Issue with lightweight gateway upgrade from 1.7 to 1.8 0x80070643

All replies

• 

  

  0

  Sign in to vote

  Below is the MsiPackage Log Part2

  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: BindImage 
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: ProgId 
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: PublishComponent 
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: SelfReg 
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: Extension 
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: Font 
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: Shortcut 
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: Class 
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: Icon 
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: TypeLib 
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2727 2:  
  MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: FilesInUse 
  MSI (s) (70:68) [01:51:11:940]: Note: 1: 2727 2:  
  MSI (s) (70:68) [01:51:11:940]: Doing action: InstallInitialize
  MSI (s) (70:68) [01:51:11:940]: Note: 1: 2205 2:  3: ActionText 
  Action ended 1:51:11: InstallValidate. Return value 1.
  MSI (s) (70:68) [01:51:11:940]: Machine policy value 'AlwaysInstallElevated' is 0
  MSI (s) (70:68) [01:51:11:940]: User policy value 'AlwaysInstallElevated' is 0
  MSI (s) (70:68) [01:51:11:940]: BeginTransaction: Locking Server
  MSI (s) (70:68) [01:51:11:940]: SRSetRestorePoint skipped for this transaction.
  MSI (s) (70:68) [01:51:11:940]: Server not locked: locking for product {E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}
  Action start 1:51:11: InstallInitialize.
  MSI (s) (70:68) [01:51:12:002]: Skipping action: InstallInitializeCustomAction (condition is false)
  MSI (s) (70:68) [01:51:12:002]: Skipping action: UninstallInitializeCustomAction (condition is false)
  MSI (s) (70:68) [01:51:12:002]: Doing action: UpgradeInitializeCustomAction
  MSI (s) (70:68) [01:51:12:002]: Note: 1: 2205 2:  3: ActionText 
  Action ended 1:51:12: InstallInitialize. Return value 1.
  MSI (s) (70:9C) [01:51:12:096]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7640.tmp, Entrypoint: UpgradeInitialize
  MSI (s) (70:14) [01:51:12:096]: Generating random cookie.
  MSI (s) (70:14) [01:51:12:096]: Created Custom Action Server with PID 6156 (0x180C).
  MSI (s) (70:3C) [01:51:12:143]: Running as a service.
  MSI (s) (70:3C) [01:51:12:143]: Hello, I'm your 32bit Impersonated custom action server.
  Action start 1:51:12: UpgradeInitializeCustomAction.
  SFXCA: Extracting custom action to temporary directory: C:\Windows\Installer\MSI7640.tmp-\
  SFXCA: Binding to CLR version v4.0.30319
  Calling custom action Microsoft.Tri.Gateway.Deployment.Package.Actions!Microsoft.Tri.Gateway.Deployment.Package.Actions.CustomActions.UpgradeInitialize
  2017-09-19 13:51:17.2912 8764 1   Debug [CustomActions] UpgradeInitialize started
  Exception thrown by custom action:
  System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.ArgumentException: Version string portion was too short or too long.
     at System.Version.VersionResult.SetFailure(ParseFailureKind failure, String argument)
     at System.Version.TryParseVersion(String version, VersionResult& result)
     at System.Version.Parse(String input)
     at Microsoft.Tri.Gateway.Deployment.Package.Actions.CustomActions.UpgradeInitialize(Session session)
     --- End of inner exception stack trace ---
     at System.RuntimeMethodHandle.InvokeMethod(Object target, Object arguments, Signature sig, Boolean constructor)
     at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object parameters, Object arguments)
     at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object parameters, CultureInfo culture)
     at Microsoft.Deployment.WindowsInstaller.CustomActionProxy.InvokeCustomAction(Int32 sessionHandle, String entryPoint, IntPtr remotingDelegatePtr)
  CustomAction UpgradeInitializeCustomAction returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
  MSI (s) (70:68) [01:51:17:540]: Machine policy value 'DisableRollback' is 0
  MSI (s) (70:68) [01:51:17:540]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
  Action ended 1:51:17: UpgradeInitializeCustomAction. Return value 3.
  MSI (s) (70:68) [01:51:17:540]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
  MSI (s) (70:68) [01:51:17:540]: No System Restore sequence number for this installation.
  MSI (s) (70:68) [01:51:17:540]: Unlocking Server
  Action ended 1:51:17: INSTALL. Return value 3.
  Property(S): UpgradeCode = {4D47BEF4-D75A-4CE9-9CD0-B186E2811553}
  Property(S): InstallationPath = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\
  Property(S): dir32B6C64C429323C527E88AFC321E25B9 = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\de\
  Property(S): dir0D2522131EAB2F374B5A5BA75A8C42CE = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\es\
  Property(S): dirE0DD863C8526EB3FF6D2A3E935DEB67E = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\fr\
  Property(S): dir4F6D598E355BD4F87992B7AB3025C239 = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\ja\
  Property(S): dir1009F065F0C609D5631BDE3B00ACFDFB = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\
  Property(S): dir8E987C120ABBEA8ACB398CF5590BFA3E = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Extensions\
  Property(S): dir2592A87C52B655378D8BA172003D6E7F = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\
  Property(S): dirCFC8A01DC2448BE747F4ECDE74A3F17B = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\CoreNetworking\
  Property(S): dirF12008D78CFA7D7E4EFAA3A806ACBFEA = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Infrastructure\
  Property(S): dir74CE95EFB3C43F1AB556A48B4BF7E891 = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\MicrosoftCommon\
  Property(S): dirEF21B4F792C1CCB27E3D605C69B2AEC8 = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\FileSharing\
  Property(S): dir7B873B162C6E4DEA85F5C7971DA018D4 = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\IdentityAndSecurity\
  Property(S): dir1C8E4196106149B181C3DEFADAFE48CC = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\Others\
  Property(S): dirFB75C1011B230B385AA0DA5BBFADE7AC = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Public\
  Property(S): dirC14DFF180648E323983D75D39BF4178F = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\
