locked
Problem installing Lightweight gateway 1.8.6765 RRS feed

  • Question

  • I am having problems installing the lightweight gateway on almost all of our DCs.  I was able to successfully install a lightweight gateway on our one DC that is running server 2016.  All the rest of the DCs are running server 2012r2 and fail every time.  I have verified that all the KBs are installed and I have tried all the difference fixes online.  I have also tried the running the exe with PSexec but I am absolutely unable to get this installed on any DC with Server 2012R2.  any help would be greatly appreciated.  I attached the log file below

    [30EC:17F4][2017-08-28T10:51:36]i001: Burn v3.11.0.1701, Windows v6.3 (Build 9600: Service Pack 0), path: C:\Users\administrator\AppData\Local\Temp\3\{63073131-4E95-4ABD-ADC7-D3845D0DA484}\.cr\Microsoft ATA Gateway Setup.exe
    [30EC:17F4][2017-08-28T10:51:36]i000: Initializing string variable 'InstallationConfigurationFilePath' to value '[WixBundleOriginalSourceFolder]\GatewayInstallationConfiguration.json'
    [30EC:17F4][2017-08-28T10:51:36]i000: Initializing hidden variable 'ConsoleAccountPassword'
    [30EC:17F4][2017-08-28T10:51:36]i000: Initializing hidden variable 'ManagementAuthenticationToken'
    [30EC:17F4][2017-08-28T10:51:36]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
    [30EC:17F4][2017-08-28T10:51:36]i009: Command Line: '"-burn.clean.room=C:\temp\Microsoft ATA Gateway Setup-1-8-2\Microsoft ATA Gateway Setup.exe" -burn.filehandle.attached=288 -burn.filehandle.self=296'
    [30EC:17F4][2017-08-28T10:51:36]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\temp\Microsoft ATA Gateway Setup-1-8-2\Microsoft ATA Gateway Setup.exe'
    [30EC:17F4][2017-08-28T10:51:36]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\temp\Microsoft ATA Gateway Setup-1-8-2\'
    [30EC:17F4][2017-08-28T10:51:36]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\administrator\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828105136.log'
    [30EC:17F4][2017-08-28T10:51:36]i000: Setting string variable 'WixBundleName' to value 'Microsoft Advanced Threat Analytics Gateway'
    [30EC:17F4][2017-08-28T10:51:36]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
    [30EC:17F4][2017-08-28T10:51:36]i000: Loading managed bootstrapper application.
    [30EC:17F4][2017-08-28T10:51:37]i000: Creating BA thread to run asynchronously.
    [30EC:17F4][2017-08-28T10:51:37]i100: Detect begin, 7 packages
    [30EC:17F4][2017-08-28T10:51:37]i000: 2017-08-28 14:51:37.6938 12524 1   Debug [\[]DeploymentModel[\]] DetectBegin [\[]Installed=False[\]]
    [30EC:17F4][2017-08-28T10:51:37]i000: Setting string variable 'NetFrameworkRegistryValue' to value '394271'
    [30EC:17F4][2017-08-28T10:51:37]i000: Setting string variable 'ServerLevelsServerCoreRegistryValue' to value '1'
    [30EC:17F4][2017-08-28T10:51:37]i000: Setting string variable 'ServerLevelsServerGuiShellRegistryValue' to value '1'
    [30EC:17F4][2017-08-28T10:51:37]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB3047154_RTM~31bf3856ad364e35~amd64~~6.3.2.0'
    [30EC:17F4][2017-08-28T10:51:37]i000: Setting numeric variable 'KB3047154Exists' to value 0
    [30EC:17F4][2017-08-28T10:51:37]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to true.
    [30EC:17F4][2017-08-28T10:51:37]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to true.
    [30EC:17F4][2017-08-28T10:51:37]i052: Condition 'KB3047154Exists' evaluates to false.
    [30EC:17F4][2017-08-28T10:51:37]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: None
    [30EC:17F4][2017-08-28T10:51:37]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: None
    [30EC:17F4][2017-08-28T10:51:37]i101: Detected package: KB3047154Package, state: Absent, cached: None
    [30EC:17F4][2017-08-28T10:51:37]i101: Detected package: VcRedistributable2013Package, state: Absent, cached: None
    [30EC:17F4][2017-08-28T10:51:37]i101: Detected package: PefNdisDriver, state: Absent, cached: None
    [30EC:17F4][2017-08-28T10:51:37]i101: Detected package: BundleActionsPackage, state: Absent, cached: None
    [30EC:17F4][2017-08-28T10:51:37]i101: Detected package: MsiPackage, state: Absent, cached: None
    [30EC:17F4][2017-08-28T10:51:37]i199: Detect complete, result: 0x0
    [30EC:1260][2017-08-28T10:51:37]i000: 2017-08-28 14:51:37.7088 12524 5   Debug [\[]DeploymentModel[\]] [\[]DeploymentAction=Install[\]]
    [30EC:1260][2017-08-28T10:51:37]i000: 2017-08-28 14:51:37.8458 12524 5   Debug [\[]DeploymentModel[\]] [\[]IsAfterRestartAndConfigured=False[\]]
    [30EC:1260][2017-08-28T10:51:43]i000: Setting string variable 'IsConfigured' to value 'True'
    [30EC:1260][2017-08-28T10:51:43]i000: Setting string variable 'InstallationPath' to value 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway'
    [30EC:1260][2017-08-28T10:51:43]i000: Setting hidden variable 'ManagementAuthenticationToken'
    [30EC:1260][2017-08-28T10:51:43]i000: Setting string variable 'BundleActionsConfiguration' to value 'ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A'
