locked
Issue with lightweight gateway upgrade from 1.7 to 1.8 0x80070643 RRS feed

  • Question

  • Hi we upgraded our ATA Center from 1.7 to 1.8 successfully and push the gateway update out to all endpoints, unfortunately all but one DC upgraded. It was showing as disabled on the ATA Center Console. We were unable to manually start the service on the DC and noted that it was disabled there as well.

    We attempted to manually update the client to 1.8 however this failed. The ATA lightweight gateway was then un-installed and the server rebooted.

    Subsequent attempts to install the 1.8 ATA gateway have failed, initially due to the installer seeing that the target directory is still present. Once this was renamed the installer then fails with error code 0x80070643.

    Any assistance is greatly appreciated.

    Below is the MsiPackage Log Part1

    === Verbose logging started: 20/09/2017  1:51:11  Build type: SHIP UNICODE 5.00.7601.00  Calling process: C:\Users\xxxxxx\AppData\Local\Temp\2\{D1F7E603-D19D-4DC3-940C-4A8C8E6D80A2}\.be\Microsoft ATA Gateway Setup.exe ===
    MSI (c) (44:78) [01:51:11:316]: Resetting cached policy values
    MSI (c) (44:78) [01:51:11:316]: Machine policy value 'Debug' is 0
    MSI (c) (44:78) [01:51:11:316]: ******* RunEngine:
               ******* Product: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi
               ******* Action: 
               ******* CommandLine: **********
    MSI (c) (44:78) [01:51:11:316]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (44:78) [01:51:11:316]: Grabbed execution mutex.
    MSI (c) (44:78) [01:51:11:316]: Cloaking enabled.
    MSI (c) (44:78) [01:51:11:316]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (44:78) [01:51:11:316]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (70:3C) [01:51:11:331]: Running installation inside multi-package transaction C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi
    MSI (s) (70:3C) [01:51:11:331]: Grabbed execution mutex.
    MSI (s) (70:68) [01:51:11:331]: Resetting cached policy values
    MSI (s) (70:68) [01:51:11:331]: Machine policy value 'Debug' is 0
    MSI (s) (70:68) [01:51:11:331]: ******* RunEngine:
               ******* Product: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi
               ******* Action: 
               ******* CommandLine: **********
    MSI (s) (70:68) [01:51:11:331]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (70:68) [01:51:11:331]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (70:68) [01:51:11:331]: File will have security applied from OpCode.
    MSI (s) (70:68) [01:51:11:378]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi' against software restriction policy
    MSI (s) (70:68) [01:51:11:378]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi has a digital signature
    MSI (s) (70:68) [01:51:11:799]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi is permitted to run at the 'unrestricted' authorization level.
    MSI (s) (70:68) [01:51:11:799]: End dialog not enabled
    MSI (s) (70:68) [01:51:11:799]: Original package ==> C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi
    MSI (s) (70:68) [01:51:11:799]: Package we're running from ==> C:\Windows\Installer\65384.msi
    MSI (s) (70:68) [01:51:11:799]: APPCOMPAT: Compatibility mode property overrides found.
    MSI (s) (70:68) [01:51:11:799]: APPCOMPAT: looking for appcompat database entry with ProductCode '{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}'.
    MSI (s) (70:68) [01:51:11:799]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (70:68) [01:51:11:799]: MSCOREE not loaded loading copy from system32
    MSI (s) (70:68) [01:51:11:799]: Machine policy value 'TransformsSecure' is 1
    MSI (s) (70:68) [01:51:11:799]: Machine policy value 'DisablePatch' is 0
    MSI (s) (70:68) [01:51:11:799]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (70:68) [01:51:11:799]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (70:68) [01:51:11:799]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (70:68) [01:51:11:799]: APPCOMPAT: looking for appcompat database entry with ProductCode '{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}'.
    MSI (s) (70:68) [01:51:11:799]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (70:68) [01:51:11:799]: Transforms are not secure.
    MSI (s) (70:68) [01:51:11:799]: Note: 1: 2205 2:  3: Control 
    MSI (s) (70:68) [01:51:11:799]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\xxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170920015027_003_MsiPackage.log'.
    MSI (s) (70:68) [01:51:11:799]: Command Line: ARPSYSTEMCOMPONENT=1 MSIFASTINSTALL=7 InstalledVersion= InstallationConfigurationFilePath=C:\Utils\ATA\\GatewayInstallationConfiguration.json InstallationPath=C:\Program Files\Microsoft Advanced Threat Analytics\Gateway ManagementAuthenticationToken=AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAAxmH5bd3HEOpcrqL8blA9gAAAAACAAAAAAAQZgAAAAEAACAAAAAv2nXmzznbWvvTwY2BYsEeWW9WAIbmskqAM9i6k2egrQAAAAAOgAAAAAIAACAAAADwQY1kBJ0SWYe_LGH6nr5zrgRx0N9CO172Ct4rxujtrcAAAAA2tmQja0MlWVF3YWBvmYtUgfIK0YiOyHdXnl_Rt0Dk6JHh2yejsCAE04-pSqitLaK0aEI5egTRZKsochdR-o_vWwqHIcyvRltCoWUxoY_qHMNHbsdLacuT23oe3os33wYBIu6Kyz-M3JR3bDCxhH6eQ954-DvPp6tiZ-KrzHU4OeBnXbOvL7OedmtJhiYhjUsStCpqvDNCSIKAddzoYkHDjIohr9NMMZbO8XcSpGbO4Xmm6HzZgCB7G9KTQTCn3H5AAAAAbiRw2cl2vlzuoYDD1ZqjI0px5RIntkm7vsQdfCW1xa-2NeCjB6Qgl9-TpLWqt5gQ_pFBnPDg2mMfzt9nfGCa5Q REBOOT=ReallySuppress CURRENTDIRECTORY=C:\Utils\ATA CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=9796 
    MSI (s) (70:68) [01:51:11:799]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{939ED914-A55B-4C6D-B92E-4E7F52274F5C}'.
    MSI (s) (70:68) [01:51:11:799]: Product Code passed to Engine.Initialize:           ''
    MSI (s) (70:68) [01:51:11:799]: Product Code from property table before transforms: '{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}'
    MSI (s) (70:68) [01:51:11:799]: Product Code from property table after transforms:  '{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}'
    MSI (s) (70:68) [01:51:11:799]: Product not registered: beginning first-time install
    MSI (s) (70:68) [01:51:11:799]: Product {E7B0C59F-1F36-4068-9ACD-2A0AB84315D8} is not managed.
    MSI (s) (70:68) [01:51:11:799]: MSI_LUA: Credential prompt not required, user is an admin
    MSI (s) (70:68) [01:51:11:799]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
    MSI (s) (70:68) [01:51:11:799]: Entering CMsiConfigurationManager::SetLastUsedSource.
    MSI (s) (70:68) [01:51:11:799]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (70:68) [01:51:11:799]: Adding new sources is allowed.
    MSI (s) (70:68) [01:51:11:799]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
    MSI (s) (70:68) [01:51:11:799]: Package name extracted from package path: 'Microsoft.Tri.Gateway.Deployment.Package.msi'
    MSI (s) (70:68) [01:51:11:799]: Package to be registered: 'Microsoft.Tri.Gateway.Deployment.Package.msi'
    MSI (s) (70:68) [01:51:11:799]: Note: 1: 2205 2:  3: Error 
    MSI (s) (70:68) [01:51:11:815]: Note: 1: 2262 2: AdminProperties 3: -2147287038 
    MSI (s) (70:68) [01:51:11:815]: Machine policy value 'DisableMsi' is 1
    MSI (s) (70:68) [01:51:11:815]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (70:68) [01:51:11:815]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (70:68) [01:51:11:815]: Product installation will be elevated because user is admin and product is being installed per-machine.
    MSI (s) (70:68) [01:51:11:815]: Running product '{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}' with elevated privileges: Product is assigned.
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding ARPSYSTEMCOMPONENT property. Its value is '1'.
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding MSIFASTINSTALL property. Its value is '7'.
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding INSTALLATIONCONFIGURATIONFILEPATH property. Its value is 'C:\Utils\ATA\\GatewayInstallationConfiguration.json'.
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding INSTALLATIONPATH property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway'.
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding MANAGEMENTAUTHENTICATIONTOKEN property. Its value is 'AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAAxmH5bd3HEOpcrqL8blA9gAAAAACAAAAAAAQZgAAAAEAACAAAAAv2nXmzznbWvvTwY2BYsEeWW9WAIbmskqAM9i6k2egrQAAAAAOgAAAAAIAACAAAADwQY1kBJ0SWYe_LGH6nr5zrgRx0N9CO172Ct4rxujtrcAAAAA2tmQja0MlWVF3YWBvmYtUgfIK0YiOyHdXnl_Rt0Dk6JHh2yejsCAE04-pSqitLaK0aEI5egTRZKsochdR-o_vWwqHIcyvRltCoWUxoY_qHMNHbsdLacuT23oe3os33wYBIu6Kyz-M3JR3bDCxhH6eQ954-DvPp6tiZ-KrzHU4OeBnXbOvL7OedmtJhiYhjUsStCpqvDNCSIKAddzoYkHDjIohr9NMMZbO8XcSpGbO4Xmm6HzZgCB7G9KTQTCn3H5AAAAAbiRw2cl2vlzuoYDD1ZqjI0px5RIntkm7vsQdfCW1xa-2NeCjB6Qgl9-TpLWqt5gQ_pFBnPDg2mMfzt9nfGCa5Q'.
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Utils\ATA'.
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '9796'.
    MSI (s) (70:68) [01:51:11:815]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is '47422c93159aed44b72bbce4871a6d20'.
    MSI (s) (70:68) [01:51:11:815]: RESTART MANAGER: Session opened.
    MSI (s) (70:68) [01:51:11:815]: TRANSFORMS property is now: 
    MSI (s) (70:68) [01:51:11:815]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '500'.
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Roaming
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\Favorites
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Network Shortcuts
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\Documents
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Recent
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\SendTo
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Templates
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\ProgramData
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Local
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\Pictures
    MSI (s) (70:68) [01:51:11:815]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\Users\xxxxx\Desktop
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
    MSI (s) (70:68) [01:51:11:831]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
    MSI (s) (70:68) [01:51:11:831]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 
    MSI (s) (70:68) [01:51:11:846]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Fujitsu'.
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Fujitsu'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\65384.msi'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi'.
    MSI (s) (70:68) [01:51:11:846]: Machine policy value 'MsiDisableEmbeddedUI' is 0
    MSI (s) (70:68) [01:51:11:846]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
    MSI (s) (70:68) [01:51:11:846]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: PatchPackage 
    MSI (s) (70:68) [01:51:11:846]: Machine policy value 'DisableRollback' is 0
    MSI (s) (70:68) [01:51:11:846]: User policy value 'DisableRollback' is 0
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding MsiUISourceResOnly property. Its value is '1'.