  Property(S): dir1F6922A221973E1F2ECF6CB8CB25F97B = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\
  Property(S): INSTALLATIONPATH = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\
  Property(S): TARGETDIR = F:\
  Property(S): VersionNT = 601
  Property(S): ALLUSERS = 1
  Property(S): DataCollectorSetName = Microsoft ATA Gateway
  Property(S): DataCollectorSetPerformanceCounterCategoryNames = Microsoft ATA Gateway;Microsoft ATA Gateway Updater
  Property(S): DataCollectorSetProcessNames = Microsoft.Tri.Gateway;Microsoft.Tri.Gateway.Updater;lsass
  Property(S): Manufacturer = Microsoft Corporation
  Property(S): ProductCode = {E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}
  Property(S): ProductLanguage = 0
  Property(S): ProductName = Microsoft Advanced Threat Analytics Gateway
  Property(S): ProductVersion = 1.8.6765.36693
  Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED
  Property(S): MsiHiddenProperties = MANAGEMENTACCOUNTPASSWORD;SERVICEACCOUNTPASSWORD
  Property(S): WIX_UPGRADE_DETECTED = {17A474D5-9D32-4BD6-B838-87F2DD2380E8}
  Property(S): MsiLogFileLocation = C:\Users\xxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170920015027_003_MsiPackage.log
  Property(S): PackageCode = {939ED914-A55B-4C6D-B92E-4E7F52274F5C}
  Property(S): ProductState = -1
  Property(S): PackagecodeChanging = 1
  Property(S): ARPSYSTEMCOMPONENT = 1
  Property(S): MSIFASTINSTALL = 7
  Property(S): INSTALLATIONCONFIGURATIONFILEPATH = C:\Utils\ATA\\GatewayInstallationConfiguration.json
  Property(S): MANAGEMENTAUTHENTICATIONTOKEN = AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAAxmH5bd3HEOpcrqL8blA9gAAAAACAAAAAAAQZgAAAAEAACAAAAAv2nXmzznbWvvTwY2BYsEeWW9WAIbmskqAM9i6k2egrQAAAAAOgAAAAAIAACAAAADwQY1kBJ0SWYe_LGH6nr5zrgRx0N9CO172Ct4rxujtrcAAAAA2tmQja0MlWVF3YWBvmYtUgfIK0YiOyHdXnl_Rt0Dk6JHh2yejsCAE04-pSqitLaK0aEI5egTRZKsochdR-o_vWwqHIcyvRltCoWUxoY_qHMNHbsdLacuT23oe3os33wYBIu6Kyz-M3JR3bDCxhH6eQ954-DvPp6tiZ-KrzHU4OeBnXbOvL7OedmtJhiYhjUsStCpqvDNCSIKAddzoYkHDjIohr9NMMZbO8XcSpGbO4Xmm6HzZgCB7G9KTQTCn3H5AAAAAbiRw2cl2vlzuoYDD1ZqjI0px5RIntkm7vsQdfCW1xa-2NeCjB6Qgl9-TpLWqt5gQ_pFBnPDg2mMfzt9nfGCa5Q
  Property(S): REBOOT = ReallySuppress
  Property(S): CURRENTDIRECTORY = C:\Utils\ATA
  Property(S): CLIENTUILEVEL = 3
  Property(S): MSICLIENTUSESEXTERNALUI = 1
  Property(S): CLIENTPROCESSID = 9796
  Property(S): VersionDatabase = 500
  Property(S): VersionMsi = 5.00
  Property(S): VersionNT64 = 601
  Property(S): WindowsBuild = 7601
  Property(S): ServicePackLevel = 1
  Property(S): ServicePackLevelMinor = 0
  Property(S): MsiNTProductType = 2
  Property(S): WindowsFolder = C:\Windows\
  Property(S): WindowsVolume = C:\
  Property(S): System64Folder = C:\Windows\system32\
  Property(S): SystemFolder = C:\Windows\SysWOW64\
  Property(S): RemoteAdminTS = 1
  Property(S): TempFolder = C:\Users\xxxxx\AppData\Local\Temp\
  Property(S): ProgramFilesFolder = C:\Program Files (x86)\
  Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
  Property(S): ProgramFiles64Folder = C:\Program Files\
  Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
  Property(S): AppDataFolder = C:\Users\xxxxx\AppData\Roaming\
  Property(S): FavoritesFolder = C:\Users\xxxxx\Favorites\
  Property(S): NetHoodFolder = C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
  Property(S): PersonalFolder = C:\Users\xxxxx\Documents\
  Property(S): PrintHoodFolder = C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
  Property(S): RecentFolder = C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Recent\
  Property(S): SendToFolder = C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\SendTo\
  Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
  Property(S): CommonAppDataFolder = C:\ProgramData\
  Property(S): LocalAppDataFolder = C:\Users\xxxxx\AppData\Local\
  Property(S): MyPicturesFolder = C:\Users\xxxxx\Pictures\
  Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
  Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
  Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
  Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
  Property(S): DesktopFolder = C:\Users\Public\Desktop\
  Property(S): FontsFolder = C:\Windows\Fonts\
  Property(S): GPTSupport = 1
  Property(S): OLEAdvtSupport = 1
  Property(S): ShellAdvtSupport = 1
  Property(S): MsiAMD64 = 6
  Property(S): Msix64 = 6
  Property(S): Intel = 6
  Property(S): PhysicalMemory = 32768
  Property(S): VirtualMemory = 61132
  Property(S): AdminUser = 1
  Property(S): MsiTrueAdminUser = 1
  Property(S): LogonUser = xxxxx
  Property(S): UserSID = S-1-5-21-2091904384-3689332406-323980668-72582
  Property(S): UserLanguageID = 3081
  Property(S): ComputerName = AKLHQBMS03-ADM
  Property(S): SystemLanguageID = 3081
  Property(S): ScreenX = 1024
  Property(S): ScreenY = 768
  Property(S): CaptionHeight = 19
  Property(S): BorderTop = 1
  Property(S): BorderSide = 1
  Property(S): TextHeight = 16
  Property(S): TextInternalLeading = 3
  Property(S): ColorBits = 32
  Property(S): TTCSupport = 1
  Property(S): Time = 1:51:17
  Property(S): Date = 20/09/2017
  Property(S): MsiNetAssemblySupport = 4.6.1055.0
  Property(S): MsiWin32AssemblySupport = 6.1.7601.17514
  Property(S): RedirectedDllSupport = 2
  Property(S): MsiRunningElevated = 1
  Property(S): Privileged = 1
  Property(S): USERNAME = Fujitsu
  Property(S): COMPANYNAME = Fujitsu
  Property(S): DATABASE = C:\Windows\Installer\65384.msi
  Property(S): OriginalDatabase = C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi
  Property(S): UILevel = 2
  Property(S): MsiUISourceResOnly = 1
  Property(S): ACTION = INSTALL
  Property(S): MIGRATE = {17A474D5-9D32-4BD6-B838-87F2DD2380E8}
  Property(S): ROOTDRIVE = F:\
  Property(S): CostingComplete = 1
  Property(S): OutOfDiskSpace = 0
  Property(S): OutOfNoRbDiskSpace = 0
  Property(S): PrimaryVolumeSpaceAvailable = 0
  Property(S): PrimaryVolumeSpaceRequired = 0
  Property(S): PrimaryVolumeSpaceRemaining = 0
  Property(S): INSTALLLEVEL = 1
  MSI (s) (70:68) [01:51:17:572]: Note: 1: 1708 
  MSI (s) (70:68) [01:51:17:572]: Note: 1: 2205 2:  3: Error 
  MSI (s) (70:68) [01:51:17:572]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708 
  MSI (s) (70:68) [01:51:17:572]: Note: 1: 2205 2:  3: Error 
  MSI (s) (70:68) [01:51:17:572]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709 
  MSI (s) (70:68) [01:51:17:572]: Product: Microsoft Advanced Threat Analytics Gateway -- Installation failed.
  