    [30EC:17F4][2017-08-28T10:51:43]i200: Plan begin, 7 packages, action: Install
    [30EC:17F4][2017-08-28T10:51:43]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
    [30EC:17F4][2017-08-28T10:51:43]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
    [30EC:17F4][2017-08-28T10:51:43]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
    [30EC:17F4][2017-08-28T10:51:43]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
    [30EC:17F4][2017-08-28T10:51:43]i052: Condition 'VersionNT64 = v6.3 AND ((NTProductType <> 2) OR (ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1))' evaluates to false.
    [30EC:17F4][2017-08-28T10:51:43]w321: Skipping dependency registration on package with no dependency providers: KB3047154Package
    [30EC:17F4][2017-08-28T10:51:43]w321: Skipping dependency registration on package with no dependency providers: VcRedistributable2013Package
    [30EC:17F4][2017-08-28T10:51:43]i000: Setting string variable 'WixBundleLog_VcRedistributable2013Package' to value 'C:\Users\administrator\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828105136_000_VcRedistributable2013Package.log'
    [30EC:17F4][2017-08-28T10:51:43]i052: Condition 'VersionNT64 = v6.1 OR VersionNT64 = v6.2' evaluates to false.
    [30EC:17F4][2017-08-28T10:51:43]w321: Skipping dependency registration on package with no dependency providers: BundleActionsPackage
    [30EC:17F4][2017-08-28T10:51:43]i000: Setting string variable 'WixBundleLog_BundleActionsPackage' to value 'C:\Users\administrator\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828105136_001_BundleActionsPackage.log'
    [30EC:17F4][2017-08-28T10:51:43]i000: Setting string variable 'WixBundleRollbackLog_BundleActionsPackage' to value 'C:\Users\administrator\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828105136_001_BundleActionsPackage_rollback.log'
    [30EC:17F4][2017-08-28T10:51:43]i000: Setting string variable 'WixBundleRollbackLog_MsiPackage' to value 'C:\Users\administrator\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828105136_002_MsiPackage_rollback.log'
    [30EC:17F4][2017-08-28T10:51:43]i000: Setting string variable 'WixBundleLog_MsiPackage' to value 'C:\Users\administrator\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828105136_002_MsiPackage.log'
    [30EC:17F4][2017-08-28T10:51:43]i201: Planned package: NetFrameworkPackageServer, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [30EC:17F4][2017-08-28T10:51:43]i201: Planned package: NetFrameworkPackageServerCore, state: Present, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [30EC:17F4][2017-08-28T10:51:43]i201: Planned package: KB3047154Package, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [30EC:17F4][2017-08-28T10:51:43]i201: Planned package: VcRedistributable2013Package, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: None, cache: Yes, uncache: No, dependency: None
    [30EC:17F4][2017-08-28T10:51:43]i201: Planned package: PefNdisDriver, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [30EC:17F4][2017-08-28T10:51:43]i201: Planned package: BundleActionsPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: None
    [30EC:17F4][2017-08-28T10:51:43]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
    [30EC:17F4][2017-08-28T10:51:43]i299: Plan complete, result: 0x0
    [30EC:17F4][2017-08-28T10:51:43]i300: Apply begin
    [30EC:17F4][2017-08-28T10:51:43]i010: Launching elevated engine process.
    [30EC:17F4][2017-08-28T10:51:44]i011: Launched elevated engine process.
    [30EC:17F4][2017-08-28T10:51:44]i012: Connected to elevated engine.
    [1F50:10F0][2017-08-28T10:51:44]i358: Pausing automatic updates.
    [1F50:10F0][2017-08-28T10:51:44]i359: Paused automatic updates.
    [1F50:10F0][2017-08-28T10:51:44]i360: Creating a system restore point.
    [1F50:10F0][2017-08-28T10:51:44]i362: System restore disabled, system restore point not created.
    [1F50:10F0][2017-08-28T10:51:44]i370: Session begin, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f3820f6f-053f-4ef2-847c-6da3941f9062}, options: 0x7, disable resume: No
    [1F50:10F0][2017-08-28T10:51:44]i000: Caching bundle from: 'C:\Users\administrator\AppData\Local\Temp\3\{A7BE6AB9-8DBC-43DA-9EDA-0D7C31002909}\.be\Microsoft ATA Gateway Setup.exe' to: 'C:\ProgramData\Package Cache\{f3820f6f-053f-4ef2-847c-6da3941f9062}\Microsoft ATA Gateway Setup.exe'
    [1F50:10F0][2017-08-28T10:51:44]i320: Registering bundle dependency provider: {f3820f6f-053f-4ef2-847c-6da3941f9062}, version: 1.8.6765.36693
    [1F50:10F0][2017-08-28T10:51:44]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f3820f6f-053f-4ef2-847c-6da3941f9062}, resume: Active, restart initiated: No, disable resume: No
    [1F50:2C04][2017-08-28T10:51:44]i305: Verified acquired payload: VcRedistributable2013Package at path: C:\ProgramData\Package Cache\.unverified\VcRedistributable2013Package, moving to: C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe.
