EPO will not deploy to Windows 7 Ultimate - system error 1727

[julian.floyd]

Hi,

I am running EPO 4.6.2.

Most of my Clients are XP and WIndows 7 and all works well. I however cant deploy McAfee to my one and only Windows 7 Ultimate machine.

First there was a problem accessing the admin share so I did this:

1.Click Start, click Run, type regedit, and then press ENTER.

2.Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

3.If the LocalAccountTokenFilterPolicy registry entry does not exist, follow these steps: a.On the Edit menu, point to New, and then click DWORD Value.

b.Type LocalAccountTokenFilterPolicy, and then press ENTER.

4.Right-click LocalAccountTokenFilterPolicy, and then click Modify.

5.In the Value data box, type 1, and then click OK.

6.Exit Registry Editor.

That worked but now the EPO log says:

Failed to open ECS254 service control manager, system error 1727

Failed to get remote agent install service status. Service control manager status=-1, Err=2

Trying to install the agent without impersonation.

Push Agent Install parameter: FramePkg.exe  /Install=Agent /Silent /InstDir="<PROGRAM_FILES_DIR>\McAfee\Common Framework"

Failed to install remote agent install service. Err=1726

Push Agent Installation Program to ECS254 failed, will not retry

Can anyone please give advice on where to go from here?

Thanks,

Julian

[Former Member]

I'm i right in thinking that this computer is not on the same domain/workgroup as the ePO server and this is a credentials issue?

Have you tried just downloading the framepkg.exe installer and running it on the desktop with a right-click run-as administrator?

[julian.floyd]

Yes this machine is on the same domain as the EPO server (and all other machines), as far as I can tell it does everything else on the network as expected.

I have not tried installing locally on the client yet, I was concerned that there may be a problem with the client communicating with the EPO server even if it did install in this manner.

If I go this route, do I install VSE880.MSI or FramePkg_UPD.exe locally?

[Former Member · Accepted solution]

Not those

Either from the 'System tree' -> 'System Tree Actions' -> 'New Systems' and then choose 'Create and Download agent installation package'

This will give you a link to download FramePkg.exe

or on your ePO server navigate to

c:\program files (x86)\McAfee\ePolicy Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409\

and there's a copy of FramePkg.exe in there

[Former Member]

This installer will have all the certificates and server keys built in to install the agent in a fully managed mode and on its next ASIC the computer will appear in the 'Lost&Found' folder in your ePO system tree.

[julian.floyd]

Thanks - very much appreciated!