  MSI (s) (70:68) [01:51:17:572]: Windows Installer installed the product. Product Name: Microsoft Advanced Threat Analytics Gateway. Product Version: 1.8.6765.36693. Product Language: 0. Manufacturer: Microsoft Corporation. Installation success or error status: 1603.
  
  MSI (s) (70:68) [01:51:17:572]: Deferring clean up of packages/files, if any exist
  MSI (s) (70:68) [01:51:17:572]: MainEngineThread is returning 1603
  MSI (s) (70:3C) [01:51:17:587]: RESTART MANAGER: Session closed.
  MSI (s) (70:3C) [01:51:17:587]: No System Restore sequence number for this installation.
  === Logging stopped: 20/09/2017  1:51:17 ===
  MSI (s) (70:3C) [01:51:17:587]: User policy value 'DisableRollback' is 0
  MSI (s) (70:3C) [01:51:17:587]: Machine policy value 'DisableRollback' is 0
  MSI (s) (70:3C) [01:51:17:587]: Incrementing counter to disable shutdown. Counter after increment: 0
  MSI (s) (70:3C) [01:51:17:587]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
  MSI (s) (70:3C) [01:51:17:587]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
  MSI (s) (70:3C) [01:51:17:587]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
  MSI (s) (70:3C) [01:51:17:587]: Restoring environment variables
  MSI (s) (70:3C) [01:51:17:587]: Destroying RemoteAPI object.
  MSI (s) (70:14) [01:51:17:587]: Custom Action Manager thread ending.
  MSI (c) (44:78) [01:51:17:587]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
  MSI (c) (44:78) [01:51:17:587]: MainEngineThread is returning 1603
  === Verbose logging stopped: 20/09/2017  1:51:17 ===
  
  

  
  

  Wednesday, September 20, 2017 12:24 AM
• 

  

  0

  Sign in to vote

  Hello,

  You may also check the log file "Microsoft Advanced Threat Analytics Gateway_YYYYMMDDHHMMSS.log" located at C:\Users\Administrator\AppData\Local\Temp directory. This log lists the steps in the process of the deployment of the ATA Gateway.

  Then, you may refer to the known issues for troubleshooting ATA.

  If it still doesn't help, I would recommend to request a support ticket with Microsoft CSS.

  Best regards,

  Andy Liu

  ---

  Please remember to mark the replies as answers if they help.
  If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

  Wednesday, September 27, 2017 7:20 AM
• 

  

  0

  Sign in to vote

  Hi Andy,

  Thank you for the reply unfortunately I couldn’t find anything obvious in that log to point to an error or in the known issues.