    [1F50:2C04][2017-08-28T10:51:44]i305: Verified acquired payload: BundleActionsPackage at path: C:\ProgramData\Package Cache\.unverified\BundleActionsPackage, moving to: C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe.
    [1F50:2C04][2017-08-28T10:51:44]i305: Verified acquired payload: MsiPackage at path: C:\ProgramData\Package Cache\.unverified\MsiPackage, moving to: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi.
    [1F50:10F0][2017-08-28T10:51:44]i301: Applying execute package: VcRedistributable2013Package, action: Install, path: C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe, arguments: '"C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe" /quiet /norestart'
    [30EC:17F4][2017-08-28T10:51:45]i319: Applied execute package: VcRedistributable2013Package, result: 0x0, restart: None
    [1F50:10F0][2017-08-28T10:51:45]i301: Applying execute package: BundleActionsPackage, action: Install, path: C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe, arguments: '"C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe" Configuration="ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A" LogPath="C:\Users\administrator\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828105136_001_BundleActionsPackage.log"'
    [30EC:17F4][2017-08-28T10:51:47]i319: Applied execute package: BundleActionsPackage, result: 0x0, restart: None
    [1F50:10F0][2017-08-28T10:51:47]i323: Registering package dependency provider: {E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}, version: 1.8.6765.36693, package: MsiPackage
    [1F50:10F0][2017-08-28T10:51:47]i301: Applying execute package: MsiPackage, action: Install, path: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi, arguments: ' ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7" InstalledVersion="" InstallationConfigurationFilePath="C:\temp\Microsoft ATA Gateway Setup-1-8-2\\GatewayInstallationConfiguration.json" InstallationPath="C:\Program Files\Microsoft Advanced Threat Analytics\Gateway" ManagementAuthenticationToken="*****"'
    [1F50:10F0][2017-08-28T10:52:22]e000: Error 0x80070643: Failed to install MSI package.
    [1F50:10F0][2017-08-28T10:52:22]e000: Error 0x80070643: Failed to execute MSI package.
    [30EC:17F4][2017-08-28T10:52:22]e000: Error 0x80070643: Failed to configure per-machine MSI package.
    [30EC:17F4][2017-08-28T10:52:22]i000: 2017-08-28 14:52:22.0821 12524 1   Error [\[]DeploymentProgress[\]] [\[]methodName=BootstrapperApplication_ExecutePackageComplete status=-2147023293 exception=[\]]
    [30EC:17F4][2017-08-28T10:52:22]i319: Applied execute package: MsiPackage, result: 0x80070643, restart: None
    [30EC:17F4][2017-08-28T10:52:22]e000: Error 0x80070643: Failed to execute MSI package.
    [1F50:10F0][2017-08-28T10:52:22]i318: Skipped rollback of package: MsiPackage, action: Uninstall, already: Absent
    [30EC:17F4][2017-08-28T10:52:22]i319: Applied rollback package: MsiPackage, result: 0x0, restart: None
    [1F50:10F0][2017-08-28T10:52:22]i329: Removed package dependency provider: {E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}, package: MsiPackage
    [1F50:10F0][2017-08-28T10:52:22]i351: Removing cached package: MsiPackage, from path: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\
    [1F50:10F0][2017-08-28T10:52:22]i301: Applying rollback package: BundleActionsPackage, action: Uninstall, path: C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe, arguments: '"C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe" IsUninstallation="True" Configuration="ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A" LogPath="C:\Users\administrator\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828105136_001_BundleActionsPackage.log"'
    [30EC:17F4][2017-08-28T10:52:23]i319: Applied rollback package: BundleActionsPackage, result: 0x0, restart: None
    [1F50:10F0][2017-08-28T10:52:23]i351: Removing cached package: BundleActionsPackage, from path: C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\
    [1F50:10F0][2017-08-28T10:52:23]i329: Removed package dependency provider: {A80C7085-B5D8-421B-B27D-EB0FE8335996}, package: PefNdisDriver
    [1F50:10F0][2017-08-28T10:52:23]i351: Removing cached package: VcRedistributable2013Package, from path: C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\
    [1F50:10F0][2017-08-28T10:52:23]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f3820f6f-053f-4ef2-847c-6da3941f9062}, resume: None, restart: None, disable resume: No
    [1F50:10F0][2017-08-28T10:52:23]i330: Removed bundle dependency provider: {f3820f6f-053f-4ef2-847c-6da3941f9062}
    [1F50:10F0][2017-08-28T10:52:23]i352: Removing cached bundle: {f3820f6f-053f-4ef2-847c-6da3941f9062}, from path: C:\ProgramData\Package Cache\{f3820f6f-053f-4ef2-847c-6da3941f9062}\
    [1F50:10F0][2017-08-28T10:52:23]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f3820f6f-053f-4ef2-847c-6da3941f9062}, resume: None, restart initiated: No, disable resume: No
    [30EC:17F4][2017-08-28T10:52:23]i399: Apply complete, result: 0x80070643, restart: None, ba requested restart:  No
    

