none
Manual DPMAgentInstaller failed RRS feed

  • Question

  • When trying to install a DPM2010 agent on a Windows 2008 Standard SP2 (which is a DC) from the DPM Console, I receive the error:

    "Error 313: The agent operation failed because an error occurred while running the installation program on SERVER
    Error details: Fatal error during installation (0x80070643)
    Recommended action: Review the log files on SERVER: [windir]\temp\msdpm*.log and take appropriate action. Retry the operation, and if the error persists, restart the computer and then retry the operation again."

    I have tried turning off the firewall on the Windows 2008 server and manually installing the agent by mapping \\DPMSERVER\c$ locally to z:\   and running the  DPMAgentInstaller_x64.exe [SERVER]    command from the mapped drive.  The MSI appears to start installing but fails with the error:

    "DPMAgentInstaller failed with errorcode =0x80070643, error says: Fatal error during installation
    Check log files in [WINDIR]Temp\MSDPM*.LOG"

    I check the log and near the end I see this:

    MSI (s) (5C:C0) [10:11:59:489]: Note: 1: 1708
    MSI (s) (5C:C0) [10:11:59:489]: Note: 1: 2205 2:  3: Error
    MSI (s) (5C:C0) [10:11:59:489]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708
    MSI (s) (5C:C0) [10:11:59:489]: Note: 1: 2205 2:  3: Error
    MSI (s) (5C:C0) [10:11:59:489]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
    MSI (s) (5C:C0) [10:11:59:489]: Product: Microsoft System Center DPM Protection Agent -- Installation failed.

    MSI (s) (5C:C0) [10:11:59:489]: Windows Installer installed the product. Product Name: Microsoft System Center DPM Protection Agent. Product Version: 3.0.7696.0. Product Language: 1033. Installation success or error status: 1603.

     

    ANY help would be greatly appreciated!!

    Tuesday, July 27, 2010 3:36 PM

Answers

  • Hey,

    I assume that your DC is x64 and that you used the command DPMAgentInstaller_x64.exe DPMServer as that is the name of your DPMServer

    Could you try the following.  It is orginal for RODCs but it works for DC's as well

    1. Create and populate the following security groups on Primary domain
    controller: (Where $PSNAME is the name of RODC on which you are planning to
    install agent)
    a. Create DPMRADCOMTRUSTEDMACHINES$PSNAME  and add DPM server as a
    member
    b. Create DPMRADMTRUSTEDMACHINES$PSNAME and add DPM server as a member
    c. Add DPM server as a member of Builtin\Distributed com users group
    2. Ensure that above changes are replicated on to RODC
    3. Install agent on RODC
    4. Grant launch and activate permissions for DPM server on DPM RA service by
    doing the following:
    a. Run "dcomcnfg"
    b. Expand Component Services ->  Expand Computers -> Expand My
    Computer -> Expand DCOM Config
    c. Right click DPM RA Service and select Properties
    d. Under 'General', "Authentication Level - Default"
    e. Under 'Location', only "Run application on this computer" should be
    checked
    f. Under Security, verify that the "Launch and Activation Permissions"
    (select > "Edit") include the machine account for the DPM Server and Allow
    j. Click OK
    5. Copy setagentcfg.exe, traceprovider.dll and LKRhDPM.dll from "c:\Program
    Files\Microsoft DPM\DPM\setup" on DPM server and place them in "c:\Program
    Files\Microsoft DPM\DPM\setup" on RODC.
    6. Run "setagentcfg.exe a DPMRA domain\DPMserver"  on RODC using an elevated
    command prompt. (Run setagentcfg.exe from the location above i.e c:\Program
    Files\Microsoft DPM\DPM\setup)
    7. If  a firewall is enabled on RODC run the following commands:
    a. netsh advfirewall firewall set rule group="@FirewallAPI.dll,-29502"
    new enable=yes
    b. netsh advfirewall firewall set rule group="@FirewallAPI.dll,-34251"
    new enable=yes
    c. netsh advfirewall firewall add rule name=dpmra dir=in
    program="%PROGRAMFILES%\Microsoft Data Protection Manager\DPM\bin\DPMRA.exe"
    profile=Any action=allow
    d. netsh advfirewall firewall add rule name=DPMRA_DCOM_135 dir=in
    action=allow protocol=TCP localport=135 profile=Any
    8. Attach agent on DPM server, now you are ready to protect the RODC.
    Source: http://www.eggheadcafe.com/software/aspnet/35762891/dpm-2010-rc-agent-install.aspx

