5 Replies Latest reply on Jan 10, 2011 12:40 AM by Raja

    Windows Installer hangs because of DLP 2.2 install

      It will show the last product trying to install. It could be anything not just Winzip or SMS.


      Product: WinZip 12.1 -- Error 1500. Another installation is in progress. You must complete that installation before continuing this one.


      Product: SMS Advanced Client -- Error 1704. An installation for Configuration Manager Client is currently suspended.  You must undo the changes made by that installation to continue.  Do you want to undo those changes?


      Is there a known issue with DLP pushed from the ePO console?

        • 1. Re: Windows Installer hangs because of DLP 2.2 install

          Well, DLP 9.0 causes the same problem. It happens when the DLP install doesn't reboot the system immediately and another install tries to go. We have changed our forced reboot time on the McAfee agent settings in ePO to 2 minutes, and it seems to have fixed this problem.

          • 2. Re: Windows Installer hangs because of DLP 2.2 install

            So what did you have to do to the systems to resolve the issue?  Was it a simple reboot?  How did you clear up the suspended install?

            • 3. Re: Windows Installer hangs because of DLP 2.2 install

              reg delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress /f

              reg delete "HKLM\SYSTEM\CURRENTCONTROLSET\Control\Session Manager" /v PendingFileRenameOperations /f


              Sometimes it was one of them and sometime it was both.

              • 4. Re: Windows Installer hangs because of DLP 2.2 install

                We had several machines on our network with the old 2.x Agent - according to the HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DLP\Agent\AgentVersion registry key.


                These machines would either report no DLP installed or ver 2.X in the ePo console, but the DLPAgent service was running on the remote machine and the files were present, but would not install DLP 9.0 at all.


                Trying to run the .msi directly on the machine or via remote commands just bombed out, too


                Ended up making the following batch file and pushing it at the machines with psexec from PSTools (free).  After this batch runs, it will take probably 2 reboots to get DLP 9.0 installed, if you have it installing

                as an Automated Task in ePo.


                If there are pending installs, you can kill all of the msiexec using the built in DOS command "taskkill /IM msi* /f"   - kills all processes with "msi" in the name.  Might have to use psexec to push this at a lot of machines


                Basic Steps


                1. Get list of computer names/ IP's and put into a text file and d/l psexec

                2.  run taskkill psexec command against target machines to stop pending installs - psexec -d @iplist.txt taskkill /IM msi* /f

                3. Copy batch file

                4. Push batch file with psexec and wait for the 2 reboots. (After running this batch, you can probably force an install of the DLP agent by running C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Current\DATALOSS2000\Install\0409\DLPAgentInstall.exe, then follow up with a force reboot)


                psexec -c -d @DLP_Fix_List.txt DLP_Fix.bat




                rem ******************************************************************************* **
                rem ******************************************************************************* ***
                rem Batch for Machine with old or broken DLP Machines
                rem push this at remote machines using a command line "psexec -c @iplist.txt dlp_remove.bat
                rem After a reboot, the remote machine should be able to remove/reinstall DLP
                rem ******************************************************************************* **
                rem ******************************************************************************* ***
                reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfeeDLPAgentService /v Start /f
                reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv1 /v Start /f
                reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv2 /v Start /f
                reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv3 /v Start /f
                reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv4 /v Start /f
                reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv5 /v Start /f
                rem I dont think you need the following line as it kills the McAfee Agent so I rem'd it out....
                rem reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfeeFramework /v Start /f
                rename "C:\Program Files\McAfee\DLP\Agent\fcag.exe" BAKfcag.exe
                rename "C:\Program Files\McAfee\DLP\Agent\fcags.exe" BAKfcags.exe
                rename "C:\Program Files\McAfee\DLP\Agent\fcagt.exe" BAKfcagt.exe
                rename "C:\Program Files\McAfee\DLP\Agent\fcagte.exe" BAKfcagte.exe
                rem delete the following line if you dont want an immediate reboot on the remote machine!!!!!!!!!!!!
                shutdown -r -t 0

                • 5. Re: Windows Installer hangs because of DLP 2.2 install

                  You should consider upgrading to a newer version of Host DLP.


                  Host DLP 2.2 is going to end-of-life next month.