    === Logging started: 20/09/2017  1:51:11 ===
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (70:68) [01:51:11:846]: Doing action: INSTALL
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: ActionText 
    Action start 1:51:11: INSTALL.
    MSI (s) (70:68) [01:51:11:846]: Running ExecuteSequence
    MSI (s) (70:68) [01:51:11:846]: Doing action: FindRelatedProducts
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: ActionText 
    Action start 1:51:11: FindRelatedProducts.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding WIX_UPGRADE_DETECTED property. Its value is '{17A474D5-9D32-4BD6-B838-87F2DD2380E8}'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding MIGRATE property. Its value is '{17A474D5-9D32-4BD6-B838-87F2DD2380E8}'.
    MSI (s) (70:68) [01:51:11:846]: Doing action: LaunchConditions
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: ActionText 
    Action ended 1:51:11: FindRelatedProducts. Return value 1.
    Action start 1:51:11: LaunchConditions.
    MSI (s) (70:68) [01:51:11:846]: Doing action: ValidateProductID
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: ActionText 
    Action ended 1:51:11: LaunchConditions. Return value 1.
    Action start 1:51:11: ValidateProductID.
    MSI (s) (70:68) [01:51:11:846]: Doing action: CostInitialize
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: ActionText 
    Action ended 1:51:11: ValidateProductID. Return value 1.
    MSI (s) (70:68) [01:51:11:846]: Machine policy value 'MaxPatchCacheSize' is 10
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'F:\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: Patch 
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: PatchPackage 
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: MsiPatchHeaders 
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: __MsiPatchFileList 
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: PatchPackage 
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2228 2:  3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`  
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: Patch 
    Action start 1:51:11: CostInitialize.
    MSI (s) (70:68) [01:51:11:846]: Doing action: FileCost
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: ActionText 
    Action ended 1:51:11: CostInitialize. Return value 1.
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: MsiAssembly 
    Action start 1:51:11: FileCost.
    MSI (s) (70:68) [01:51:11:846]: Doing action: CostFinalize
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: ActionText 
    Action ended 1:51:11: FileCost. Return value 1.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: Patch 
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: Condition 
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'F:\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Modifying INSTALLATIONPATH property. Its current value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway'. Its new value: 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding InstallationPath property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dir1009F065F0C609D5631BDE3B00ACFDFB property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dir2592A87C52B655378D8BA172003D6E7F property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dirFB75C1011B230B385AA0DA5BBFADE7AC property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Public\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dirC14DFF180648E323983D75D39BF4178F property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dir1F6922A221973E1F2ECF6CB8CB25F97B property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dir1C8E4196106149B181C3DEFADAFE48CC property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\Others\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dir7B873B162C6E4DEA85F5C7971DA018D4 property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\IdentityAndSecurity\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dirEF21B4F792C1CCB27E3D605C69B2AEC8 property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\FileSharing\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dir74CE95EFB3C43F1AB556A48B4BF7E891 property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\MicrosoftCommon\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dirF12008D78CFA7D7E4EFAA3A806ACBFEA property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Infrastructure\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dirCFC8A01DC2448BE747F4ECDE74A3F17B property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\CoreNetworking\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dir8E987C120ABBEA8ACB398CF5590BFA3E property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Extensions\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dir4F6D598E355BD4F87992B7AB3025C239 property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\ja\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dirE0DD863C8526EB3FF6D2A3E935DEB67E property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\fr\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dir0D2522131EAB2F374B5A5BA75A8C42CE property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\es\'.
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding dir32B6C64C429323C527E88AFC321E25B9 property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\de\'.
    MSI (s) (70:68) [01:51:11:846]: Target path resolution complete. Dumping Directory table...
    MSI (s) (70:68) [01:51:11:846]: Note: target paths subject to change (via custom actions or browsing)
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: TARGETDIR	, Object: F:\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: INSTALLATIONPATH	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: InstallationPath	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dir1009F065F0C609D5631BDE3B00ACFDFB	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dir2592A87C52B655378D8BA172003D6E7F	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dirFB75C1011B230B385AA0DA5BBFADE7AC	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Public\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dirC14DFF180648E323983D75D39BF4178F	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dir1F6922A221973E1F2ECF6CB8CB25F97B	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dir1C8E4196106149B181C3DEFADAFE48CC	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\Others\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dir7B873B162C6E4DEA85F5C7971DA018D4	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\IdentityAndSecurity\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dirEF21B4F792C1CCB27E3D605C69B2AEC8	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\FileSharing\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dir74CE95EFB3C43F1AB556A48B4BF7E891	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\MicrosoftCommon\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dirF12008D78CFA7D7E4EFAA3A806ACBFEA	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Infrastructure\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dirCFC8A01DC2448BE747F4ECDE74A3F17B	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\CoreNetworking\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dir8E987C120ABBEA8ACB398CF5590BFA3E	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Extensions\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dir4F6D598E355BD4F87992B7AB3025C239	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\ja\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dirE0DD863C8526EB3FF6D2A3E935DEB67E	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\fr\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dir0D2522131EAB2F374B5A5BA75A8C42CE	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\es\
    MSI (s) (70:68) [01:51:11:846]: Dir (target): Key: dir32B6C64C429323C527E88AFC321E25B9	, Object: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\de\
    MSI (s) (70:68) [01:51:11:846]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2205 2:  3: MsiAssembly 
    MSI (s) (70:68) [01:51:11:846]: Note: 1: 2228 2:  3: MsiAssembly 4:  SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`,  `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE  `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ? 
    Action start 1:51:11: CostFinalize.
    MSI (s) (70:68) [01:51:11:862]: Doing action: MigrateFeatureStates
    MSI (s) (70:68) [01:51:11:862]: Note: 1: 2205 2:  3: ActionText 
    Action ended 1:51:11: CostFinalize. Return value 1.
    MSI (s) (70:68) [01:51:11:862]: Migrating feature settings from product(s) '{17A474D5-9D32-4BD6-B838-87F2DD2380E8}'
    MSI (s) (70:68) [01:51:11:862]: MigrateFeatureStates: based on existing product, setting feature 'ProductFeature' to 'Local' state.
    Action start 1:51:11: MigrateFeatureStates.
    MSI (s) (70:68) [01:51:11:862]: Doing action: InstallValidate
    MSI (s) (70:68) [01:51:11:862]: Note: 1: 2205 2:  3: ActionText 
    Action ended 1:51:11: MigrateFeatureStates. Return value 1.
    MSI (s) (70:68) [01:51:11:862]: PROPERTY CHANGE: Deleting MsiRestartManagerSessionKey property. Its current value is '47422c93159aed44b72bbce4871a6d20'.
    MSI (s) (70:68) [01:51:11:862]: Note: 1: 2205 2:  3: Dialog 
    MSI (s) (70:68) [01:51:11:862]: Feature: ProductFeature; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: reg0D0BECA751F5FDC0358D8F31B54B95B4; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp4FAF266119485E892EA6722283F45899; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpE0ED8D79E0E04E47BE7045F54F19F6D5; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp71034927F31B4816893775D06DE91EC5; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp3C5225DBD9AEFE04A4C04BD3E3B65583; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp7AD3A63BAFC74991A6CE134F02B331D4; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpE8CB291A60D2F6B68A8B5F240AF8D729; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp1CB042F0722C7A4B6C4B1E8455C531C2; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpB026D37972A7418499BD215C5F19C51E; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp3A527E4B98FA4134BBDFA0C47D25422D; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp87E22A0FF5E34070907C9AE5EE66BC5D; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpD7DC53A2BC1845ECA26F79846C669464; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpF5E3D289A24B4A24A84942B838F6D396; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpCB91C534915E37C82F6772C0447867CF; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp06757D844FE149A7929B96EC353BB42D; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp37AE0D343FABEDDC7E12E3786064C27D; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpAEB5E4454D924E59A2307019A6A53620; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp303532E699DAF25512665F38DDE97CC3; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp0D372F208FE54A6083FDDD5DEFFCEFE8; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp5CFCDE9C68DE459F9E3B056AB1DA703E; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpD8F90B44705809317FF6A35A8E499315; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpDC5CF78D78AB360C38D2106C5F87F6AB; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpF05FA73278EA4186BEF520A0E1436470; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp6AB91505B2B45EE5987CD0647626B671; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpC5634BCF80F917D7101139C90535EBA0; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpC2AD489B837AFE19A9E10EF82D0CFD99; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp7FADC7EE2380A5FB637D1A772F49BC6C; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp472B11B0A3BB528DB16E3EA5D07567AE; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp078DB1A84C034597AB2C1B0D59CE9858; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpA67793119618441A9124535C571D13EE; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp4D2ABFF13C1D417F8D338E50ED37AD19; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp30B22203116A4EAEB73CB997A047ADBD; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp930925258D5B4FBDB81132B5D5074ACF; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp3BCF6D6994DA41E0AE6B6C8DF91805AB; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpEF38A14BEC5F4EA8BDCBD4B225E149A4; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp815F5E1490594DD8B70E27BFDD22AE5C; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp99586135F1CB62A7307BEF99EBDCD87C; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpE24E69E451749EAA09283DCBF9A41575; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpE61F3A04890888E5298020789041B00A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp20A6A7A7CAC14B02829C640DDF9E0275; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp5E3C77FEB7624FD5BC3B7FE017DA3513; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp586989268CD947025480C7B8671FB5FD; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpD471576110FB3FEBCF12FE5092A97291; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpFEDA15BC65808BE11E6167706773D359; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp3A28E777700189FDFA1857993C8627B9; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp4E1DF6F199707758F3A5FDC1D787722C; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpCB9D6FAE990D2734CD36B717D738A479; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp9875C9B52A4EF61540C11BD421830A11; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp292EDB1F15B7414DA3C93B7A6DF1A26C; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp90B872DA468E1CD7A0D165C45C1ECAB5; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp1AF32642A2E6289CD615317BE4155F3B; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpC931DA906AC9FC90154D03C2C1803542; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp4130E22BD350D48ACB12AE5CEC6E7A09; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpAA6A418F7BDB4CADF915A7A49FE620F7; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp686D49FF6DE8096F00C03ED22E064206; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpFE93AFB3773E106561683E1CA748EED0; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp790C6AA2B997DD0F50EE18ECC5342938; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp576027180043996E41B3B03FC5EACBE8; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp588DB301C2AD1A5BA9B9A0253F1DB522; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp3EFF6F8F717D27848856AA2DEF8BF977; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp45543ACE3C9B6C8FB32D6B1EBE1FC480; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp76783B16D34622AB4C9BBFF0F57F011C; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpD7147F56315FC038EC098CA6800CFD43; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp801F44B0B333D42AF4719C254671727F; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpD18CDF1B0745284C9B915DA5278DA79B; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpA81EE5F7036FFC5788A45564E169E718; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp7740A63C22194E841076CAECBC718270; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpFC965CA9399F10ADE64D424FA84401A0; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp5F03786355868BD63BC442D6A38CF816; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp53AEC4AA82C0272A96EDBD5D2F79FE59; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp7B71818B33A674D7F4B8A83108526FF3; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp3EEBAEB10836EBF2F6158429076AACA9; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp5B7E442E066D2212F8C03BE68A5FDBBD; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpF3EEEE5AFB45D574FF7237818FB65611; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp6A2F86697348A520A4976CB459DFB1F5; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpB91725AF9BDEF5A6A0B7FFD3B8778787; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp2B3E19981B00DEFF0F2E0B6E9F9816DB; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp6C665FD40AA30145BF4288A6FEF4F78C; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp839530CE52F794951513220D24EE372B; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpC9078071B674A503A24D1F2CACF041FB; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpA0A2706769F395A511807A92BB0BD2A5; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmp2B9011F92B718F742092A56F1F169285; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:862]: Component: cmpDDAADB1C48E0D75085C839B78E58E410; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp5C57496B95E3BB3E5F0E1CEB283807A3; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp3672825349BF1510A257513EAF6422F1; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp84675EE8F072F0463B131A0DC9E80D48; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp25FF15A8B9ED1A90C8972A94912F1532; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpE2D9AB01A7AB85092A384A07D152BB5F; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp9C2946A90C041B83E647DD6CDFE5C494; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp7B68525DCD3ECF7FC489893C1331F762; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpF7376F960CDD2B61F21F19BE5AE7FCDF; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpC669E15AEC25D78C81C89488D55B4B68; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpA456126B12FF7D915C10DB00F9242CF2; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp17234BE3522F8CF3F4018790C8320E61; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp53A522DB7A90F9827DA8DB97DE0F1B86; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp84B985E33BFB9CCA78BCFA8BB0423199; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp0285DD02405E367412E0AE89DC6FD992; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp1C519EA32ABE42BF5E20A3AF404C3C94; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpBE38308B794E55A7083A8BD476815F7A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp865D031FB7C57F6DF7B51E745875793C; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpBA1EDE638BF44575B1394BADE6659278; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpA07E9E1BC89FC4B330BC8A75B0E3C197; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpC7BA4C5A6150D8D10569C5A8DFA306E5; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpC62354E9323AB6B64FDDAEE7BCD3BACF; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp0620312BCE105F8F15F4EE4D1A2D3977; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpA94AEDA42E61B1B256E8CFD2A6EAD532; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpEB01C503330BEB31040170E7AF2B25E3; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpCBD8C7B0452D5504BFBEECA8A374D927; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp3EEAE7BF2EDA00A2CA9A25F22246F6F7; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpC1BBC9A35FD91285BAD07FCCE6CEC67E; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp0C0ACBB4F147F7AE23716A7CB072EDD0; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpF103495838FFA90BC662AA5F168CF379; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp2AFAA0CDCB6C912E2EED4F9097BA623D; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp9EC4E6A00D7DE4C387100682A3881E64; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp673451EBB0AD42639627F6D9F9B32DC6; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp1CD6AD5C7C879656A028833A7AB247B7; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp0DFABCB043AB5A6DD41D0DC4D5FDB84C; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpA558CC989BECDAED87B04F40F8E721FC; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp713C505748253528F593F2AEB777827A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp057EFD05526B32C8458F7E2E22129CA8; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp52E0F7396CE74C1D85EC99F9CBEF1689; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpD01760CFAA675FFAFA690CCE1DDD1348; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp1B633D33DC3585C6BA5CBD7F61250F41; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpF756D5CD737441C5BCF85D34B777D519; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp49294C2F5FB949E3A1265D1BB8969AEA; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp7C327AF3642AC255F3BBF637F7396618; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp93E2D2F6E4F14B62A6938C5B0CA5AA49; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpBA6A284A1BA249D3BBE891A1CE418D91; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpB5E8823451A274616CF3731F82A67581; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp1BE011B0D3EF4A129E36C1FD925634E3; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpBC066D365D73453ABE70486B81FD5D97; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp44C79104C6A84C0D94E47CB1911F8770; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp06C1AA15A0AAFE100CEAE9741915FAAB; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmpBEB0456CB192D135224634A40F0841EC; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: cmp03CFAC6F047AD69144FD277DDD37256E; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: ServiceComponent; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Component: UpdaterServiceComponent; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: BindImage 
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: ProgId 
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: PublishComponent 
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: SelfReg 
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: Extension 
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: Font 
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: Shortcut 
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: Class 
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: Icon 
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: TypeLib 
    Action start 1:51:11: InstallValidate.
    MSI (s) (70:68) [01:51:11:877]: Note: 1: 2205 2:  3: _RemoveFilePath 
    MSI (s) (70:68) [01:51:11:924]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
    

