3 Replies Latest reply on Feb 1, 2012 7:56 AM by Attila Polinger

    Deploy Agent is failing EPO 4.5

      Hi All,

       

      Could somebody help me with this.

      We are using McAfee EPO 4.5. There are many systems falling under unmanaged state. So when we are trying to deploy agents on those servers, we are getting failed status.

       

      I am posting the log which I could get from one of the server, agent status monitor:

       

      Agent Subsystem 1/31/2012 7:29:29 AM Info Next policy enforcement in 5 minutes

      Agent Subsystem 1/31/2012 7:29:29 AM Info Agent finished Enforcing policies

      Agent Subsystem 1/31/2012 7:29:29 AM Info Agent Started Enforcing policies

      Agent Subsystem 1/31/2012 7:29:06 AM Info Agent is looking for events to upload

      Agent Monitor 1/31/2012 7:29:06 AM Detail Sending Events...

      Agent Subsystem 1/31/2012 7:29:03 AM Error CPackage::addUserInformation():  GetUserPolicyInformation() unsuccessful - 0xfffff9be

      Agent Subsystem 1/31/2012 7:29:03 AM Info Agent started performing ASCI

      Agent Monitor 1/31/2012 7:29:03 AM Detail Collecting Properties

      Agent Monitor 1/31/2012 7:28:56 AM Info Agent service is running

       

      Have already checked the COM+ Event system services. Thats enabled. Please provide a resolution on this.

        • 1. Re: Deploy Agent is failing EPO 4.5
          Attila Polinger

          Hello,

           

          I suppose you were referring to KB68274 wheny you said COM+Event services were enabled. Could you please post here the agent_computername.log (as a file) mainly as this KB article shows an example of this log in which a message similar to the red error message  of yours appeared. Maybe that log is more telling of the nature of the error.

           

          Thanks.

           