    Monday, August 28, 2017 2:56 PM

All replies

  • can you share all the deployment logs according to this article?

    https://docs.microsoft.com/en-us/advanced-threat-analytics/troubleshooting-ata-using-logs#ata-deployment-logs

    The one you already shared does not have the info we need.

    Monday, August 28, 2017 4:40 PM
  • Ok, here is all the logs:

    [10C0:1DF0][2017-08-28T08:41:21]i001: Burn v3.11.0.1701, Windows v6.3 (Build 9600: Service Pack 0), path: C:\Users\stda-jon.marte\AppData\Local\Temp\3\{58869206-B03A-4E59-84F9-974E4AEA78DB}\.cr\Microsoft ATA Gateway Setup.exe
    [10C0:1DF0][2017-08-28T08:41:21]i000: Initializing string variable 'InstallationConfigurationFilePath' to value '[WixBundleOriginalSourceFolder]\GatewayInstallationConfiguration.json'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Initializing hidden variable 'ConsoleAccountPassword'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Initializing hidden variable 'ManagementAuthenticationToken'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
    [10C0:1DF0][2017-08-28T08:41:21]i009: Command Line: '"-burn.clean.room=C:\Users\stda-jon.marte\Desktop\Microsoft ATA Gateway Setup1-8\Microsoft ATA Gateway Setup.exe" -burn.filehandle.attached=316 -burn.filehandle.self=324'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Users\stda-jon.marte\Desktop\Microsoft ATA Gateway Setup1-8\Microsoft ATA Gateway Setup.exe'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Users\stda-jon.marte\Desktop\Microsoft ATA Gateway Setup1-8\'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\stda-jon.marte\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828084121.log'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Setting string variable 'WixBundleName' to value 'Microsoft Advanced Threat Analytics Gateway'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Loading managed bootstrapper application.
    [10C0:1DF0][2017-08-28T08:41:21]i000: Creating BA thread to run asynchronously.
    [10C0:1DF0][2017-08-28T08:41:21]i100: Detect begin, 7 packages
    [10C0:1DF0][2017-08-28T08:41:21]i000: 2017-08-28 12:41:21.8405 4288 1   Debug [\[]DeploymentModel[\]] DetectBegin [\[]Installed=False[\]]
    [10C0:1DF0][2017-08-28T08:41:21]i000: Setting string variable 'NetFrameworkRegistryValue' to value '460805'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Setting string variable 'ServerLevelsServerCoreRegistryValue' to value '1'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Setting string variable 'ServerLevelsServerGuiShellRegistryValue' to value '1'
    [10C0:1DF0][2017-08-28T08:41:21]i000: Setting numeric variable 'KB3047154Exists' to value 1
    [10C0:1DF0][2017-08-28T08:41:21]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to true.
    [10C0:1DF0][2017-08-28T08:41:21]i052: Condition 'NetFrameworkRegistryValue >= 394254' evaluates to true.
    [10C0:1DF0][2017-08-28T08:41:21]i052: Condition 'KB3047154Exists' evaluates to true.
    [10C0:1DF0][2017-08-28T08:41:21]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: None
    [10C0:1DF0][2017-08-28T08:41:21]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: None
    [10C0:1DF0][2017-08-28T08:41:21]i101: Detected package: KB3047154Package, state: Present, cached: None
    [10C0:1DF0][2017-08-28T08:41:21]i101: Detected package: VcRedistributable2013Package, state: Absent, cached: None
    [10C0:1DF0][2017-08-28T08:41:21]i101: Detected package: PefNdisDriver, state: Absent, cached: None
    [10C0:1DF0][2017-08-28T08:41:21]i101: Detected package: BundleActionsPackage, state: Absent, cached: None
    [10C0:1DF0][2017-08-28T08:41:21]i101: Detected package: MsiPackage, state: Absent, cached: None
    [10C0:1DF0][2017-08-28T08:41:21]i199: Detect complete, result: 0x0
    [10C0:1C04][2017-08-28T08:41:21]i000: 2017-08-28 12:41:21.8405 4288 5   Debug [\[]DeploymentModel[\]] [\[]DeploymentAction=Install[\]]
    [10C0:1C04][2017-08-28T08:41:21]i000: 2017-08-28 12:41:21.9499 4288 5   Debug [\[]DeploymentModel[\]] [\[]IsAfterRestartAndConfigured=False[\]]
    [10C0:1C04][2017-08-28T08:42:34]i000: Setting string variable 'IsConfigured' to value 'True'
    [10C0:1C04][2017-08-28T08:42:34]i000: Setting string variable 'InstallationPath' to value 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway'
    [10C0:1C04][2017-08-28T08:42:34]i000: Setting hidden variable 'ManagementAuthenticationToken'
    [10C0:1C04][2017-08-28T08:42:34]i000: Setting string variable 'BundleActionsConfiguration' to value 'ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A'
    [10C0:1DF0][2017-08-28T08:42:34]i200: Plan begin, 7 packages, action: Install
    [10C0:1DF0][2017-08-28T08:42:34]i052: Condition 'ServerLevelsServerCoreRegistryValue <> 1 OR ServerLevelsServerGuiShellRegistryValue = 1' evaluates to true.
    [10C0:1DF0][2017-08-28T08:42:34]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServer
    [10C0:1DF0][2017-08-28T08:42:34]i052: Condition 'ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1' evaluates to false.