  The only real error I can find is:

  [2574:2520][2017-07-04T23:49:44]i000: 2017-07-04 11:49:44.5778 9588 5   Debug [\[]GatewayBootstrapperApplication[\]] Engine.Quit [\[]deploymentResultStatus=0 isRestartRequired=False[\]]

  Are you able to provide any pointers for this error failing that I will raise a case.

  Thank you,

  Chris

  Full Log for reference:

  [8434:6944][2017-07-04T23:06:07]i001: Burn v3.10.3.3007, Windows v6.1 (Build 7601: Service Pack 1), path: C:\Users\xxxxxx\AppData\Local\Temp\8\{F84FABA8-AE87-4886-A4A4-477DFAEA552C}\.cr\Microsoft ATA Gateway Setup.exe
  [8434:6944][2017-07-04T23:06:07]i000: Initializing string variable 'InstallationConfigurationFilePath' to value '[WixBundleOriginalSourceFolder]\GatewayInstallationConfiguration.json'
  [8434:6944][2017-07-04T23:06:07]i000: Initializing hidden variable 'ConsoleAccountPassword'
  [8434:6944][2017-07-04T23:06:07]i000: Initializing hidden variable 'ManagementAuthenticationToken'
  [8434:6944][2017-07-04T23:06:07]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
  [8434:6944][2017-07-04T23:06:07]i009: Command Line: '"-burn.clean.room=C:\Utils\ATA\Microsoft ATA Gateway Setup.exe" -burn.filehandle.attached=212 -burn.filehandle.self=220'
  [8434:6944][2017-07-04T23:06:07]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Utils\ATA\Microsoft ATA Gateway Setup.exe'
  [8434:6944][2017-07-04T23:06:07]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Utils\ATA\'
  [8434:6944][2017-07-04T23:06:09]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609.log'
  [8434:6944][2017-07-04T23:06:10]i000: Setting string variable 'WixBundleName' to value 'Microsoft Advanced Threat Analytics Gateway'
  [8434:6944][2017-07-04T23:06:10]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
  [8434:6944][2017-07-04T23:06:10]i000: Loading prerequisite bootstrapper application because managed host could not be loaded, error: 0x80131700.
  [8434:8790][2017-07-04T23:06:10]i000: Setting numeric variable 'WixStdBALanguageId' to value 1033
  [8434:8790][2017-07-04T23:06:10]i000: Setting version variable 'WixBundleFileVersion' to value '1.7.5757.57477'
  [8434:6944][2017-07-04T23:06:10]i100: Detect begin, 7 packages
  [8434:6944][2017-07-04T23:06:10]i000: Setting string variable 'NetFrameworkRegistryValue' to value '379893'
  [8434:6944][2017-07-04T23:06:10]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
  [8434:6944][2017-07-04T23:06:10]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
  [8434:6944][2017-07-04T23:06:10]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB3047154_RTM~31bf3856ad364e35~amd64~~6.3.2.0'
  [8434:6944][2017-07-04T23:06:10]i000: Setting numeric variable 'KB3047154Exists' to value 0
  [8434:6944][2017-07-04T23:06:10]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to false.
  [8434:6944][2017-07-04T23:06:10]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to false.
  [8434:6944][2017-07-04T23:06:10]i052: Condition 'KB3047154Exists' evaluates to false.
  [8434:6944][2017-07-04T23:06:10]i101: Detected package: NetFrameworkPackageServer, state: Absent, cached: None
  [8434:6944][2017-07-04T23:06:10]i101: Detected package: NetFrameworkPackageServerCore, state: Absent, cached: None
  [8434:6944][2017-07-04T23:06:10]i101: Detected package: KB3047154Package, state: Absent, cached: None
  [8434:6944][2017-07-04T23:06:10]i101: Detected package: VcRedistributable2013Package, state: Absent, cached: None
  [8434:6944][2017-07-04T23:06:10]i101: Detected package: PefNdisDriver, state: Absent, cached: None
  [8434:6944][2017-07-04T23:06:10]i101: Detected package: BundleActionsPackage, state: Absent, cached: None
  [8434:6944][2017-07-04T23:06:10]i101: Detected package: MsiPackage, state: Absent, cached: None
  [8434:6944][2017-07-04T23:06:10]i199: Detect complete, result: 0x0
  [8434:6944][2017-07-04T23:06:12]i200: Plan begin, 7 packages, action: Install
  [8434:6944][2017-07-04T23:06:12]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
  [8434:6944][2017-07-04T23:06:12]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
  [8434:6944][2017-07-04T23:06:12]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
  [8434:6944][2017-07-04T23:06:12]i000: Setting string variable 'NetFrameworkLogPath' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_000_NetFrameworkPackageServer.log'
  [8434:6944][2017-07-04T23:06:12]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
  [8434:6944][2017-07-04T23:06:12]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
  [8434:6944][2017-07-04T23:06:12]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
  [8434:6944][2017-07-04T23:06:12]i052: Condition 'VersionNT64 = v6.3 AND NTProductType <> 2' evaluates to false.
  [8434:6944][2017-07-04T23:06:12]w321: Skipping dependency registration on package with no dependency providers: KB3047154Package
  [8434:6944][2017-07-04T23:06:12]w321: Skipping dependency registration on package with no dependency providers: VcRedistributable2013Package
  [8434:6944][2017-07-04T23:06:12]i052: Condition 'VersionNT64 = v6.1 OR VersionNT64 = v6.2' evaluates to true.
  [8434:6944][2017-07-04T23:06:12]w321: Skipping dependency registration on package with no dependency providers: BundleActionsPackage
  [8434:6944][2017-07-04T23:06:12]i201: Planned package: NetFrameworkPackageServer, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: None, cache: Yes, uncache: No, dependency: None
  [8434:6944][2017-07-04T23:06:12]i201: Planned package: NetFrameworkPackageServerCore, state: Absent, default requested: Absent, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