    Cheers,

    Mike


    Visit System Center User Group Belgium @ http://scug.be and http://scug.be/blogs/scdpm
    • Marked as answer by Eric_Feyrer Wednesday, July 28, 2010 7:50 PM
    Wednesday, July 28, 2010 7:00 AM
    Moderator

All replies

  • Hey,

    I assume that your DC is x64 and that you used the command DPMAgentInstaller_x64.exe DPMServer as that is the name of your DPMServer

    Could you try the following.  It is orginal for RODCs but it works for DC's as well

    1. Create and populate the following security groups on Primary domain
    controller: (Where $PSNAME is the name of RODC on which you are planning to
    install agent)
    a. Create DPMRADCOMTRUSTEDMACHINES$PSNAME  and add DPM server as a
    member
    b. Create DPMRADMTRUSTEDMACHINES$PSNAME and add DPM server as a member
    c. Add DPM server as a member of Builtin\Distributed com users group
    2. Ensure that above changes are replicated on to RODC
    3. Install agent on RODC
    4. Grant launch and activate permissions for DPM server on DPM RA service by
    doing the following:
    a. Run "dcomcnfg"
    b. Expand Component Services ->  Expand Computers -> Expand My
    Computer -> Expand DCOM Config
    c. Right click DPM RA Service and select Properties
    d. Under 'General', "Authentication Level - Default"
    e. Under 'Location', only "Run application on this computer" should be
    checked
    f. Under Security, verify that the "Launch and Activation Permissions"
    (select > "Edit") include the machine account for the DPM Server and Allow
    j. Click OK
    5. Copy setagentcfg.exe, traceprovider.dll and LKRhDPM.dll from "c:\Program
    Files\Microsoft DPM\DPM\setup" on DPM server and place them in "c:\Program
    Files\Microsoft DPM\DPM\setup" on RODC.
    6. Run "setagentcfg.exe a DPMRA domain\DPMserver"  on RODC using an elevated
    command prompt. (Run setagentcfg.exe from the location above i.e c:\Program
    Files\Microsoft DPM\DPM\setup)
    7. If  a firewall is enabled on RODC run the following commands:
    a. netsh advfirewall firewall set rule group="@FirewallAPI.dll,-29502"
    new enable=yes
    b. netsh advfirewall firewall set rule group="@FirewallAPI.dll,-34251"
    new enable=yes
    c. netsh advfirewall firewall add rule name=dpmra dir=in
    program="%PROGRAMFILES%\Microsoft Data Protection Manager\DPM\bin\DPMRA.exe"
    profile=Any action=allow
    d. netsh advfirewall firewall add rule name=DPMRA_DCOM_135 dir=in
    action=allow protocol=TCP localport=135 profile=Any
    8. Attach agent on DPM server, now you are ready to protect the RODC.
    Source: http://www.eggheadcafe.com/software/aspnet/35762891/dpm-2010-rc-agent-install.aspx

    Cheers,

    Mike


    Visit System Center User Group Belgium @ http://scug.be and http://scug.be/blogs/scdpm
    • Marked as answer by Eric_Feyrer Wednesday, July 28, 2010 7:50 PM
    Wednesday, July 28, 2010 7:00 AM
    Moderator
  • This solution did work for me. Thank you!
    Wednesday, July 28, 2010 7:50 PM
  • Points to note if you're installing DPM System Center 2012 R2 on a W2K8 RODC (W2K8R2 may be the same):

    • The path on the server for DPM System Center 2012 R2 is: \Program Files\Microsoft System Center 2012 R2\DPM
    • In step 3 the agent binaries suggested in other documentation (v4.2.1205.0) didn't work on the RODC OS version I was using. The suggested path was \Program Files\Microsoft System Center 2012 R2\DPM\DPM\ProtectionAgents\RA\4.2.1205.0\amd64. These did not work.
    • Following on from above I had to install the DPM agent from the following folder on the DPM server: \Program Files\Microsoft System Center 2012 R2\DPM\DPM\agents\RA\4.2.1217.0\amd64\1033. My particular agent binary was called DPMAgentInstaller_KB2904687_AMD64.exe.
    • In step 4h I had to manually create the Setup folder on the RODC, i.e. C:\Program Files\Microsoft Data Protection Manager\DPM\Setup
    • Again in step 4h, I had to manually copy an additional file from the DPM server to the RODC: NativeUtils.dll

    Hope that helps someone.
    Andy.


    • Edited by AndyChips Wednesday, March 5, 2014 7:59 AM Formatting
    Tuesday, March 4, 2014 3:45 PM