    [10C0:1DF0][2017-08-28T08:42:34]w321: Skipping dependency registration on package with no dependency providers: NetFrameworkPackageServerCore
    [10C0:1DF0][2017-08-28T08:42:34]i052: Condition 'VersionNT64 = v6.3 AND ((NTProductType <> 2) OR (ServerLevelsServerCoreRegistryValue = 1 AND ServerLevelsServerGuiShellRegistryValue <> 1))' evaluates to false.
    [10C0:1DF0][2017-08-28T08:42:34]w321: Skipping dependency registration on package with no dependency providers: KB3047154Package
    [10C0:1DF0][2017-08-28T08:42:34]w321: Skipping dependency registration on package with no dependency providers: VcRedistributable2013Package
    [10C0:1DF0][2017-08-28T08:42:34]i000: Setting string variable 'WixBundleLog_VcRedistributable2013Package' to value 'C:\Users\stda-jon.marte\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828084121_000_VcRedistributable2013Package.log'
    [10C0:1DF0][2017-08-28T08:42:34]i052: Condition 'VersionNT64 = v6.1 OR VersionNT64 = v6.2' evaluates to false.
    [10C0:1DF0][2017-08-28T08:42:34]w321: Skipping dependency registration on package with no dependency providers: BundleActionsPackage
    [10C0:1DF0][2017-08-28T08:42:34]i000: Setting string variable 'WixBundleLog_BundleActionsPackage' to value 'C:\Users\stda-jon.marte\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828084121_001_BundleActionsPackage.log'
    [10C0:1DF0][2017-08-28T08:42:34]i000: Setting string variable 'WixBundleRollbackLog_BundleActionsPackage' to value 'C:\Users\stda-jon.marte\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828084121_001_BundleActionsPackage_rollback.log'
    [10C0:1DF0][2017-08-28T08:42:34]i000: Setting string variable 'WixBundleRollbackLog_MsiPackage' to value 'C:\Users\stda-jon.marte\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828084121_002_MsiPackage_rollback.log'
    [10C0:1DF0][2017-08-28T08:42:34]i000: Setting string variable 'WixBundleLog_MsiPackage' to value 'C:\Users\stda-jon.marte\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828084121_002_MsiPackage.log'
    [10C0:1DF0][2017-08-28T08:42:34]i201: Planned package: NetFrameworkPackageServer, state: Present, default requested: Present, ba requested: Present, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [10C0:1DF0][2017-08-28T08:42:34]i201: Planned package: NetFrameworkPackageServerCore, state: Present, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [10C0:1DF0][2017-08-28T08:42:34]i201: Planned package: KB3047154Package, state: Present, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [10C0:1DF0][2017-08-28T08:42:34]i201: Planned package: VcRedistributable2013Package, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: None, cache: Yes, uncache: No, dependency: None
    [10C0:1DF0][2017-08-28T08:42:34]i201: Planned package: PefNdisDriver, state: Absent, default requested: Absent, ba requested: Absent, execute: None, rollback: None, cache: No, uncache: No, dependency: None
    [10C0:1DF0][2017-08-28T08:42:34]i201: Planned package: BundleActionsPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: None
    [10C0:1DF0][2017-08-28T08:42:34]i201: Planned package: MsiPackage, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
    [10C0:1DF0][2017-08-28T08:42:34]i299: Plan complete, result: 0x0
    [10C0:1DF0][2017-08-28T08:42:34]i300: Apply begin
    [10C0:1DF0][2017-08-28T08:42:34]i010: Launching elevated engine process.
    [10C0:1DF0][2017-08-28T08:42:34]i011: Launched elevated engine process.
    [10C0:1DF0][2017-08-28T08:42:34]i012: Connected to elevated engine.
    [0C88:1FF4][2017-08-28T08:42:34]i358: Pausing automatic updates.
    [0C88:1FF4][2017-08-28T08:42:36]i359: Paused automatic updates.
    [0C88:1FF4][2017-08-28T08:42:36]i360: Creating a system restore point.
    [0C88:1FF4][2017-08-28T08:42:36]i362: System restore disabled, system restore point not created.
    [0C88:1FF4][2017-08-28T08:42:36]i370: Session begin, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f3820f6f-053f-4ef2-847c-6da3941f9062}, options: 0x7, disable resume: No
    [0C88:1FF4][2017-08-28T08:42:36]i000: Caching bundle from: 'C:\Users\stda-jon.marte\AppData\Local\Temp\3\{B04EC60C-2249-4C8B-BAA5-4EAA2924FF36}\.be\Microsoft ATA Gateway Setup.exe' to: 'C:\ProgramData\Package Cache\{f3820f6f-053f-4ef2-847c-6da3941f9062}\Microsoft ATA Gateway Setup.exe'
    [0C88:1FF4][2017-08-28T08:42:36]i320: Registering bundle dependency provider: {f3820f6f-053f-4ef2-847c-6da3941f9062}, version: 1.8.6765.36693
    [0C88:1FF4][2017-08-28T08:42:36]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f3820f6f-053f-4ef2-847c-6da3941f9062}, resume: Active, restart initiated: No, disable resume: No
    [0C88:0D60][2017-08-28T08:42:37]i305: Verified acquired payload: VcRedistributable2013Package at path: C:\ProgramData\Package Cache\.unverified\VcRedistributable2013Package, moving to: C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe.
    [0C88:0D60][2017-08-28T08:42:37]i305: Verified acquired payload: BundleActionsPackage at path: C:\ProgramData\Package Cache\.unverified\BundleActionsPackage, moving to: C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe.