    Wednesday, September 20, 2017 12:21 AM

All replies

  • Below is the MsiPackage Log Part2

    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: BindImage 
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: ProgId 
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: PublishComponent 
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: SelfReg 
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: Extension 
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: Font 
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: Shortcut 
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: Class 
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: Icon 
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: TypeLib 
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2727 2:  
    MSI (s) (70:68) [01:51:11:924]: Note: 1: 2205 2:  3: FilesInUse 
    MSI (s) (70:68) [01:51:11:940]: Note: 1: 2727 2:  
    MSI (s) (70:68) [01:51:11:940]: Doing action: InstallInitialize
    MSI (s) (70:68) [01:51:11:940]: Note: 1: 2205 2:  3: ActionText 
    Action ended 1:51:11: InstallValidate. Return value 1.
    MSI (s) (70:68) [01:51:11:940]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (70:68) [01:51:11:940]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (70:68) [01:51:11:940]: BeginTransaction: Locking Server
    MSI (s) (70:68) [01:51:11:940]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (70:68) [01:51:11:940]: Server not locked: locking for product {E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}
    Action start 1:51:11: InstallInitialize.
    MSI (s) (70:68) [01:51:12:002]: Skipping action: InstallInitializeCustomAction (condition is false)
    MSI (s) (70:68) [01:51:12:002]: Skipping action: UninstallInitializeCustomAction (condition is false)
    MSI (s) (70:68) [01:51:12:002]: Doing action: UpgradeInitializeCustomAction
    MSI (s) (70:68) [01:51:12:002]: Note: 1: 2205 2:  3: ActionText 
    Action ended 1:51:12: InstallInitialize. Return value 1.
    MSI (s) (70:9C) [01:51:12:096]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7640.tmp, Entrypoint: UpgradeInitialize
    MSI (s) (70:14) [01:51:12:096]: Generating random cookie.
    MSI (s) (70:14) [01:51:12:096]: Created Custom Action Server with PID 6156 (0x180C).
    MSI (s) (70:3C) [01:51:12:143]: Running as a service.
    MSI (s) (70:3C) [01:51:12:143]: Hello, I'm your 32bit Impersonated custom action server.
    Action start 1:51:12: UpgradeInitializeCustomAction.
    SFXCA: Extracting custom action to temporary directory: C:\Windows\Installer\MSI7640.tmp-\
    SFXCA: Binding to CLR version v4.0.30319
    Calling custom action Microsoft.Tri.Gateway.Deployment.Package.Actions!Microsoft.Tri.Gateway.Deployment.Package.Actions.CustomActions.UpgradeInitialize
    2017-09-19 13:51:17.2912 8764 1   Debug [CustomActions] UpgradeInitialize started
    Exception thrown by custom action:
    System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.ArgumentException: Version string portion was too short or too long.
       at System.Version.VersionResult.SetFailure(ParseFailureKind failure, String argument)
       at System.Version.TryParseVersion(String version, VersionResult& result)
       at System.Version.Parse(String input)
       at Microsoft.Tri.Gateway.Deployment.Package.Actions.CustomActions.UpgradeInitialize(Session session)
       --- End of inner exception stack trace ---
       at System.RuntimeMethodHandle.InvokeMethod(Object target, Object arguments, Signature sig, Boolean constructor)
       at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object parameters, Object arguments)
       at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object parameters, CultureInfo culture)
       at Microsoft.Deployment.WindowsInstaller.CustomActionProxy.InvokeCustomAction(Int32 sessionHandle, String entryPoint, IntPtr remotingDelegatePtr)
    CustomAction UpgradeInitializeCustomAction returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
    MSI (s) (70:68) [01:51:17:540]: Machine policy value 'DisableRollback' is 0
    MSI (s) (70:68) [01:51:17:540]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
    Action ended 1:51:17: UpgradeInitializeCustomAction. Return value 3.
    MSI (s) (70:68) [01:51:17:540]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
    MSI (s) (70:68) [01:51:17:540]: No System Restore sequence number for this installation.
    MSI (s) (70:68) [01:51:17:540]: Unlocking Server
    Action ended 1:51:17: INSTALL. Return value 3.
    Property(S): UpgradeCode = {4D47BEF4-D75A-4CE9-9CD0-B186E2811553}
    Property(S): InstallationPath = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\
    Property(S): dir32B6C64C429323C527E88AFC321E25B9 = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\de\
    Property(S): dir0D2522131EAB2F374B5A5BA75A8C42CE = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\es\
    Property(S): dirE0DD863C8526EB3FF6D2A3E935DEB67E = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\fr\
    Property(S): dir4F6D598E355BD4F87992B7AB3025C239 = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\ja\
    Property(S): dir1009F065F0C609D5631BDE3B00ACFDFB = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\
    Property(S): dir8E987C120ABBEA8ACB398CF5590BFA3E = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Extensions\
    Property(S): dir2592A87C52B655378D8BA172003D6E7F = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\
    Property(S): dirCFC8A01DC2448BE747F4ECDE74A3F17B = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\CoreNetworking\
    Property(S): dirF12008D78CFA7D7E4EFAA3A806ACBFEA = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Infrastructure\
    Property(S): dir74CE95EFB3C43F1AB556A48B4BF7E891 = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\MicrosoftCommon\
    Property(S): dirEF21B4F792C1CCB27E3D605C69B2AEC8 = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\FileSharing\
    Property(S): dir7B873B162C6E4DEA85F5C7971DA018D4 = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\IdentityAndSecurity\
    Property(S): dir1C8E4196106149B181C3DEFADAFE48CC = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\Others\
    Property(S): dirFB75C1011B230B385AA0DA5BBFADE7AC = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Public\
    Property(S): dirC14DFF180648E323983D75D39BF4178F = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\
    Property(S): dir1F6922A221973E1F2ECF6CB8CB25F97B = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Pef\Models\Microsoft\Windows\
    Property(S): INSTALLATIONPATH = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\
    Property(S): TARGETDIR = F:\
    Property(S): VersionNT = 601
    Property(S): ALLUSERS = 1
    Property(S): DataCollectorSetName = Microsoft ATA Gateway
    Property(S): DataCollectorSetPerformanceCounterCategoryNames = Microsoft ATA Gateway;Microsoft ATA Gateway Updater
    Property(S): DataCollectorSetProcessNames = Microsoft.Tri.Gateway;Microsoft.Tri.Gateway.Updater;lsass
    Property(S): Manufacturer = Microsoft Corporation
    Property(S): ProductCode = {E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}
    Property(S): ProductLanguage = 0
    Property(S): ProductName = Microsoft Advanced Threat Analytics Gateway
    Property(S): ProductVersion = 1.8.6765.36693
    Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED
    Property(S): MsiHiddenProperties = MANAGEMENTACCOUNTPASSWORD;SERVICEACCOUNTPASSWORD
    Property(S): WIX_UPGRADE_DETECTED = {17A474D5-9D32-4BD6-B838-87F2DD2380E8}
    Property(S): MsiLogFileLocation = C:\Users\xxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170920015027_003_MsiPackage.log
    Property(S): PackageCode = {939ED914-A55B-4C6D-B92E-4E7F52274F5C}
    Property(S): ProductState = -1
    Property(S): PackagecodeChanging = 1
    Property(S): ARPSYSTEMCOMPONENT = 1
    Property(S): MSIFASTINSTALL = 7
    Property(S): INSTALLATIONCONFIGURATIONFILEPATH = C:\Utils\ATA\\GatewayInstallationConfiguration.json
    Property(S): MANAGEMENTAUTHENTICATIONTOKEN = AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAAxmH5bd3HEOpcrqL8blA9gAAAAACAAAAAAAQZgAAAAEAACAAAAAv2nXmzznbWvvTwY2BYsEeWW9WAIbmskqAM9i6k2egrQAAAAAOgAAAAAIAACAAAADwQY1kBJ0SWYe_LGH6nr5zrgRx0N9CO172Ct4rxujtrcAAAAA2tmQja0MlWVF3YWBvmYtUgfIK0YiOyHdXnl_Rt0Dk6JHh2yejsCAE04-pSqitLaK0aEI5egTRZKsochdR-o_vWwqHIcyvRltCoWUxoY_qHMNHbsdLacuT23oe3os33wYBIu6Kyz-M3JR3bDCxhH6eQ954-DvPp6tiZ-KrzHU4OeBnXbOvL7OedmtJhiYhjUsStCpqvDNCSIKAddzoYkHDjIohr9NMMZbO8XcSpGbO4Xmm6HzZgCB7G9KTQTCn3H5AAAAAbiRw2cl2vlzuoYDD1ZqjI0px5RIntkm7vsQdfCW1xa-2NeCjB6Qgl9-TpLWqt5gQ_pFBnPDg2mMfzt9nfGCa5Q
    Property(S): REBOOT = ReallySuppress
    Property(S): CURRENTDIRECTORY = C:\Utils\ATA
    Property(S): CLIENTUILEVEL = 3
    Property(S): MSICLIENTUSESEXTERNALUI = 1
    Property(S): CLIENTPROCESSID = 9796
    Property(S): VersionDatabase = 500
    Property(S): VersionMsi = 5.00
    Property(S): VersionNT64 = 601
    Property(S): WindowsBuild = 7601
    Property(S): ServicePackLevel = 1
    Property(S): ServicePackLevelMinor = 0
    Property(S): MsiNTProductType = 2
    Property(S): WindowsFolder = C:\Windows\
    Property(S): WindowsVolume = C:\
    Property(S): System64Folder = C:\Windows\system32\
    Property(S): SystemFolder = C:\Windows\SysWOW64\
    Property(S): RemoteAdminTS = 1
    Property(S): TempFolder = C:\Users\xxxxx\AppData\Local\Temp\
    Property(S): ProgramFilesFolder = C:\Program Files (x86)\
    Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
    Property(S): ProgramFiles64Folder = C:\Program Files\
    Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
    Property(S): AppDataFolder = C:\Users\xxxxx\AppData\Roaming\
    Property(S): FavoritesFolder = C:\Users\xxxxx\Favorites\
    Property(S): NetHoodFolder = C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
    Property(S): PersonalFolder = C:\Users\xxxxx\Documents\
    Property(S): PrintHoodFolder = C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
    Property(S): RecentFolder = C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Recent\
    Property(S): SendToFolder = C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\SendTo\
    Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
    Property(S): CommonAppDataFolder = C:\ProgramData\
    Property(S): LocalAppDataFolder = C:\Users\xxxxx\AppData\Local\
    Property(S): MyPicturesFolder = C:\Users\xxxxx\Pictures\
    Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
    Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
    Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
    Property(S): DesktopFolder = C:\Users\Public\Desktop\
    Property(S): FontsFolder = C:\Windows\Fonts\
    Property(S): GPTSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): ShellAdvtSupport = 1
    Property(S): MsiAMD64 = 6
    Property(S): Msix64 = 6
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 32768
    Property(S): VirtualMemory = 61132
    Property(S): AdminUser = 1
    Property(S): MsiTrueAdminUser = 1
    Property(S): LogonUser = xxxxx
    Property(S): UserSID = S-1-5-21-2091904384-3689332406-323980668-72582
    Property(S): UserLanguageID = 3081
    Property(S): ComputerName = AKLHQBMS03-ADM
    Property(S): SystemLanguageID = 3081
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 19
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): TextInternalLeading = 3
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 1:51:17
    Property(S): Date = 20/09/2017
    Property(S): MsiNetAssemblySupport = 4.6.1055.0
    Property(S): MsiWin32AssemblySupport = 6.1.7601.17514
    Property(S): RedirectedDllSupport = 2
    Property(S): MsiRunningElevated = 1
    Property(S): Privileged = 1
    Property(S): USERNAME = Fujitsu
    Property(S): COMPANYNAME = Fujitsu
    Property(S): DATABASE = C:\Windows\Installer\65384.msi
    Property(S): OriginalDatabase = C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi
    Property(S): UILevel = 2
    Property(S): MsiUISourceResOnly = 1
    Property(S): ACTION = INSTALL
    Property(S): MIGRATE = {17A474D5-9D32-4BD6-B838-87F2DD2380E8}
    Property(S): ROOTDRIVE = F:\
    Property(S): CostingComplete = 1
    Property(S): OutOfDiskSpace = 0
    Property(S): OutOfNoRbDiskSpace = 0
    Property(S): PrimaryVolumeSpaceAvailable = 0
    Property(S): PrimaryVolumeSpaceRequired = 0
    Property(S): PrimaryVolumeSpaceRemaining = 0
    Property(S): INSTALLLEVEL = 1
    MSI (s) (70:68) [01:51:17:572]: Note: 1: 1708 
    MSI (s) (70:68) [01:51:17:572]: Note: 1: 2205 2:  3: Error 
    MSI (s) (70:68) [01:51:17:572]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708 
    MSI (s) (70:68) [01:51:17:572]: Note: 1: 2205 2:  3: Error 
    MSI (s) (70:68) [01:51:17:572]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709 
    MSI (s) (70:68) [01:51:17:572]: Product: Microsoft Advanced Threat Analytics Gateway -- Installation failed.
    