  [8434:6944][2017-07-04T23:06:12]i201: Planned package: KB3047154Package, state: Absent, default requested: Absent, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
  [8434:6944][2017-07-04T23:06:12]i201: Planned package: VcRedistributable2013Package, state: Absent, default requested: Present, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
  [8434:6944][2017-07-04T23:06:12]i201: Planned package: PefNdisDriver, state: Absent, default requested: Present, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
  [8434:6944][2017-07-04T23:06:12]i201: Planned package: BundleActionsPackage, state: Absent, default requested: Present, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
  [8434:6944][2017-07-04T23:06:12]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
  [8434:6944][2017-07-04T23:06:12]i299: Plan complete, result: 0x0
  [8434:6944][2017-07-04T23:06:12]i300: Apply begin
  [8434:6944][2017-07-04T23:06:13]i010: Launching elevated engine process.
  [8434:6944][2017-07-04T23:06:18]i011: Launched elevated engine process.
  [8434:6944][2017-07-04T23:06:18]i012: Connected to elevated engine.
  [1A00:86C4][2017-07-04T23:06:18]i358: Pausing automatic updates.
  [1A00:86C4][2017-07-04T23:06:18]i359: Paused automatic updates.
  [1A00:86C4][2017-07-04T23:06:18]i360: Creating a system restore point.
  [1A00:86C4][2017-07-04T23:06:18]i362: System restore disabled, system restore point not created.
  [1A00:86C4][2017-07-04T23:06:18]i370: Session begin, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, options: 0x7, disable resume: No
  [1A00:86C4][2017-07-04T23:06:18]i000: Caching bundle from: 'C:\Users\xxxxxx\AppData\Local\Temp\8\{564F542B-DC43-4D7E-A4E1-75B81655FEE8}\.be\Microsoft ATA Gateway Setup.exe' to: 'C:\ProgramData\Package Cache\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}\Microsoft ATA Gateway Setup.exe'
  [1A00:86C4][2017-07-04T23:06:19]i320: Registering bundle dependency provider: {1073abb4-4e39-4b2b-b0bf-e98331eb0941}, version: 1.7.5757.57477
  [1A00:86C4][2017-07-04T23:06:19]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: Active, restart initiated: No, disable resume: No
  [1A00:3488][2017-07-04T23:06:20]i305: Verified acquired payload: NetFrameworkPackageServer at path: C:\ProgramData\Package Cache\.unverified\NetFrameworkPackageServer, moving to: C:\ProgramData\Package Cache\83D048D171FF44A3CAD9B422137656F585295866\NDP461-KB3102436-x86-x64-AllOS-ENU.exe.
  [1A00:86C4][2017-07-04T23:06:20]i301: Applying execute package: NetFrameworkPackageServer, action: Install, path: C:\ProgramData\Package Cache\83D048D171FF44A3CAD9B422137656F585295866\NDP461-KB3102436-x86-x64-AllOS-ENU.exe, arguments: '"C:\ProgramData\Package Cache\83D048D171FF44A3CAD9B422137656F585295866\NDP461-KB3102436-x86-x64-AllOS-ENU.exe" /passive /showrmui /norestart /ChainingPackage "Microsoft Advanced Threat Analytics Gateway" /log "C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_000_NetFrameworkPackageServer.log.html"'
  [8434:6944][2017-07-04T23:37:42]i319: Applied execute package: NetFrameworkPackageServer, result: 0x0, restart: Initiated
  [1A00:86C4][2017-07-04T23:37:42]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: Reboot Pending, restart: Initiated, disable resume: No
  [1A00:86C4][2017-07-04T23:37:42]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: Reboot Pending, restart initiated: Yes, disable resume: No
  [8434:6944][2017-07-04T23:37:43]i399: Apply complete, result: 0x0, restart: Initiated, ba requested restart:  No
  [8434:6944][2017-07-04T23:38:09]i500: Shutting down, exit code: 0x669
  [8434:6944][2017-07-04T23:38:09]i000: The prerequisites scheduled a restart. The bootstrapper application will be reloaded after the computer is restarted.
  [8434:6944][2017-07-04T23:38:09]i004: Bootstrapper application requested restart at shutdown. Planned to restart already: No.
  [8434:6944][2017-07-04T23:38:09]i410: Variable: InstallationConfigurationFilePath = C:\Utils\ATA\\GatewayInstallationConfiguration.json
  [8434:6944][2017-07-04T23:38:09]i410: Variable: KB3047154Exists = 0
  [8434:6944][2017-07-04T23:38:09]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
  [8434:6944][2017-07-04T23:38:09]i410: Variable: NetFrameworkLogPath = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_000_NetFrameworkPackageServer.log
  [8434:6944][2017-07-04T23:38:09]i410: Variable: NetFrameworkRegistryValue = 379893
  [8434:6944][2017-07-04T23:38:09]i410: Variable: NTProductType = 2
  [8434:6944][2017-07-04T23:38:09]i410: Variable: VersionNT64 = 6.1.0.0
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleAction = 5
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleElevated = 1
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleFileVersion = 1.7.5757.57477
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleForcedRestartPackage = NetFrameworkPackageServer
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleInstalled = 0
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleLog = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609.log
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleManufacturer = Microsoft Corporation
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleName = Microsoft Advanced Threat Analytics Gateway
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleOriginalSource = C:\Utils\ATA\Microsoft ATA Gateway Setup.exe
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleOriginalSourceFolder = C:\Utils\ATA\
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleProviderKey = {1073abb4-4e39-4b2b-b0bf-e98331eb0941}
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleSourceProcessFolder = C:\Utils\ATA\