    [0C88:0D60][2017-08-28T08:42:37]i305: Verified acquired payload: MsiPackage at path: C:\ProgramData\Package Cache\.unverified\MsiPackage, moving to: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi.
    [0C88:1FF4][2017-08-28T08:42:37]i301: Applying execute package: VcRedistributable2013Package, action: Install, path: C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe, arguments: '"C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\vcredist_x64.exe" /quiet /norestart'
    [10C0:1DF0][2017-08-28T08:42:37]i319: Applied execute package: VcRedistributable2013Package, result: 0x0, restart: None
    [0C88:1FF4][2017-08-28T08:42:37]i301: Applying execute package: BundleActionsPackage, action: Install, path: C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe, arguments: '"C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe" Configuration="ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A" LogPath="C:\Users\stda-jon.marte\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828084121_001_BundleActionsPackage.log"'
    [10C0:1DF0][2017-08-28T08:42:39]i319: Applied execute package: BundleActionsPackage, result: 0x0, restart: None
    [0C88:1FF4][2017-08-28T08:42:39]i323: Registering package dependency provider: {E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}, version: 1.8.6765.36693, package: MsiPackage
    [0C88:1FF4][2017-08-28T08:42:39]i301: Applying execute package: MsiPackage, action: Install, path: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi, arguments: ' ARPSYSTEMCOMPONENT="1" MSIFASTINSTALL="7" InstalledVersion="" InstallationConfigurationFilePath="C:\Users\stda-jon.marte\Desktop\Microsoft ATA Gateway Setup1-8\\GatewayInstallationConfiguration.json" InstallationPath="C:\Program Files\Microsoft Advanced Threat Analytics\Gateway" ManagementAuthenticationToken="*****"'
    [0C88:1FF4][2017-08-28T08:42:58]e000: Error 0x80070643: Failed to install MSI package.
    [0C88:1FF4][2017-08-28T08:42:58]e000: Error 0x80070643: Failed to execute MSI package.
    [10C0:1DF0][2017-08-28T08:42:58]e000: Error 0x80070643: Failed to configure per-machine MSI package.
    [10C0:1DF0][2017-08-28T08:42:58]i000: 2017-08-28 12:42:58.4934 4288 1   Error [\[]DeploymentProgress[\]] [\[]methodName=BootstrapperApplication_ExecutePackageComplete status=-2147023293 exception=[\]]
    [10C0:1DF0][2017-08-28T08:42:58]i319: Applied execute package: MsiPackage, result: 0x80070643, restart: None
    [10C0:1DF0][2017-08-28T08:42:58]e000: Error 0x80070643: Failed to execute MSI package.
    [0C88:1FF4][2017-08-28T08:42:58]i318: Skipped rollback of package: MsiPackage, action: Uninstall, already: Absent
    [10C0:1DF0][2017-08-28T08:42:58]i319: Applied rollback package: MsiPackage, result: 0x0, restart: None
    [0C88:1FF4][2017-08-28T08:42:58]i329: Removed package dependency provider: {E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}, package: MsiPackage
    [0C88:1FF4][2017-08-28T08:42:58]i351: Removing cached package: MsiPackage, from path: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\
    [0C88:1FF4][2017-08-28T08:42:58]i301: Applying rollback package: BundleActionsPackage, action: Uninstall, path: C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe, arguments: '"C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\Microsoft.Tri.Gateway.Deployment.Bundle.Actions.exe" IsUninstallation="True" Configuration="ewAiAEQAZQBwAGwAbwB5AG0AZQBuAHQAQQBjAHQAaQBvAG4AIgA6ACIASQBuAHMAdABhAGwAbAAiACwAIgBJAHMARQBtAGIAZQBkAGQAZQBkAFUAbgBpAG4AcwB0AGEAbABsAGEAdABpAG8AbgAiADoAZgBhAGwAcwBlAH0A" LogPath="C:\Users\stda-jon.marte\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828084121_001_BundleActionsPackage.log"'
    [10C0:1DF0][2017-08-28T08:42:59]i319: Applied rollback package: BundleActionsPackage, result: 0x0, restart: None
    [0C88:1FF4][2017-08-28T08:42:59]i351: Removing cached package: BundleActionsPackage, from path: C:\ProgramData\Package Cache\4997A21AA258EF81E50F1C1574A811B1C07AB75F\
    [0C88:1FF4][2017-08-28T08:42:59]i329: Removed package dependency provider: {A80C7085-B5D8-421B-B27D-EB0FE8335996}, package: PefNdisDriver
    [0C88:1FF4][2017-08-28T08:42:59]i351: Removing cached package: VcRedistributable2013Package, from path: C:\ProgramData\Package Cache\8BF41BA9EEF02D30635A10433817DBB6886DA5A2\
    [0C88:1FF4][2017-08-28T08:42:59]i372: Session end, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f3820f6f-053f-4ef2-847c-6da3941f9062}, resume: None, restart: None, disable resume: No
    [0C88:1FF4][2017-08-28T08:42:59]i330: Removed bundle dependency provider: {f3820f6f-053f-4ef2-847c-6da3941f9062}
    [0C88:1FF4][2017-08-28T08:42:59]i352: Removing cached bundle: {f3820f6f-053f-4ef2-847c-6da3941f9062}, from path: C:\ProgramData\Package Cache\{f3820f6f-053f-4ef2-847c-6da3941f9062}\
    [0C88:1FF4][2017-08-28T08:42:59]i371: Updating session, registration key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f3820f6f-053f-4ef2-847c-6da3941f9062}, resume: None, restart initiated: No, disable resume: No
    [10C0:1DF0][2017-08-28T08:42:59]i399: Apply complete, result: 0x

