3 Replies Latest reply on Jan 4, 2012 12:32 AM by jaimeklein

    McAfee Agent and VSE 8.8 not installing on some machines

      We are running EPO 4.6.0 Build 1029 and trying to deploy VSE8.8.0.877 to the network. The agent version is 4.6.0.1694. EPO is running on aWindows 2008 R2 server and we have a Windows 2003 R2 domain controller. The clients are running Windows XP SP 3.

       

      I set up EPO from scratch and used the default settings and guided configuration tool to set up a deploy task, an update task, etc.

       

      I am having multiple different problems getting VSE to deploy to these machines. I have a group of 6 test machines that I formatted with the same Windows image so that they were identical and put the agent MSI into group policy to make it install on startup.

      There are some machines that aren’t installing the agent at all and some machines that are installing the agent but then refusing to install VSE.

       

      For the ones that appear as managed in the system tree, I tried to “Wake Agents” to force installation of VSE but that had no effect at all.

       

      For the unmanaged systems I was getting an error “Failed to authenticate with remote system, system error: Logon Failure: The target account name is incorrect.” Some have said that this is due to Windows firewall blocking something, or the Admin$ folder on the machine not being accessible, or possibly duplicate machine GUIDs in AD. I have checked all these and found nothing different to any of the other machines that are correctly installing the agent and VSE. They all use the same Windows image and same permissions and setup

       

      I checked the event logs and it says that the agent MSI installed successfully.

      Here is a log from the McAfee\Common Files\DB folder

       

      2011-12-28 14:11:56.656        I           #1408  FrmSvc            Stopping Subsystem <User SpaceController>

      2011-12-28 14:11:56.656        I           #1408  FrmSvc            Stopping Subsystem <Agent>

      2011-12-28 14:11:57.234        I           #1408  Agent   Agent mode is 0 ( 1 for managed mode, 0 forunmanaged mode )

      2011-12-28 14:11:57.234        x          #1408  Agent   Subsystem stopping....

      2011-12-28 14:11:57.234        I           #1804  Agent   Agent Data Channel Router thread terminating

      2011-12-28 14:11:57.250        x          #1408  Agent   Subsystem stopped

      2011-12-28 14:11:57.250        I           #1408  FrmSvc            Stopping Subsystem <Scheduler>

      2011-12-28 14:11:57.250        i           #1408  Sched   The Scheduler is shutting down

      2011-12-28 14:11:57.250        i           #1408  Sched   Scheduler is now stopped

      2011-12-28 14:11:57.265        I           #1408  FrmSvc            Stopping Subsystem <Updater>

      2011-12-28 14:11:57.281        I           #1408  updsubs            Stopping updater subsystem

      2011-12-28 14:11:57.281        i           #1408  Updater           

      2011-12-28 14:11:57.281        I           #1408  FrmSvc            Stopping Subsystem<Management>

      2011-12-28 14:11:57.297        I           #1644  Manage            Got shutdown event

      2011-12-28 14:11:57.312        I           #1644  Manage            Mangement plugin watch worker threadterminating

      2011-12-28 14:11:57.312        x          #1408  Manage            Subsystem stopped

      2011-12-28 14:11:57.375        I           #1408  LpcConnMgr   Stopping lpc connection manager

      2011-12-28 14:11:57.375        I           #1408  LpcConnMgr   Cleaning up heart beat component

      2011-12-28 14:11:57.375        I           #1408  LpcConnMgr   Cleaning up lpc server

      2011-12-28 14:11:57.375        I           #1408  WinLpcSvr       Requesting lpc server stop

      2011-12-28 14:11:57.375        I           #1784  WinLpcSvr       Received shutdown request

      2011-12-28 14:11:57.375        I           #1784  WinLpcSvr       Lpc server is down

      2011-12-28 14:11:57.375        I           #1408  LpcConnMgr   Cleaning up message queue

      2011-12-28 14:11:57.375        I           #1408  MsgQueue       Cleaning up message queue

      2011-12-28 14:11:57.375        I           #1408  MfeLpcFactory            Successfully released mfelpc objects

      2011-12-28 14:11:57.375        I           #1408  FrmSvc            Stopping Subsystem <Logging>

      2011-12-28 14:11:57.375        x          #1408  Logging           

      2011-12-28 14:11:57.437        I           #1408  FrmSvc            Service stopped

      2011-12-28 14:11:57.453        I           #1380  FrmSvc            Set COM launch permissions andservice settings

      2011-12-28 14:11:57.453        I           #1380  FrmSvc            END

      2011-12-28 14:12:11.031        I           #2324  FrmSvc            START cmdline="C:\ProgramFiles\McAfee\Common Framework\FrameworkService.exe" /ServiceStart