    MSI (s) (70:68) [01:51:17:572]: Windows Installer installed the product. Product Name: Microsoft Advanced Threat Analytics Gateway. Product Version: 1.8.6765.36693. Product Language: 0. Manufacturer: Microsoft Corporation. Installation success or error status: 1603.
    
    MSI (s) (70:68) [01:51:17:572]: Deferring clean up of packages/files, if any exist
    MSI (s) (70:68) [01:51:17:572]: MainEngineThread is returning 1603
    MSI (s) (70:3C) [01:51:17:587]: RESTART MANAGER: Session closed.
    MSI (s) (70:3C) [01:51:17:587]: No System Restore sequence number for this installation.
    === Logging stopped: 20/09/2017  1:51:17 ===
    MSI (s) (70:3C) [01:51:17:587]: User policy value 'DisableRollback' is 0
    MSI (s) (70:3C) [01:51:17:587]: Machine policy value 'DisableRollback' is 0
    MSI (s) (70:3C) [01:51:17:587]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (70:3C) [01:51:17:587]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
    MSI (s) (70:3C) [01:51:17:587]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
    MSI (s) (70:3C) [01:51:17:587]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (s) (70:3C) [01:51:17:587]: Restoring environment variables
    MSI (s) (70:3C) [01:51:17:587]: Destroying RemoteAPI object.
    MSI (s) (70:14) [01:51:17:587]: Custom Action Manager thread ending.
    MSI (c) (44:78) [01:51:17:587]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (44:78) [01:51:17:587]: MainEngineThread is returning 1603
    === Verbose logging stopped: 20/09/2017  1:51:17 ===
    
    

    Wednesday, September 20, 2017 12:24 AM
  • Hello,

    You may also check the log file "Microsoft Advanced Threat Analytics Gateway_YYYYMMDDHHMMSS.log" located at C:\Users\Administrator\AppData\Local\Temp directory. This log lists the steps in the process of the deployment of the ATA Gateway.

    Then, you may refer to the known issues for troubleshooting ATA.

    If it still doesn't help, I would recommend to request a support ticket with Microsoft CSS.

    Best regards,

    Andy Liu


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, September 27, 2017 7:20 AM
  • Hi Andy,

    Thank you for the reply unfortunately I couldn’t find anything obvious in that log to point to an error or in the known issues.

    The only real error I can find is:

    [2574:2520][2017-07-04T23:49:44]i000: 2017-07-04 11:49:44.5778 9588 5   Debug [\[]GatewayBootstrapperApplication[\]] Engine.Quit [\[]deploymentResultStatus=0 isRestartRequired=False[\]]

    Are you able to provide any pointers for this error failing that I will raise a case.