    2017-08-28 12:42:39.4621 3296 1   Info  [Actions`1] IsUninstallation=False
    2017-08-28 12:42:39.4777 3296 1   Info  [Actions`1] DeploymentAction=Install
    2017-08-28 12:42:59.5559 2460 1   Info  [Actions`1] IsUninstallation=True
    2017-08-28 12:42:59.5715 2460 1   Info  [Actions`1] DeploymentAction=Install
    2017-08-28 12:42:59.5715 2460 1   Info  [Actions`1] IsEmbeddedUninstallation=False
    

    === Verbose logging started: 8/28/2017  8:42:39  Build type: SHIP UNICODE 5.00.9600.00  Calling process: C:\Users\stda-jon.marte\AppData\Local\Temp\3\{B04EC60C-2249-4C8B-BAA5-4EAA2924FF36}\.be\Microsoft ATA Gateway Setup.exe ===
    MSI (c) (88:5C) [08:42:39:587]: Resetting cached policy values
    MSI (c) (88:5C) [08:42:39:587]: Machine policy value 'Debug' is 0
    MSI (c) (88:5C) [08:42:39:587]: ******* RunEngine:
               ******* Product: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi
               ******* Action: 
               ******* CommandLine: **********
    MSI (c) (88:5C) [08:42:39:587]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (88:5C) [08:42:39:587]: Grabbed execution mutex.
    MSI (c) (88:5C) [08:42:39:696]: Cloaking enabled.
    MSI (c) (88:5C) [08:42:39:696]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (88:5C) [08:42:39:696]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (A4:28) [08:42:39:712]: Running installation inside multi-package transaction C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi
    MSI (s) (A4:28) [08:42:39:712]: Grabbed execution mutex.
    MSI (s) (A4:2C) [08:42:39:712]: Resetting cached policy values
    MSI (s) (A4:2C) [08:42:39:712]: Machine policy value 'Debug' is 0
    MSI (s) (A4:2C) [08:42:39:712]: ******* RunEngine:
               ******* Product: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi
               ******* Action: 
               ******* CommandLine: **********
    MSI (s) (A4:2C) [08:42:39:727]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (A4:2C) [08:42:39:727]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038 
    MSI (s) (A4:2C) [08:42:39:727]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (A4:2C) [08:42:39:727]: File will have security applied from OpCode.
    MSI (s) (A4:2C) [08:42:39:759]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi' against software restriction policy
    MSI (s) (A4:2C) [08:42:39:759]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi has a digital signature
    MSI (s) (A4:2C) [08:42:41:993]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi is permitted to run at the 'unrestricted' authorization level.
    MSI (s) (A4:2C) [08:42:41:993]: MSCOREE not loaded loading copy from system32
    MSI (s) (A4:2C) [08:42:42:009]: End dialog not enabled
    MSI (s) (A4:2C) [08:42:42:009]: Original package ==> C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi
    MSI (s) (A4:2C) [08:42:42:009]: Package we're running from ==> C:\Windows\Installer\716fecb.msi
    MSI (s) (A4:2C) [08:42:42:009]: APPCOMPAT: Compatibility mode property overrides found.
    MSI (s) (A4:2C) [08:42:42:009]: APPCOMPAT: looking for appcompat database entry with ProductCode '{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}'.
    MSI (s) (A4:2C) [08:42:42:009]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (A4:2C) [08:42:42:009]: Machine policy value 'TransformsSecure' is 1
    MSI (s) (A4:2C) [08:42:42:009]: Machine policy value 'DisablePatch' is 0
    MSI (s) (A4:2C) [08:42:42:009]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (A4:2C) [08:42:42:009]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (A4:2C) [08:42:42:009]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (A4:2C) [08:42:42:009]: APPCOMPAT: looking for appcompat database entry with ProductCode '{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}'.
    MSI (s) (A4:2C) [08:42:42:009]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (A4:2C) [08:42:42:009]: Transforms are not secure.
    MSI (s) (A4:2C) [08:42:42:009]: Note: 1: 2205 2:  3: Control 
    MSI (s) (A4:2C) [08:42:42:009]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\stda-jon.marte\AppData\Local\Temp\Microsoft Advanced Threat Analytics Gateway_20170828084121_002_MsiPackage.log'.
    MSI (s) (A4:2C) [08:42:42:009]: Command Line: ARPSYSTEMCOMPONENT=1 MSIFASTINSTALL=7 InstalledVersion= InstallationConfigurationFilePath=C:\Users\stda-jon.marte\Desktop\Microsoft ATA Gateway Setup1-8\\GatewayInstallationConfiguration.json InstallationPath=C:\Program Files\Microsoft Advanced Threat Analytics\Gateway ManagementAuthenticationToken=AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAQNmwPJGZo0Ki9gt0RMnytwAAAAACAAAAAAAQZgAAAAEAACAAAACaOLhZHihCXcn_90gTeZ_f1gf3ytz5Ct9EN0oAO-ObXAAAAAAOgAAAAAIAACAAAAAdYTn4VSUh8hu6EKY4c2qUm-QTc2XAfeBU3M0W5kaHldAAAAA6T96sb88B2YTkR95APv_GqPkYbCZG1O19F7wQBTDq_DsWJveqL1sU2VQENgUcQM17Y16ziahsRtMxf-R4sBG-L9Ht6l0NqYLdnDhe22EQtEvOX_0paYbwFeMO0HVssvehPgceRGDv7Hs9OiRH1OX9kcjdFPH4v6om_Wl6YFFZQSXXWPVDjsZFBMTe8MtcSIUF4amJUBr1NI20rNcEorXcrvEQfH2SKGjcfijOPmOsUHovNslsmVqu34HmYej2P-D12-13Q7KnXIzgM8vhP9hUQAAAAAh-3mL4QyM10nao8-wL8cW0lI9G_OzW69SQxcVZ8V-HztnO97Xjj8D_qgfseGz47Qx0wkbhwSjVRedIXCxWxhU REBOOT=ReallySuppress CURRENTDIRECTORY=C:\Users\stda-jon.marte\Desktop\Microsoft ATA Gateway Setup1-8 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=3208 
    MSI (s) (A4:2C) [08:42:42:009]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{939ED914-A55B-4C6D-B92E-4E7F52274F5C}'.
    MSI (s) (A4:2C) [08:42:42:009]: Product Code passed to Engine.Initialize:           ''
    MSI (s) (A4:2C) [08:42:42:009]: Product Code from property table before transforms: '{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}'
    MSI (s) (A4:2C) [08:42:42:009]: Product Code from property table after transforms:  '{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}'
    MSI (s) (A4:2C) [08:42:42:009]: Product not registered: beginning first-time install
    MSI (s) (A4:2C) [08:42:42:009]: Product {E7B0C59F-1F36-4068-9ACD-2A0AB84315D8} is not managed.
    MSI (s) (A4:2C) [08:42:42:009]: MSI_LUA: Credential prompt not required, user is an admin
    MSI (s) (A4:2C) [08:42:42:009]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
    MSI (s) (A4:2C) [08:42:42:009]: Entering CMsiConfigurationManager::SetLastUsedSource.
    MSI (s) (A4:2C) [08:42:42:009]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (A4:2C) [08:42:42:009]: Adding new sources is allowed.
    MSI (s) (A4:2C) [08:42:42:009]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
    MSI (s) (A4:2C) [08:42:42:009]: Package name extracted from package path: 'Microsoft.Tri.Gateway.Deployment.Package.msi'
    MSI (s) (A4:2C) [08:42:42:024]: Package to be registered: 'Microsoft.Tri.Gateway.Deployment.Package.msi'
    MSI (s) (A4:2C) [08:42:42:024]: Note: 1: 2205 2:  3: Error 
    MSI (s) (A4:2C) [08:42:42:024]: Note: 1: 2262 2: AdminProperties 3: -2147287038 
    MSI (s) (A4:2C) [08:42:42:024]: Machine policy value 'DisableMsi' is 0