      2011-12-28 14:12:11.031        I           #2324  FrmSvc            ServiceStart

      2011-12-28 14:12:11.031        I           #2324  FrmSvc            Running

      2011-12-28 14:12:11.078        I           #2352  FrmSvc            Starting Subsystem <Logging>

      2011-12-28 14:12:11.078        x          #2352  Logging            Subsystem started

      2011-12-28 14:12:11.093        I           #2352  FrmSvc            Starting Subsystem <User SpaceController>

      2011-12-28 14:12:11.140        I           #2352  FrmSvc            Starting Subsystem<Management>

      2011-12-28 14:12:11.140        I           #2064  Manage            Mangement plugin watch worker threadstarted

      2011-12-28 14:12:11.140        I           #2352  Cryptshim         Initializing crypto library

      2011-12-28 14:12:11.140        I           #2352  Cryptshim         Using C:\Documents and Settings\AllUsers\Application Data\McAfee\Common Framework\keystore as keystore path

      2011-12-28 14:12:11.140        I           #2352  Cryptshim         Using C:\Program Files\McAfee\CommonFramework\FrameworkService.sig as exe signature file path

      2011-12-28 14:12:11.297        I           #2352  MfeCryptC      RSA version : NIST Library Version 2.1.0.0

      2011-12-28 14:12:11.297        I           #2352  MfeCryptC     

      2011-12-28 14:12:11.297        I           #2352  MfeCryptC      RSA crypto role : User Role

      2011-12-28 14:12:11.297        I           #2352  MfeCryptC     

      2011-12-28 14:12:11.297        I           #2352  MfeCryptC      RSA crypto mode : NON-FIPS Mode

      2011-12-28 14:12:11.297        I           #2352  MfeCryptC     

      2011-12-28 14:12:11.390        I           #2352  Cryptshim         Successfully initialized crypto library

      2011-12-28 14:12:11.422        I           #2352  Datastore         Did not find setting AssignmentList insection Policy for software ID PolicyRoot

      2011-12-28 14:12:11.453        I           #2352  LpcConnMgr   Initializing lpc data

      2011-12-28 14:12:11.453        I           #2352  LpcConnMgr   Registering software id EPOAGENT3000 with ahash value of 197307931

      2011-12-28 14:12:11.453        I           #2352  LpcConnMgr   Registering software id CMNUPD__3000 with ahash value of 1496913389

      2011-12-28 14:12:11.453        I           #2352  LpcConnMgr   Starting lpc connection manager

      2011-12-28 14:12:11.453        I           #2352  LpcConnMgr   Setting up lpc server

      2011-12-28 14:12:11.453        I           #2352  LpcConnMgr   lpc server path \\.\pipe\ma_named_pipe

      2011-12-28 14:12:11.453        I           #2352  WinLpcSvr       Initializing LPC server

      2011-12-28 14:12:11.453        I           #2352  WinLpcSvr       Using randomized name\\.\pipe\ma_named_pipe789917539 for first instance"\\.\pipe\ma_named_pipe"

      2011-12-28 14:12:11.453        I           #2352  WinLpcSvr       Setting server path to\\.\pipe\ma_named_pipe789917539

      2011-12-28 14:12:11.453        I           #2352  WinLpcSvr       Starting LPC server

      2011-12-28 14:12:11.453        I           #2352  WinLpcSvr       Creating server run thread

      2011-12-28 14:12:11.453        I           #2352  WinLpcSvr       server started successfully

      2011-12-28 14:12:11.453        I           #2352  LpcConnMgr   Setting up message queue

      2011-12-28 14:12:11.453        I           #2352  LpcConnMgr   Setting up heart beat component

      2011-12-28 14:12:11.468        x          #2352  Manage            Subsystem started

      2011-12-28 14:12:11.500        I           #2352  FrmSvc            Starting Subsystem <Updater>

      2011-12-28 14:12:11.500        I           #2352  updsubs            Starting updater subsystem

      2011-12-28 14:12:11.500        i           #2352  Updater            Subsystem started

      2011-12-28 14:12:11.515        I           #2352  FrmSvc            Starting Subsystem <Scheduler>

      2011-12-28 14:12:11.515        I           #2352  Sched   >>--CSchedule::Start

      2011-12-28 14:12:11.515        I           #2352  Sched   Glbs.szMyPlatform: WXPW:5:1:3

      2011-12-28 14:12:11.515        I           #2352  Sched   All the tasks are successfully loaded fromthe file

      2011-12-28 14:12:11.515        i           #2352  Sched   Scheduler is now running

      2011-12-28 14:12:11.515        I           #2352  Sched   <<--CSchedule::Start

      2011-12-28 14:12:11.547        I           #2352  FrmSvc            Starting Subsystem <Agent>

      2011-12-28 14:12:11.547        I           #2352  Agent   Agent mode is 0 ( 1 for managed mode, 0 forunmanaged mode )

      2011-12-28 14:12:11.547        I           #2352  Agent   Subsystem starting...