    Thank you,

    Chris

    Full Log for reference:

    [8434:6944][2017-07-04T23:06:07]i001: Burn v3.10.3.3007, Windows v6.1 (Build 7601: Service Pack 1), path: C:\Users\xxxxxx\AppData\Local\Temp\8\{F84FABA8-AE87-4886-A4A4-477DFAEA552C}\.cr\Microsoft ATA Gateway Setup.exe
    [8434:6944][2017-07-04T23:06:07]i000: Initializing string variable 'InstallationConfigurationFilePath' to value '[WixBundleOriginalSourceFolder]\GatewayInstallationConfiguration.json'
    [8434:6944][2017-07-04T23:06:07]i000: Initializing hidden variable 'ConsoleAccountPassword'
    [8434:6944][2017-07-04T23:06:07]i000: Initializing hidden variable 'ManagementAuthenticationToken'
    [8434:6944][2017-07-04T23:06:07]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
    [8434:6944][2017-07-04T23:06:07]i009: Command Line: '"-burn.clean.room=C:\Utils\ATA\Microsoft ATA Gateway Setup.exe" -burn.filehandle.attached=212 -burn.filehandle.self=220'
    [8434:6944][2017-07-04T23:06:07]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Utils\ATA\Microsoft ATA Gateway Setup.exe'
    [8434:6944][2017-07-04T23:06:07]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Utils\ATA\'
    [8434:6944][2017-07-04T23:06:09]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609.log'
    [8434:6944][2017-07-04T23:06:10]i000: Setting string variable 'WixBundleName' to value 'Microsoft Advanced Threat Analytics Gateway'
    [8434:6944][2017-07-04T23:06:10]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
    [8434:6944][2017-07-04T23:06:10]i000: Loading prerequisite bootstrapper application because managed host could not be loaded, error: 0x80131700.
    [8434:8790][2017-07-04T23:06:10]i000: Setting numeric variable 'WixStdBALanguageId' to value 1033
    [8434:8790][2017-07-04T23:06:10]i000: Setting version variable 'WixBundleFileVersion' to value '1.7.5757.57477'
    [8434:6944][2017-07-04T23:06:10]i100: Detect begin, 7 packages
    [8434:6944][2017-07-04T23:06:10]i000: Setting string variable 'NetFrameworkRegistryValue' to value '379893'
    [8434:6944][2017-07-04T23:06:10]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
    [8434:6944][2017-07-04T23:06:10]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
    [8434:6944][2017-07-04T23:06:10]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB3047154_RTM~31bf3856ad364e35~amd64~~6.3.2.0'
    [8434:6944][2017-07-04T23:06:10]i000: Setting numeric variable 'KB3047154Exists' to value 0
    [8434:6944][2017-07-04T23:06:10]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to false.
    [8434:6944][2017-07-04T23:06:10]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to false.
    [8434:6944][2017-07-04T23:06:10]i052: Condition 'KB3047154Exists' evaluates to false.
    [8434:6944][2017-07-04T23:06:10]i101: Detected package: NetFrameworkPackageServer, state: Absent, cached: None
    [8434:6944][2017-07-04T23:06:10]i101: Detected package: NetFrameworkPackageServerCore, state: Absent, cached: None
    [8434:6944][2017-07-04T23:06:10]i101: Detected package: KB3047154Package, state: Absent, cached: None
    [8434:6944][2017-07-04T23:06:10]i101: Detected package: VcRedistributable2013Package, state: Absent, cached: None
    [8434:6944][2017-07-04T23:06:10]i101: Detected package: PefNdisDriver, state: Absent, cached: None
    [8434:6944][2017-07-04T23:06:10]i101: Detected package: BundleActionsPackage, state: Absent, cached: None
    [8434:6944][2017-07-04T23:06:10]i101: Detected package: MsiPackage, state: Absent, cached: None
    [8434:6944][2017-07-04T23:06:10]i199: Detect complete, result: 0x0
    [8434:6944][2017-07-04T23:06:12]i200: Plan begin, 7 packages, action: Install
    [8434:6944][2017-07-04T23:06:12]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
    [8434:6944][2017-07-04T23:06:12]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
    [8434:6944][2017-07-04T23:06:12]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
    [8434:6944][2017-07-04T23:06:12]i000: Setting string variable 'NetFrameworkLogPath' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_000_NetFrameworkPackageServer.log'
    [8434:6944][2017-07-04T23:06:12]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
    [8434:6944][2017-07-04T23:06:12]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
    [8434:6944][2017-07-04T23:06:12]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
    [8434:6944][2017-07-04T23:06:12]i052: Condition 'VersionNT64 = v6.3 AND NTProductType <> 2' evaluates to false.
    [8434:6944][2017-07-04T23:06:12]w321: Skipping dependency registration on package with no dependency providers: KB3047154Package
    [8434:6944][2017-07-04T23:06:12]w321: Skipping dependency registration on package with no dependency providers: VcRedistributable2013Package
    [8434:6944][2017-07-04T23:06:12]i052: Condition 'VersionNT64 = v6.1 OR VersionNT64 = v6.2' evaluates to true.
    [8434:6944][2017-07-04T23:06:12]w321: Skipping dependency registration on package with no dependency providers: BundleActionsPackage
    [8434:6944][2017-07-04T23:06:12]i201: Planned package: NetFrameworkPackageServer, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: None, cache: Yes, uncache: No, dependency: None
    [8434:6944][2017-07-04T23:06:12]i201: Planned package: NetFrameworkPackageServerCore, state: Absent, default requested: Absent, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [8434:6944][2017-07-04T23:06:12]i201: Planned package: KB3047154Package, state: Absent, default requested: Absent, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [8434:6944][2017-07-04T23:06:12]i201: Planned package: VcRedistributable2013Package, state: Absent, default requested: Present, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [8434:6944][2017-07-04T23:06:12]i201: Planned package: PefNdisDriver, state: Absent, default requested: Present, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [8434:6944][2017-07-04T23:06:12]i201: Planned package: BundleActionsPackage, state: Absent, default requested: Present, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [8434:6944][2017-07-04T23:06:12]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: None, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [8434:6944][2017-07-04T23:06:12]i299: Plan complete, result: 0x0
    [8434:6944][2017-07-04T23:06:12]i300: Apply begin
    [8434:6944][2017-07-04T23:06:13]i010: Launching elevated engine process.
    [8434:6944][2017-07-04T23:06:18]i011: Launched elevated engine process.
    [8434:6944][2017-07-04T23:06:18]i012: Connected to elevated engine.
    [1A00:86C4][2017-07-04T23:06:18]i358: Pausing automatic updates.
    [1A00:86C4][2017-07-04T23:06:18]i359: Paused automatic updates.
    [1A00:86C4][2017-07-04T23:06:18]i360: Creating a system restore point.
    [1A00:86C4][2017-07-04T23:06:18]i362: System restore disabled, system restore point not created.
    [1A00:86C4][2017-07-04T23:06:18]i370: Session begin, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, options: 0x7, disable resume: No
    [1A00:86C4][2017-07-04T23:06:18]i000: Caching bundle from: 'C:\Users\xxxxxx\AppData\Local\Temp\8\{564F542B-DC43-4D7E-A4E1-75B81655FEE8}\.be\Microsoft ATA Gateway Setup.exe' to: 'C:\ProgramData\Package Cache\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}\Microsoft ATA Gateway Setup.exe'
    [1A00:86C4][2017-07-04T23:06:19]i320: Registering bundle dependency provider: {1073abb4-4e39-4b2b-b0bf-e98331eb0941}, version: 1.7.5757.57477
    [1A00:86C4][2017-07-04T23:06:19]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: Active, restart initiated: No, disable resume: No
    [1A00:3488][2017-07-04T23:06:20]i305: Verified acquired payload: NetFrameworkPackageServer at path: C:\ProgramData\Package Cache\.unverified\NetFrameworkPackageServer, moving to: C:\ProgramData\Package Cache\83D048D171FF44A3CAD9B422137656F585295866\NDP461-KB3102436-x86-x64-AllOS-ENU.exe.
    [1A00:86C4][2017-07-04T23:06:20]i301: Applying execute package: NetFrameworkPackageServer, action: Install, path: C:\ProgramData\Package Cache\83D048D171FF44A3CAD9B422137656F585295866\NDP461-KB3102436-x86-x64-AllOS-ENU.exe, arguments: '"C:\ProgramData\Package Cache\83D048D171FF44A3CAD9B422137656F585295866\NDP461-KB3102436-x86-x64-AllOS-ENU.exe" /passive /showrmui /norestart /ChainingPackage "Microsoft Advanced Threat Analytics Gateway" /log "C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_000_NetFrameworkPackageServer.log.html"'
    [8434:6944][2017-07-04T23:37:42]i319: Applied execute package: NetFrameworkPackageServer, result: 0x0, restart: Initiated
    [1A00:86C4][2017-07-04T23:37:42]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: Reboot Pending, restart: Initiated, disable resume: No
    [1A00:86C4][2017-07-04T23:37:42]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: Reboot Pending, restart initiated: Yes, disable resume: No
    [8434:6944][2017-07-04T23:37:43]i399: Apply complete, result: 0x0, restart: Initiated, ba requested restart:  No
    [8434:6944][2017-07-04T23:38:09]i500: Shutting down, exit code: 0x669
    [8434:6944][2017-07-04T23:38:09]i000: The prerequisites scheduled a restart. The bootstrapper application will be reloaded after the computer is restarted.
    [8434:6944][2017-07-04T23:38:09]i004: Bootstrapper application requested restart at shutdown. Planned to restart already: No.