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleSourceProcessPath = C:\Utils\ATA\Microsoft ATA Gateway Setup.exe
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleTag = 
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleVersion = 1.7.5757.57477
  [8434:6944][2017-07-04T23:38:09]i410: Variable: WixStdBALanguageId = 1033
  [8434:6944][2017-07-04T23:38:09]i007: Exit code: 0x669, restarting: Yes
  [8434:6944][2017-07-04T23:38:09]w005: Restarting computer...
  =======================================
  [2574:2578][2017-07-04T23:45:25]i001: Burn v3.10.3.3007, Windows v6.1 (Build 7601: Service Pack 1), path: C:\ProgramData\Package Cache\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}\Microsoft ATA Gateway Setup.exe
  [2574:2578][2017-07-04T23:45:25]i000: Initializing string variable 'InstallationConfigurationFilePath' to value '[WixBundleOriginalSourceFolder]\GatewayInstallationConfiguration.json'
  [2574:2578][2017-07-04T23:45:25]i000: Initializing hidden variable 'ConsoleAccountPassword'
  [2574:2578][2017-07-04T23:45:25]i000: Initializing hidden variable 'ManagementAuthenticationToken'
  [2574:2578][2017-07-04T23:45:25]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
  [2574:2578][2017-07-04T23:45:25]i009: Command Line: '"-burn.clean.room=C:\ProgramData\Package Cache\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}\Microsoft ATA Gateway Setup.exe" -burn.filehandle.attached=212 -burn.filehandle.self=220 /burn.log.append "C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609.log"'
  [2574:2578][2017-07-04T23:45:28]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609.log'
  [2574:2578][2017-07-04T23:45:28]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
  [2574:2578][2017-07-04T23:45:29]i000: Loading managed bootstrapper application.
  [2574:2578][2017-07-04T23:45:32]i000: Creating BA thread to run asynchronously.
  [2574:2578][2017-07-04T23:45:34]i100: Detect begin, 7 packages
  [2574:2578][2017-07-04T23:45:34]i000: 2017-07-04 11:45:34.9026 9588 1   Debug [\[]DeploymentModel[\]] DetectBegin [\[]Installed=False[\]]
  [2574:2578][2017-07-04T23:45:34]i000: Setting string variable 'NetFrameworkRegistryValue' to value '394271'
  [2574:2578][2017-07-04T23:45:34]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
  [2574:2578][2017-07-04T23:45:34]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
  [2574:2578][2017-07-04T23:45:34]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB3047154_RTM~31bf3856ad364e35~amd64~~6.3.2.0'
  [2574:2578][2017-07-04T23:45:34]i000: Setting numeric variable 'KB3047154Exists' to value 0
  [2574:2578][2017-07-04T23:45:34]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to true.
  [2574:2578][2017-07-04T23:45:34]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to true.
  [2574:2578][2017-07-04T23:45:34]i052: Condition 'KB3047154Exists' evaluates to false.
  [2574:2578][2017-07-04T23:45:34]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: Complete
  [2574:2578][2017-07-04T23:45:34]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: Complete
  [2574:2578][2017-07-04T23:45:34]i101: Detected package: KB3047154Package, state: Absent, cached: None
  [2574:2578][2017-07-04T23:45:34]i101: Detected package: VcRedistributable2013Package, state: Absent, cached: None
  [2574:2578][2017-07-04T23:45:34]i101: Detected package: PefNdisDriver, state: Absent, cached: None
  [2574:2578][2017-07-04T23:45:34]i101: Detected package: BundleActionsPackage, state: Absent, cached: None
  [2574:2578][2017-07-04T23:45:34]i101: Detected package: MsiPackage, state: Absent, cached: None
  [2574:2578][2017-07-04T23:45:34]i199: Detect complete, result: 0x0
  [2574:2520][2017-07-04T23:45:34]i000: 2017-07-04 11:45:34.9650 9588 5   Debug [\[]DeploymentModel[\]] [\[]DeploymentAction=Install[\]]
  [2574:2520][2017-07-04T23:45:35]i000: 2017-07-04 11:45:35.1990 9588 5   Debug [\[]DeploymentModel[\]] [\[]IsAfterRestartAndConfigured=False[\]]
  [2574:2520][2017-07-04T23:45:52]i000: Setting string variable 'IsConfigured' to value 'True'
  [2574:2520][2017-07-04T23:45:52]i000: Setting string variable 'InstallationPath' to value 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway'
  [2574:2520][2017-07-04T23:45:52]i000: Unsetting variable 'CertificateThumbprint'
  [2574:2520][2017-07-04T23:45:52]i000: Setting hidden variable 'ManagementAuthenticationToken'
  [2574:2520][2017-07-04T23:45:52]i000: Setting string variable 'BundleActionsConfiguration' to value 'ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A'
  [2574:2578][2017-07-04T23:45:52]i200: Plan begin, 7 packages, action: Install
  [2574:2578][2017-07-04T23:45:52]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
  [2574:2578][2017-07-04T23:45:52]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
  [2574:2578][2017-07-04T23:45:52]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
  [2574:2578][2017-07-04T23:45:52]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
  [2574:2578][2017-07-04T23:45:52]i052: Condition 'VersionNT64 = v6.3 AND NTProductType <> 2' evaluates to false.
  [2574:2578][2017-07-04T23:45:52]w321: Skipping dependency registration on package with no dependency providers: KB3047154Package
  [2574:2578][2017-07-04T23:45:52]w321: Skipping dependency registration on package with no dependency providers: VcRedistributable2013Package
  [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleLog_VcRedistributable2013Package' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_000_VcRedistributable2013Package.log'