      2011-12-28 14:12:11.547        I           #2352  Agent   Subsystem started

      2011-12-28 14:12:11.547        I           #2488  Agent   Agent Data Channel Router thread started

      2011-12-28 14:12:11.547        I           #2352  FrmSvc            Service started

       

       

      Another one of these test machines appears as Managed in theSystem Tree, yet when I check the machine, there is nothing in the system tray and when I try to “Wake Agents” this is the log that EPO gives:

       

      12/28/11 2:32:06 PM Waking up agent SIDEPC03 through Agent Handler servername.domain (I haveedited this for privacy) 

      12/28/11 2:32:06 PM Waking up agent sidepc03. servername.domain using DNS name 

      12/28/11 2:32:06 PM Unknown error contacting agent 

      12/28/11 2:32:06 PM Waking up agent SIDEPC03 using NetBIOS

      12/28/11 2:32:06 PM Unknown error contacting agent 

      12/28/11 2:32:06 PM Waking up agent at IP address 10.151.33.113 

      12/28/11 2:32:06 PM Unknown error contacting agent 

      12/28/11 2:32:06 PM Wakeup agent failed 

      12/28/11 2:32:46 PM Waking up agent sidepc03. servername.domain using DNS name 

      12/28/11 2:32:46 PM Unknown error contacting agent 

      12/28/11 2:32:46 PM Waking up agent SIDEPC03 using NetBIOS

      12/28/11 2:32:46 PM  Unknownerror contacting agent 

      12/28/11 2:32:46 PM Waking up agent at IP address 10.151.33.113 

      12/28/11 2:32:46 PM Unknown error contacting agent 

      12/28/11 2:32:46 PM Wakeup agent failed 

       

      This machine has just been formatted again today and can bepinged and the Admin$ share can be browsed. I am really not sure why this machine is unable to be contacted by the EPO server.

       

      Any assistance on these issues would be greatly appreciated,

       

      Thank you

        • 1. Re: McAfee Agent and VSE 8.8 not installing on some machines
          Tristan

          I've had the

           

          Failed to authenticate with remote system, system error: Logon Failure: The target account name is incorrect

           

          before. Managed to pin point it to the fact that the computer i was trying to access had recently rebooted and had yet to update its DNS settings (in a DHCP environment)

           

          The machine i was trying to access via DNS wasn't the machine that had the IP registered in DNS.

           

          If that makes sense.

           

          ( I thought was was connecting to machine X but in fact machine Y now had the IP of machine X)

           

          A "ipconfig /flushdns" on the server and an "ipconfig /registerdns" on the client fixed it.

          1 of 1 people found this helpful
          • 2. Re: McAfee Agent and VSE 8.8 not installing on some machines

            I'm having the same problem. Last week, I installed ePO 4.6 from scratch on a Windows Server 2003 R2 and Was able to download all the needed agents and packages to the Repository. But when I try using the wizard to deploy the Mcafee agent 4.5 and the VSE 8.8 to the clients, I was only able to get 3 out of 12 Windows PC's to successfully get the A/V installed. The OS's which were successful with the installation was 1-Windows 7 HP, 1-Windows XP Pro and the server itself (W2K3-R2). The remaining PC's (9) are all Windows 7 HP and Windows Vista HP.

             

            There is no domain setup on the network. The network is just a workgroup. All the PC's are in the same workgroup and I went to each and every PC and enabled the default Local Administrator account(s) and setup the password to match on all of them.

            When using the wizard, I enter the credentials on which to use for the installation.

             

            I, also, verified that all the PC's in the workgroup and on the network are visible and are showing in the workgroup tree within ePO 4.6.

             

            I checked the 2 error logs which I found out from reading blogs and the logs state that the installation completed successfully.

            So what's confusing is why the <M> shield is not showing up on the taskbar and there are no McAfee folder created on the PC's either.

             

            So I don't know what's going on, plus, I also need help in learning how to deploy "patches" from the ePO to the client as well because I'm suspecting that I may need to apply any patch that is available for the Mcafee agent 4.5 to the clients at the same time when deploying the MA and VSE in order to get the installation to work. But of course, this idea contradicting due to that there were 3 PC's that were able to successfully get the MA and VSE installed.

             

            So, can someone help me figure out what's going on and where to begin in figuring this out?

             

            Thanks.

            B.

            • 3. Re: McAfee Agent and VSE 8.8 not installing on some machines

              Hi Tristan

               

              Thanks for the guidance in the right direction, it looked like my DNS was acting strange so I restarted all the machines and it seemed to sort the problem out.

               

              Thanks again