    [8434:6944][2017-07-04T23:38:09]i410: Variable: InstallationConfigurationFilePath = C:\Utils\ATA\\GatewayInstallationConfiguration.json
    [8434:6944][2017-07-04T23:38:09]i410: Variable: KB3047154Exists = 0
    [8434:6944][2017-07-04T23:38:09]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
    [8434:6944][2017-07-04T23:38:09]i410: Variable: NetFrameworkLogPath = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_000_NetFrameworkPackageServer.log
    [8434:6944][2017-07-04T23:38:09]i410: Variable: NetFrameworkRegistryValue = 379893
    [8434:6944][2017-07-04T23:38:09]i410: Variable: NTProductType = 2
    [8434:6944][2017-07-04T23:38:09]i410: Variable: VersionNT64 = 6.1.0.0
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleAction = 5
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleElevated = 1
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleFileVersion = 1.7.5757.57477
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleForcedRestartPackage = NetFrameworkPackageServer
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleInstalled = 0
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleLog = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609.log
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleManufacturer = Microsoft Corporation
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleName = Microsoft Advanced Threat Analytics Gateway
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleOriginalSource = C:\Utils\ATA\Microsoft ATA Gateway Setup.exe
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleOriginalSourceFolder = C:\Utils\ATA\
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleProviderKey = {1073abb4-4e39-4b2b-b0bf-e98331eb0941}
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleSourceProcessFolder = C:\Utils\ATA\
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleSourceProcessPath = C:\Utils\ATA\Microsoft ATA Gateway Setup.exe
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleTag = 
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixBundleVersion = 1.7.5757.57477
    [8434:6944][2017-07-04T23:38:09]i410: Variable: WixStdBALanguageId = 1033
    [8434:6944][2017-07-04T23:38:09]i007: Exit code: 0x669, restarting: Yes
    [8434:6944][2017-07-04T23:38:09]w005: Restarting computer...
    =======================================
    [2574:2578][2017-07-04T23:45:25]i001: Burn v3.10.3.3007, Windows v6.1 (Build 7601: Service Pack 1), path: C:\ProgramData\Package Cache\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}\Microsoft ATA Gateway Setup.exe
    [2574:2578][2017-07-04T23:45:25]i000: Initializing string variable 'InstallationConfigurationFilePath' to value '[WixBundleOriginalSourceFolder]\GatewayInstallationConfiguration.json'
    [2574:2578][2017-07-04T23:45:25]i000: Initializing hidden variable 'ConsoleAccountPassword'
    [2574:2578][2017-07-04T23:45:25]i000: Initializing hidden variable 'ManagementAuthenticationToken'
    [2574:2578][2017-07-04T23:45:25]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
    [2574:2578][2017-07-04T23:45:25]i009: Command Line: '"-burn.clean.room=C:\ProgramData\Package Cache\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}\Microsoft ATA Gateway Setup.exe" -burn.filehandle.attached=212 -burn.filehandle.self=220 /burn.log.append "C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609.log"'
    [2574:2578][2017-07-04T23:45:28]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609.log'
    [2574:2578][2017-07-04T23:45:28]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
    [2574:2578][2017-07-04T23:45:29]i000: Loading managed bootstrapper application.
    [2574:2578][2017-07-04T23:45:32]i000: Creating BA thread to run asynchronously.
    [2574:2578][2017-07-04T23:45:34]i100: Detect begin, 7 packages
    [2574:2578][2017-07-04T23:45:34]i000: 2017-07-04 11:45:34.9026 9588 1   Debug [\[]DeploymentModel[\]] DetectBegin [\[]Installed=False[\]]
    [2574:2578][2017-07-04T23:45:34]i000: Setting string variable 'NetFrameworkRegistryValue' to value '394271'
    [2574:2578][2017-07-04T23:45:34]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
    [2574:2578][2017-07-04T23:45:34]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels'
    [2574:2578][2017-07-04T23:45:34]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB3047154_RTM~31bf3856ad364e35~amd64~~6.3.2.0'
    [2574:2578][2017-07-04T23:45:34]i000: Setting numeric variable 'KB3047154Exists' to value 0
    [2574:2578][2017-07-04T23:45:34]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to true.
    [2574:2578][2017-07-04T23:45:34]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to true.
    [2574:2578][2017-07-04T23:45:34]i052: Condition 'KB3047154Exists' evaluates to false.
    [2574:2578][2017-07-04T23:45:34]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: Complete
    [2574:2578][2017-07-04T23:45:34]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: Complete
    [2574:2578][2017-07-04T23:45:34]i101: Detected package: KB3047154Package, state: Absent, cached: None
    [2574:2578][2017-07-04T23:45:34]i101: Detected package: VcRedistributable2013Package, state: Absent, cached: None
    [2574:2578][2017-07-04T23:45:34]i101: Detected package: PefNdisDriver, state: Absent, cached: None
    [2574:2578][2017-07-04T23:45:34]i101: Detected package: BundleActionsPackage, state: Absent, cached: None
    [2574:2578][2017-07-04T23:45:34]i101: Detected package: MsiPackage, state: Absent, cached: None
    [2574:2578][2017-07-04T23:45:34]i199: Detect complete, result: 0x0
    [2574:2520][2017-07-04T23:45:34]i000: 2017-07-04 11:45:34.9650 9588 5   Debug [\[]DeploymentModel[\]] [\[]DeploymentAction=Install[\]]
    [2574:2520][2017-07-04T23:45:35]i000: 2017-07-04 11:45:35.1990 9588 5   Debug [\[]DeploymentModel[\]] [\[]IsAfterRestartAndConfigured=False[\]]
    [2574:2520][2017-07-04T23:45:52]i000: Setting string variable 'IsConfigured' to value 'True'
    [2574:2520][2017-07-04T23:45:52]i000: Setting string variable 'InstallationPath' to value 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway'
    [2574:2520][2017-07-04T23:45:52]i000: Unsetting variable 'CertificateThumbprint'
    [2574:2520][2017-07-04T23:45:52]i000: Setting hidden variable 'ManagementAuthenticationToken'
    [2574:2520][2017-07-04T23:45:52]i000: Setting string variable 'BundleActionsConfiguration' to value 'ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A'
    [2574:2578][2017-07-04T23:45:52]i200: Plan begin, 7 packages, action: Install
    [2574:2578][2017-07-04T23:45:52]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
    [2574:2578][2017-07-04T23:45:52]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
    [2574:2578][2017-07-04T23:45:52]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
    [2574:2578][2017-07-04T23:45:52]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
    [2574:2578][2017-07-04T23:45:52]i052: Condition 'VersionNT64 = v6.3 AND NTProductType <> 2' evaluates to false.
    [2574:2578][2017-07-04T23:45:52]w321: Skipping dependency registration on package with no dependency providers: KB3047154Package
    [2574:2578][2017-07-04T23:45:52]w321: Skipping dependency registration on package with no dependency providers: VcRedistributable2013Package
    [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleLog_VcRedistributable2013Package' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_000_VcRedistributable2013Package.log'
    [2574:2578][2017-07-04T23:45:52]i052: Condition 'VersionNT64 = v6.1 OR VersionNT64 = v6.2' evaluates to true.
    [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleRollbackLog_PefNdisDriver' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_001_PefNdisDriver_rollback.log'
    [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleLog_PefNdisDriver' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_001_PefNdisDriver.log'
    [2574:2578][2017-07-04T23:45:52]w321: Skipping dependency registration on package with no dependency providers: BundleActionsPackage
    [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleLog_BundleActionsPackage' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_002_BundleActionsPackage.log'
    [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleRollbackLog_BundleActionsPackage' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_002_BundleActionsPackage_rollback.log'
    [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleRollbackLog_MsiPackage' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_003_MsiPackage_rollback.log'
    [2574:2578][2017-07-04T23:45:52]i000: Setting string variable 'WixBundleLog_MsiPackage' to value 'C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_003_MsiPackage.log'
    [2574:2578][2017-07-04T23:45:52]i201: Planned package: NetFrameworkPackageServer, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [2574:2578][2017-07-04T23:45:52]i201: Planned package: NetFrameworkPackageServerCore, state: Present, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [2574:2578][2017-07-04T23:45:52]i201: Planned package: KB3047154Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [2574:2578][2017-07-04T23:45:52]i201: Planned package: VcRedistributable2013Package, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: None, cache: Yes, uncache: No, dependency: None
    [2574:2578][2017-07-04T23:45:52]i201: Planned package: PefNdisDriver, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