  [2574:2578][2017-07-04T23:45:52]i052: Condition 'VersionNT64 = v6.1 OR VersionNT64 = v6.2' evaluates to true.
  [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleRollbackLog_PefNdisDriver' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_001_PefNdisDriver_rollback.log'
  [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleLog_PefNdisDriver' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_001_PefNdisDriver.log'
  [2574:2578][2017-07-04T23:45:52]w321: Skipping dependency registration on package with no dependency providers: BundleActionsPackage
  [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleLog_BundleActionsPackage' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_002_BundleActionsPackage.log'
  [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleRollbackLog_BundleActionsPackage' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_002_BundleActionsPackage_rollback.log'
  [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleRollbackLog_MsiPackage' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_003_MsiPackage_rollback.log'
  [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleLog_MsiPackage' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_003_MsiPackage.log'
  [2574:2578][2017-07-04T23:45:52]i201: Planned package: NetFrameworkPackageServer, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
  [2574:2578][2017-07-04T23:45:52]i201: Planned package: NetFrameworkPackageServerCore, state: Present, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
  [2574:2578][2017-07-04T23:45:52]i201: Planned package: KB3047154Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
  [2574:2578][2017-07-04T23:45:52]i201: Planned package: VcRedistributable2013Package, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: None, cache: Yes, uncache: No, dependency: None
  [2574:2578][2017-07-04T23:45:52]i201: Planned package: PefNdisDriver, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
  [2574:2578][2017-07-04T23:45:52]i201: Planned package: BundleActionsPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: None
  [2574:2578][2017-07-04T23:45:52]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
  [2574:2578][2017-07-04T23:45:52]i299: Plan complete, result: 0x0
  [2574:2578][2017-07-04T23:45:52]i300: Apply begin
  [2574:2578][2017-07-04T23:45:52]i010: Launching elevated engine process.
  [2574:2578][2017-07-04T23:45:52]i011: Launched elevated engine process.
  [2574:2578][2017-07-04T23:45:52]i012: Connected to elevated engine.
  [0324:10A8][2017-07-04T23:45:52]i358: Pausing automatic updates.
  [0324:10A8][2017-07-04T23:45:54]i359: Paused automatic updates.
  [0324:10A8][2017-07-04T23:45:54]i360: Creating a system restore point.
  [0324:10A8][2017-07-04T23:45:54]i362: System restore disabled, system restore point not created.
  [0324:10A8][2017-07-04T23:45:54]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: Active, restart initiated: No, disable resume: No
  [2574:2398][2017-07-04T23:45:55]i336: Acquiring container: WixAttachedContainer, copy from: C:\Utils\ATA\Microsoft ATA Gateway Setup.exe
  [2574:2398][2017-07-04T23:45:55]i000: Setting string variable 'WixBundleLastUsedSource' to value 'C:\Utils\ATA\'
  [0324:25A4][2017-07-04T23:45:56]i305: Verified acquired payload: VcRedistributable2013Package at path: C:\ProgramData\Package Cache\.unverified\VcRedistributable2013Package, moving to: C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe.
  [0324:25A4][2017-07-04T23:45:56]i305: Verified acquired payload: PefNdisDriver at path: C:\ProgramData\Package Cache\.unverified\PefNdisDriver, moving to: C:\ProgramData\Package Cache\{A80C7085-B5D8-421B-B27D-EB0FE8335996}v4.0.7541.0\PefNdisDriver.msi.
  [0324:25A4][2017-07-04T23:45:56]i305: Verified acquired payload: BundleActionsPackage at path: C:\ProgramData\Package Cache\.unverified\BundleActionsPackage, moving to: C:\ProgramData\Package Cache\1FD0DF859F6E8428D6B9FBE229775599E6A1DC39\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe.
  [0324:25A4][2017-07-04T23:45:57]i305: Verified acquired payload: MsiPackage at path: C:\ProgramData\Package Cache\.unverified\MsiPackage, moving to: C:\ProgramData\Package Cache\{17A474D5-9D32-4BD6-B838-87F2DD2380E8}v1.7.5757.57477\Microsoft.Tri.Gateway.Deployment.Package.msi.
  [0324:10A8][2017-07-04T23:45:57]i301: Applying execute package: VcRedistributable2013Package, action: Install, path: C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe, arguments: '"C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe" /quiet /norestart'
  [2574:2578][2017-07-04T23:45:59]i319: Applied execute package: VcRedistributable2013Package, result: 0x0, restart: None
  [0324:10A8][2017-07-04T23:45:59]i323: Registering package dependency provider: {A80C7085-B5D8-421B-B27D-EB0FE8335996}, version: 4.0.7541.0, package: PefNdisDriver
  [0324:10A8][2017-07-04T23:45:59]i301: Applying execute package: PefNdisDriver, action: Install, path: C:\ProgramData\Package Cache\{A80C7085-B5D8-421B-B27D-EB0FE8335996}v4.0.7541.0\PefNdisDriver.msi, arguments: ' ALLUSERS="1" ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7"'
  [2574:2578][2017-07-04T23:46:05]i319: Applied execute package: PefNdisDriver, result: 0x0, restart: None
  [0324:10A8][2017-07-04T23:46:05]i325: Registering dependency: {1073abb4-4e39-4b2b-b0bf-e98331eb0941} on package provider: {A80C7085-B5D8-421B-B27D-EB0FE8335996}, package: PefNdisDriver