          Attila

          • 2. Re: Deploy Agent is failing EPO 4.5

            Hi Attila, Here goes the agent_computername.log: 2012-02-01 08:09:02 I #4688 Agent Sending the next batch of immediate events 2012-02-01 08:09:02 i #4688 Agent Agent is looking for events to upload 2012-02-01 08:09:02 I #4688 Agent Agent did not find any events to upload 2012-02-01 08:09:05 I #684 FrmSvc User SID is S-1-5-21-372464671-2136817329-1307212239-132541 and SessionID is 1 2012-02-01 08:09:05 i #2496 Agent Agent Started Enforcing policies 2012-02-01 08:09:05 I #2496 Agent Thread time-out occurred 2012-02-01 08:09:05 I #2496 Agent Agent policy enforcement failed, result=-1602 2012-02-01 08:09:05 i #2496 Agent Agent finished Enforcing policies 2012-02-01 08:09:05 i #2496 Agent Next policy enforcement in 5 minutes 2012-02-01 08:09:05 I #684 Logging StartReadingMessages (\\.\mailslot\{76889C92-A0C0-46e3-A4E1-1D6A5439B8DD}00000fbc, 0x7f57, 4) 2012-02-01 08:09:05 I #684 Logging - using empty 0 2012-02-01 08:09:19 i #5340 Agent Agent started performing ASCI 2012-02-01 08:09:19 I #5340 Agent Collecting Properties 2012-02-01 08:09:19 I #5340 Agent Collecting IP address using Internet Manager 2012-02-01 08:09:19 I #5340 naInet HTTP Session initialized 2012-02-01 08:09:19 I #5340 imsite Connecting to site: 10.12.1.14 on port: 443 2012-02-01 08:09:19 I #5340 naInet HTTP Session closed 2012-02-01 08:09:19 I #5340 Agent Agent is sending properties version to the ePO Server 2012-02-01 08:09:19 I #4444 Agent Started processing a package.. 2012-02-01 08:09:19 I #4444 Agent Preparing Props Version Package 2012-02-01 08:09:19 I #4444 Datastore Did not find software ID PolicyRoot 2012-02-01 08:09:19 I #4444 Datastore Did not find software ID PolicyRoot 2012-02-01 08:09:19 I #4444 Datastore Did not find software ID TaskRoot 2012-02-01 08:09:19 e #4444 Agent CPackage::addUserInformation():  GetUserPolicyInformation() unsuccessful - 0xfffff9be 2012-02-01 08:09:19 I #4444 Agent Agent communication failed, result=-1602 2012-02-01 08:09:22 I #5872 Agent Forward all events request received 2012-02-01 08:09:22 I #4688 Agent Agent event wakeup, processing events 2012-02-01 08:09:22 i #4688 Agent Agent is looking for events to upload 2012-02-01 08:09:22 I #4688 Agent Agent did not find any events to upload 2012-02-01 08:10:42 i #5340 Agent Agent started performing ASCI 2012-02-01 08:10:42 I #5340 Agent Agent is sending properties version to the ePO Server 2012-02-01 08:10:42 I #4444 Agent Started processing a package.. 2012-02-01 08:10:42 I #4444 Agent Preparing Props Version Package 2012-02-01 08:10:42 I #4444 Datastore Did not find software ID PolicyRoot 2012-02-01 08:10:42 I #4444 Datastore Did not find software ID PolicyRoot 2012-02-01 08:10:42 I #4444 Datastore Did not find software ID TaskRoot 2012-02-01 08:10:42 e #4444 Agent CPackage::addUserInformation():  GetUserPolicyInformation() unsuccessful - 0xfffff9be 2012-02-01 08:10:42 I #4444 Agent Agent communication failed, result=-1602 2012-02-01 08:10:45 I #5872 Agent Agent Enforce Policy Interface called 2012-02-01 08:10:45 i #2496 Agent Agent Started Enforcing policies 2012-02-01 08:10:45 I #2496 Agent Thread signal occurred 2012-02-01 08:10:45 I #2496 Agent Agent policy enforcement failed, result=-1602 2012-02-01 08:10:45 i #2496 Agent Agent finished Enforcing policies 2012-02-01 08:10:45 i #2496 Agent Next policy enforcement in 5 minutes 2012-02-01 08:14:22 I #4688 Agent Sending the next batch of immediate events 2012-02-01 08:14:22 i #4688 Agent Agent is looking for events to upload 2012-02-01 08:14:22 I #4688 Agent Agent did not find any events to upload 2012-02-01 08:15:45 i #2496 Agent Agent Started Enforcing policies 2012-02-01 08:15:45 I #2496 Agent Thread time-out occurred 2012-02-01 08:15:45 I #2496 Agent Agent policy enforcement failed, result=-1602 2012-02-01 08:15:45 i #2496 Agent Agent finished Enforcing policies 2012-02-01 08:15:45 i #2496 Agent Next policy enforcement in 5 minutes 2012-02-01 08:19:22 I #4688 Agent Sending the next batch of immediate events 2012-02-01 08:19:22 i #4688 Agent Agent is looking for events to upload 2012-02-01 08:19:22 I #4688 Agent Agent did not find any events to upload 2012-02-01 08:20:45 i #2496 Agent Agent Started Enforcing policies 2012-02-01 08:20:45 I #2496 Agent Thread time-out occurred 2012-02-01 08:20:45 I #2496 Agent Agent policy enforcement failed, result=-1602 2012-02-01 08:20:45 i #2496 Agent Agent finished Enforcing policies 2012-02-01 08:20:45 i #2496 Agent Next policy enforcement in 5 minutes

            • 3. Re: Deploy Agent is failing EPO 4.5
              Attila Polinger

              Alisha,

               

              interestingly you have agent communications failures as well as policy enforcement failures. I only was able to find one related kb article for a very early agent version) which attributes the 1602 return code to the Framework Service having a domain admin account as service login, rather than a local admin account.

               

              Please check the Framework service logon account. It should be a local system account.

               

              Also, this might be an unfinished agent installation  would you care to manually try an agent installation on one of the affected nodes (to see if it finishes). Please use the /install=agent /forceinstall switch.

               

              Attila