    [2574:2578][2017-07-04T23:45:52]i201: Planned package: BundleActionsPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: None
    [2574:2578][2017-07-04T23:45:52]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
    [2574:2578][2017-07-04T23:45:52]i299: Plan complete, result: 0x0
    [2574:2578][2017-07-04T23:45:52]i300: Apply begin
    [2574:2578][2017-07-04T23:45:52]i010: Launching elevated engine process.
    [2574:2578][2017-07-04T23:45:52]i011: Launched elevated engine process.
    [2574:2578][2017-07-04T23:45:52]i012: Connected to elevated engine.
    [0324:10A8][2017-07-04T23:45:52]i358: Pausing automatic updates.
    [0324:10A8][2017-07-04T23:45:54]i359: Paused automatic updates.
    [0324:10A8][2017-07-04T23:45:54]i360: Creating a system restore point.
    [0324:10A8][2017-07-04T23:45:54]i362: System restore disabled, system restore point not created.
    [0324:10A8][2017-07-04T23:45:54]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: Active, restart initiated: No, disable resume: No
    [2574:2398][2017-07-04T23:45:55]i336: Acquiring container: WixAttachedContainer, copy from: C:\Utils\ATA\Microsoft ATA Gateway Setup.exe
    [2574:2398][2017-07-04T23:45:55]i000: Setting string variable 'WixBundleLastUsedSource' to value 'C:\Utils\ATA\'
    [0324:25A4][2017-07-04T23:45:56]i305: Verified acquired payload: VcRedistributable2013Package at path: C:\ProgramData\Package Cache\.unverified\VcRedistributable2013Package, moving to: C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe.
    [0324:25A4][2017-07-04T23:45:56]i305: Verified acquired payload: PefNdisDriver at path: C:\ProgramData\Package Cache\.unverified\PefNdisDriver, moving to: C:\ProgramData\Package Cache\{A80C7085-B5D8-421B-B27D-EB0FE8335996}v4.0.7541.0\PefNdisDriver.msi.
    [0324:25A4][2017-07-04T23:45:56]i305: Verified acquired payload: BundleActionsPackage at path: C:\ProgramData\Package Cache\.unverified\BundleActionsPackage, moving to: C:\ProgramData\Package Cache\1FD0DF859F6E8428D6B9FBE229775599E6A1DC39\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe.
    [0324:25A4][2017-07-04T23:45:57]i305: Verified acquired payload: MsiPackage at path: C:\ProgramData\Package Cache\.unverified\MsiPackage, moving to: C:\ProgramData\Package Cache\{17A474D5-9D32-4BD6-B838-87F2DD2380E8}v1.7.5757.57477\Microsoft.Tri.Gateway.Deployment.Package.msi.
    [0324:10A8][2017-07-04T23:45:57]i301: Applying execute package: VcRedistributable2013Package, action: Install, path: C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe, arguments: '"C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe" /quiet /norestart'
    [2574:2578][2017-07-04T23:45:59]i319: Applied execute package: VcRedistributable2013Package, result: 0x0, restart: None
    [0324:10A8][2017-07-04T23:45:59]i323: Registering package dependency provider: {A80C7085-B5D8-421B-B27D-EB0FE8335996}, version: 4.0.7541.0, package: PefNdisDriver
    [0324:10A8][2017-07-04T23:45:59]i301: Applying execute package: PefNdisDriver, action: Install, path: C:\ProgramData\Package Cache\{A80C7085-B5D8-421B-B27D-EB0FE8335996}v4.0.7541.0\PefNdisDriver.msi, arguments: ' ALLUSERS="1" ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7"'
    [2574:2578][2017-07-04T23:46:05]i319: Applied execute package: PefNdisDriver, result: 0x0, restart: None
    [0324:10A8][2017-07-04T23:46:05]i325: Registering dependency: {1073abb4-4e39-4b2b-b0bf-e98331eb0941} on package provider: {A80C7085-B5D8-421B-B27D-EB0FE8335996}, package: PefNdisDriver
    [0324:10A8][2017-07-04T23:46:05]i301: Applying execute package: BundleActionsPackage, action: Install, path: C:\ProgramData\Package Cache\1FD0DF859F6E8428D6B9FBE229775599E6A1DC39\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe, arguments: '"C:\ProgramData\Package Cache\1FD0DF859F6E8428D6B9FBE229775599E6A1DC39\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe" Configuration="ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A" LogPath="C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_002_BundleActionsPackage.log"'
    [2574:2578][2017-07-04T23:46:08]i319: Applied execute package: BundleActionsPackage, result: 0x0, restart: None
    [0324:10A8][2017-07-04T23:46:08]i323: Registering package dependency provider: {17A474D5-9D32-4BD6-B838-87F2DD2380E8}, version: 1.7.5757.57477, package: MsiPackage
    [0324:10A8][2017-07-04T23:46:08]i301: Applying execute package: MsiPackage, action: Install, path: C:\ProgramData\Package Cache\{17A474D5-9D32-4BD6-B838-87F2DD2380E8}v1.7.5757.57477\Microsoft.Tri.Gateway.Deployment.Package.msi, arguments: ' ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7" InstalledVersion="" InstallationConfigurationFilePath="C:\Utils\ATA\\GatewayInstallationConfiguration.json" InstallationPath="C:\Program Files\Microsoft Advanced Threat Analytics\Gateway" CertificateThumbprint="" ManagementAuthenticationToken="*****"'
    [2574:2578][2017-07-04T23:47:43]i319: Applied execute package: MsiPackage, result: 0x0, restart: None
    [0324:10A8][2017-07-04T23:47:43]i325: Registering dependency: {1073abb4-4e39-4b2b-b0bf-e98331eb0941} on package provider: {17A474D5-9D32-4BD6-B838-87F2DD2380E8}, package: MsiPackage
    [0324:10A8][2017-07-04T23:47:43]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: ARP, restart: None, disable resume: No
    [0324:10A8][2017-07-04T23:47:43]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}, resume: ARP, restart initiated: No, disable resume: No
    [2574:2578][2017-07-04T23:47:43]i399: Apply complete, result: 0x0, restart: None, ba requested restart:  No
    [2574:2520][2017-07-04T23:49:44]i000: 2017-07-04 11:49:44.5778 9588 5   Debug [\[]GatewayBootstrapperApplication[\]] Engine.Quit [\[]deploymentResultStatus=0 isRestartRequired=False[\]]
    [2574:2578][2017-07-04T23:49:44]i500: Shutting down, exit code: 0x0
    [2574:2578][2017-07-04T23:49:44]i410: Variable: BundleActionsConfiguration = ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A
    [2574:2578][2017-07-04T23:49:44]i410: Variable: InstallationConfigurationFilePath = C:\Utils\ATA\\GatewayInstallationConfiguration.json
    [2574:2578][2017-07-04T23:49:44]i410: Variable: InstallationPath = C:\Program Files\Microsoft Advanced Threat Analytics\Gateway
    [2574:2578][2017-07-04T23:49:44]i410: Variable: IsConfigured = True
    [2574:2578][2017-07-04T23:49:44]i410: Variable: KB3047154Exists = 0
    [2574:2578][2017-07-04T23:49:44]i410: Variable: ManagementAuthenticationToken = *****
    [2574:2578][2017-07-04T23:49:44]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
    [2574:2578][2017-07-04T23:49:44]i410: Variable: NetFrameworkRegistryValue = 394271
    [2574:2578][2017-07-04T23:49:44]i410: Variable: NTProductType = 2
    [2574:2578][2017-07-04T23:49:44]i410: Variable: VersionNT64 = 6.1.0.0
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleAction = 5
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleElevated = 1
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLastUsedSource = C:\Utils\ATA\
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLog = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609.log
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLog_BundleActionsPackage = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_002_BundleActionsPackage.log
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLog_MsiPackage = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_003_MsiPackage.log
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLog_PefNdisDriver = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_001_PefNdisDriver.log
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleLog_VcRedistributable2013Package = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_000_VcRedistributable2013Package.log
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleManufacturer = Microsoft Corporation
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleName = Microsoft Advanced Threat Analytics Gateway
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleOriginalSource = C:\Utils\ATA\Microsoft ATA Gateway Setup.exe
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleOriginalSourceFolder = C:\Utils\ATA\
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleProviderKey = {1073abb4-4e39-4b2b-b0bf-e98331eb0941}
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleRollbackLog_BundleActionsPackage = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_002_BundleActionsPackage_rollback.log
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleRollbackLog_MsiPackage = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_003_MsiPackage_rollback.log
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleRollbackLog_PefNdisDriver = C:\Users\xxxxxx\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170704230609_001_PefNdisDriver_rollback.log
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleSourceProcessFolder = C:\ProgramData\Package Cache\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}\
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleSourceProcessPath = C:\ProgramData\Package Cache\{1073abb4-4e39-4b2b-b0bf-e98331eb0941}\Microsoft ATA Gateway Setup.exe
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleTag = 
    [2574:2578][2017-07-04T23:49:44]i410: Variable: WixBundleVersion = 1.7.5757.57477
    [2574:2578][2017-07-04T23:49:46]i007: Exit code: 0x0, restarting: No
    


    Thursday, September 28, 2017 5:02 AM