Directory.
> Failed to apply changes to software installation settings.  Software 
> changes
> could not be applied.  A previous log entry with details should exist. 
> The
> error was %5.
>
> Software installation extension returning with final error code 5."
>
> but userenv.log is more interesting....multiple repeats of the following
> lines....
>
> "USERENV(5d0.5d8) 09:18:37:340 LoadUserProfile: Failed to impersonate user
> with 5.
> USERENV(a8.cc) 09:20:14:392 ProcessGPOs: Extension Application Management
> ProcessGroupPolicy failed, status 0x5."
>
> I have of course tried searching for these errors but haven't found 
> anything
> useful.
>
>
>
> "Darren Mar-Elia" <dmanonymous@discussions.microsoft.com> wrote in message
> news:umnAFodxEHA.1452@TK2MSFTNGP09.phx.gbl...
>> I wonder why the install is trying to write a folder under c:\winnt then?
>> One thing you might want to try is to enable verbose Windows Installer
>> logging and see what errors are getting thrown. You can enable it using
> the
>> policy User Configuration|Administrative Templates|Windows
>> Components|Windows Installer|Logging. It will write a log file called
>> msi*.log to the user's %temp% folder for each install that is run. In
> there,
>> you should get a detailed picture of which file create is failing.
>>
>> -- 
>> Darren Mar-Elia
>> MS-MVP-Windows Server--Group Policy
>> Check out http://www.gpoguy.com -- The Windows Group Policy Information
> Hub:
>> FAQs, Whitepapers and Utilities for all things Group Policy-related
>>
>>
>>
>> "Rob Oldfield" <blah@blah.com> wrote in message
>> news:%23sjDY4cxEHA.4044@tk2msftngp13.phx.gbl...
>> > The permissions seem to be the same.  machine\users have Read & 
>> > Execute,
>> > Read and List Folder Contents rights.  And yes, the installation is 
>> > user
>> > based.
>> >
>> > "Darren Mar-Elia" <dmanonymous@discussions.microsoft.com> wrote in
> message
>> > news:OUJ0BncxEHA.2624@TK2MSFTNGP11.phx.gbl...
>> >> Rob-
>> >> I suspect it is a permissions issue, where that folder under winnt is
>> > trying
>> >> get created during install but the user has insufficient privileges to
>> >> create and write to that folder. I take it you are using user-based
>> > software
>> >> installation rather than machine-based? Can you compare permissions on
>> > this
>> >> machine vs. one that is working and just set them equivalent?
>> >>
>> >> -- 
>> >> Darren Mar-Elia
>> >> MS-MVP-Windows Server--Group Policy
>> >> Check out http://www.gpoguy.com -- The Windows Group Policy 
>> >> Information
>> > Hub:
>> >> FAQs, Whitepapers and Utilities for all things Group Policy-related
>> >>
>> >>
>> >>
>> >> "Rob Oldfield" <blah@blah.com> wrote in message
>> >> news:ej8KrKcxEHA.1188@tk2msftngp13.phx.gbl...
>> >> >I use GPOs to roll out software in msi files.  Generally works very
> well
>> >> >but
>> >> > I currently have one user who it's not working for.  No real error
>> > message
>> >> > in his event log when it fails... just 'it failed'.
>> >> >
>> >> > The particular machine (Win 2K) that he uses was originally
> mistakenly
>> >> > formatted as FAT and I think the failures have started since I
>> >> > converted
>> >> > it
>> >> > to NTFS.  I've switched auditing on the machine for file access
>> >> > permissions
>> >> > being denied and that shows a failure to read
> c:\winnt\4RTFTG6GHTYU653
>> >> > type
>> >> > folders.  He has read permissions on c:\winnt and if I create a new
>> > folder
>> >> > in there then he also inherits the read rights.  If I push him up to
> be
>> > a
>> >> > domain admin then the installations succeed.
>> >> >
>> >> > Any ideas?
>> >> >
>> >> >
>> >> >
>> >>
>> >>
>> >
>> >
>>
>>
>
> 


Relevant Pages

  • Re: Trouble with Win2003 Folder Redirection Policy
    ... giving NTFS permissions to that group. ... From what information you've given me the policy is correct as long as ... The user's home folder in the profile section of the AD has been ... updated to the new server as well. ...
    (microsoft.public.windows.server.general)
  • Re: recurring 1058/1030 USERENV events every 5 mins
    ... This posting is provided "AS IS" with no warranties, ... The policy causing the 1058 messages ... permissions either so surely if this was the issue the messages ... Root folder is the highest folder so "windows" ...
    (microsoft.public.windows.server.general)
  • Re: recurring 1058/1030 USERENV events every 5 mins
    ... permissions either so surely if this was the issue the messages would ... Root folder is the highest folder so "windows" ... Default Domain Policy and is one i have customised over time. ... Also one of the articles mentions permissions for the "everyone" ...
    (microsoft.public.windows.server.general)
  • Re: Software Deployment
    ... The install Share and File permissions must be readable ... by the "assignee" ... In my software distribution folder, do I have to have Everyone ... >>> I have the folder set in the Software Installation properties, ...
    (microsoft.public.win2000.active_directory)
  • Re: Software install failing
    ... The permissions seem to be the same. ... Read and List Folder Contents rights. ... And yes, the installation is user ...
    (microsoft.public.win2000.group_policy)

Loading