    MSI (s) (A4:2C) [08:42:42:024]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (A4:2C) [08:42:42:024]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (A4:2C) [08:42:42:024]: Product installation will be elevated because user is admin and product is being installed per-machine.
    MSI (s) (A4:2C) [08:42:42:024]: Running product '{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}' with elevated privileges: Product is assigned.
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding ARPSYSTEMCOMPONENT property. Its value is '1'.
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding MSIFASTINSTALL property. Its value is '7'.
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding INSTALLATIONCONFIGURATIONFILEPATH property. Its value is 'C:\Users\stda-jon.marte\Desktop\Microsoft ATA Gateway Setup1-8\\GatewayInstallationConfiguration.json'.
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding INSTALLATIONPATH property. Its value is 'C:\Program Files\Microsoft Advanced Threat Analytics\Gateway'.
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding MANAGEMENTAUTHENTICATIONTOKEN property. Its value is 'AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAQNmwPJGZo0Ki9gt0RMnytwAAAAACAAAAAAAQZgAAAAEAACAAAACaOLhZHihCXcn_90gTeZ_f1gf3ytz5Ct9EN0oAO-ObXAAAAAAOgAAAAAIAACAAAAAdYTn4VSUh8hu6EKY4c2qUm-QTc2XAfeBU3M0W5kaHldAAAAA6T96sb88B2YTkR95APv_GqPkYbCZG1O19F7wQBTDq_DsWJveqL1sU2VQENgUcQM17Y16ziahsRtMxf-R4sBG-L9Ht6l0NqYLdnDhe22EQtEvOX_0paYbwFeMO0HVssvehPgceRGDv7Hs9OiRH1OX9kcjdFPH4v6om_Wl6YFFZQSXXWPVDjsZFBMTe8MtcSIUF4amJUBr1NI20rNcEorXcrvEQfH2SKGjcfijOPmOsUHovNslsmVqu34HmYej2P-D12-13Q7KnXIzgM8vhP9hUQAAAAAh-3mL4QyM10nao8-wL8cW0lI9G_OzW69SQxcVZ8V-HztnO97Xjj8D_qgfseGz47Qx0wkbhwSjVRedIXCxWxhU'.
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\stda-jon.marte\Desktop\Microsoft ATA Gateway Setup1-8'.
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '3208'.
    MSI (s) (A4:2C) [08:42:42:024]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is '1dd7243b24c16a4180f316a44896bc83'.
    MSI (s) (A4:2C) [08:42:42:024]: RESTART MANAGER: Session opened.
    MSI (s) (A4:2C) [08:42:42:024]: TRANSFORMS property is now: 
    MSI (s) (A4:2C) [08:42:42:024]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '500'.
    MSI (s) (A4:2C) [08:42:42:024]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Roaming
    MSI (s) (A4:2C) [08:42:42:024]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\Favorites
    MSI (s) (A4:2C) [08:42:42:024]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Roaming\Microsoft\Windows\Network Shortcuts
    MSI (s) (A4:2C) [08:42:42:024]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\Documents
    MSI (s) (A4:2C) [08:42:42:024]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
    MSI (s) (A4:2C) [08:42:42:024]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Roaming\Microsoft\Windows\Recent
    MSI (s) (A4:2C) [08:42:42:024]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Roaming\Microsoft\Windows\SendTo
    MSI (s) (A4:2C) [08:42:42:024]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Roaming\Microsoft\Windows\Templates
    MSI (s) (A4:2C) [08:42:42:024]: SHELL32::SHGetFolderPath returned: C:\ProgramData
    MSI (s) (A4:2C) [08:42:42:024]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Local
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\Pictures
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\AppData\Roaming\Microsoft\Windows\Start Menu
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\Users\stda-jon.marte\Desktop
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
    MSI (s) (A4:2C) [08:42:42:040]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
    MSI (s) (A4:2C) [08:42:42:040]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 
    MSI (s) (A4:2C) [08:42:42:055]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
    MSI (s) (A4:2C) [08:42:42:055]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
    MSI (s) (A4:2C) [08:42:42:055]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
    MSI (s) (A4:2C) [08:42:42:055]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'.
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
    MSI (s) (A4:2C) [08:42:42:055]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\716fecb.msi'.
    MSI (s) (A4:2C) [08:42:42:055]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Package Cache\{E7B0C59F-1F36-4068-9ACD-2A0AB84315D8}v1.8.6765.36693\Microsoft.Tri.Gateway.Deployment.Package.msi'.
    MSI (s) (A4:2C) [08:42:42:055]: Machine policy value 'MsiDisableEmbeddedUI' is 0
    MSI (s) (A4:2C) [08:42:42:055]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
    MSI (s) (A4:2C) [08:42:42:055]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 2205 2:  3: PatchPackage 
    MSI (s) (A4:2C) [08:42:42:055]: Machine policy value 'DisableRollback' is 0
    MSI (s) (A4:2C) [08:42:42:055]: User policy value 'DisableRollback' is 0
    MSI (s) (A4:2C) [08:42:42:055]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    MSI (s) (A4:2C) [08:42:42:055]: PROPERTY CHANGE: Adding MsiUISourceResOnly property. Its value is '1'.
    === Logging started: 8/28/2017  8:42:42 ===
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038 
    MSI (s) (A4:2C) [08:42:42:055]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
    MSI (s) (A4:2C) [08:42:42:055]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (A4:2C) [08:42:42:055]: Doing action: INSTALL
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 2205 2:  3: ActionText 
    Action start 8:42:42: INSTALL.
    MSI (s) (A4:2C) [08:42:42:055]: Running ExecuteSequence
    MSI (s) (A4:2C) [08:42:42:055]: Doing action: FindRelatedProducts
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 2205 2:  3: ActionText 
    Action start 8:42:42: FindRelatedProducts.
    MSI (s) (A4:2C) [08:42:42:055]: Doing action: LaunchConditions
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 2205 2:  3: ActionText 
    Action ended 8:42:42: FindRelatedProducts. Return value 1.
    Action start 8:42:42: LaunchConditions.
    MSI (s) (A4:2C) [08:42:42:055]: Doing action: ValidateProductID
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 2205 2:  3: ActionText 
    Action ended 8:42:42: LaunchConditions. Return value 1.
    Action start 8:42:42: ValidateProductID.
    MSI (s) (A4:2C) [08:42:42:055]: Doing action: CostInitialize
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 2205 2:  3: ActionText 
    Action ended 8:42:42: ValidateProductID. Return value 1.
    MSI (s) (A4:2C) [08:42:42:055]: Machine policy value 'MaxPatchCacheSize' is 10
    MSI (s) (A4:2C) [08:42:42:055]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
    MSI (s) (A4:2C) [08:42:42:055]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 2205 2:  3: Patch 
    MSI (s) (A4:2C) [08:42:42:055]: Note: 1: 220

    Monday, August 28, 2017 5:24 PM
  • It appears the content is only partially loaded.

    If you drop an email to atashare at microsoft com I can reply back with a secured workspace where you can upload the file so I can inspect them.

    Another alternative is opening a case with Premier Support.

    Monday, August 28, 2017 6:53 PM