  [0324:10A8][2017-07-04T23:46:05]i301: Applying execute package: BundleActionsPackage, action: Install, path: C:\ProgramData\Package Cache\1FD0DF859F6E8428D6B9FBE229775599E6A1DC39\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe, arguments: '"C:\ProgramData\Package Cache\1FD0DF859F6E8428D6B9FBE229775599E6A1DC39\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe" Configuration="ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A" LogPath="C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_002_BundleActionsPackage.log"'
  [2574:2578][2017-07-04T23:46:08]i319: Applied execute package: BundleActionsPackage, result: 0x0, restart: None
  [0324:10A8][2017-07-04T23:46:08]i323: Registering package dependency provider: {17A474D5-9D32-4BD6-B838-87F2DD2380E8}, version: 1.7.5757.57477, package: MsiPackage
  [0324:10A8][2017-07-04T23:46:08]i301: Applying execute package: MsiPackage, action: Install, path: C:\ProgramData\Package Cache\{17A474D5-9D32-4BD6-B838-87F2DD2380E8}v1.7.5757.57477\Microsoft.Tri.Gateway.Deployment.Package.msi, arguments: ' ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7" InstalledVersion="" InstallationConfigurationFilePath="C:\Utils\ATA\\GatewayInstallationConfiguration.json" InstallationPath="C:\Program Files\Microsoft Advanced Threat Analytics\Gateway" CertificateThumbprint="" ManagementAuthenticationToken="*****"'
  [2574:2578][2017-07-04T23:47:43]i319: Applied execute package: MsiPackage, result: 0x0, restart: None
  [0324:10A8][2017-07-04T23:47:43]i325: Registering dependency: {1073abb4-4e39-4b2b-b0bf-e98331eb0941} on package provider: {17A474D5-9D32-4BD6-B838-87F2DD2380E8}, package: MsiPackage
  [0324:10A8][2017-07-04T23:47:43]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: ARP, restart: None, disable resume: No
  [0324:10A8][2017-07-04T23:47:43]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: ARP, restart initiated: No, disable resume: No
  [2574:2578][2017-07-04T23:47:43]i399: Apply complete, result: 0x0, restart: None, ba requested restart:  No
  [2574:2520][2017-07-04T23:49:44]i000: 2017-07-04 11:49:44.5778 9588 5   Debug [\[]GatewayBootstrapperApplication[\]] Engine.Quit [\[]deploymentResultStatus=0 isRestartRequired=False[\]]
  [2574:2578][2017-07-04T23:49:44]i500: Shutting down, exit code: 0x0
  [2574:2578][2017-07-04T23:49:44]i410: Variable: BundleActionsConfiguration = ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A
  [2574:2578][2017-07-04T23:49:44]i410: Variable: InstallationConfigurationFilePath = C:\Utils\ATA\\GatewayInstallationConfiguration.json
  [2574:2578][2017-07-04T23:49:44]i410: Variable: InstallationPath = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway
  [2574:2578][2017-07-04T23:49:44]i410: Variable: IsConfigured = True
  [2574:2578][2017-07-04T23:49:44]i410: Variable: KB3047154Exists = 0
  [2574:2578][2017-07-04T23:49:44]i410: Variable: ManagementAuthenticationToken = *****
  [2574:2578][2017-07-04T23:49:44]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
  [2574:2578][2017-07-04T23:49:44]i410: Variable: NetFrameworkRegistryValue = 394271
  [2574:2578][2017-07-04T23:49:44]i410: Variable: NTProductType = 2
  [2574:2578][2017-07-04T23:49:44]i410: Variable: VersionNT64 = 6.1.0.0
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleAction = 5
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleElevated = 1
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLastUsedSource = C:\Utils\ATA\
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLog = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609.log
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLog_BundleActionsPackage = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_002_BundleActionsPackage.log
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLog_MsiPackage = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_003_MsiPackage.log
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLog_PefNdisDriver = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_001_PefNdisDriver.log
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLog_VcRedistributable2013Package = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_000_VcRedistributable2013Package.log
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleManufacturer = Microsoft Corporation
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleName = Microsoft Advanced Threat Analytics Gateway
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleOriginalSource = C:\Utils\ATA\Microsoft ATA Gateway Setup.exe
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleOriginalSourceFolder = C:\Utils\ATA\
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleProviderKey = {1073abb4-4e39-4b2b-b0bf-e98331eb0941}
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleRollbackLog_BundleActionsPackage = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_002_BundleActionsPackage_rollback.log
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleRollbackLog_MsiPackage = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_003_MsiPackage_rollback.log
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleRollbackLog_PefNdisDriver = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_001_PefNdisDriver_rollback.log
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleSourceProcessFolder = C:\ProgramData\Package Cache\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}\
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleSourceProcessPath = C:\ProgramData\Package Cache\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}\Microsoft ATA Gateway Setup.exe
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleTag = 
  [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleVersion = 1.7.5757.57477
  [2574:2578][2017-07-04T23:49:46]i007: Exit code: 0x0, restarting: No
  

  
  

  
  

  Thursday, September 28, 2017 5:02 AM