Issue:
I am trying to install Elements Endpoint Protection Agent (EPP for Computers and EPP for Servers) on a Windows host and it failed between 80 to 99%.
In fsdiag, NetworkInstaller.log displays the following entry:
*E: MsiMessageCallback: MSI: Service 'F-Secure Hoster (Restricted)' (fsnethoster) failed to start. Verify that you have sufficient privileges to start system services.
*E: MsiHandler::RunMsi: MSI returned code 1603
Resolution:
The error message you encountered suggests that there may be missing permissions in the root directory or broken components where the WithSecure product is being installed or was previously installed. Here are some steps you can try to resolve the issue:
1. Run the WsUninstallation Tool.
2. Restart your computer.
3. Open the Windows Registry Editor (regedit).
4. Remove the key: `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\F-Secure`.
5. Remove the `C:\Program Files (x86)\F-Secure\` folder.
6. Restart your computer again.
7. Try the installation once more, ensuring that you have local administrator rights. Before proceeding, please check the following checklist for a smooth installation:
- Verify that the default permission set is in place. If you are using the default installation path (`C:\Program Files (x86)\F-Secure`), ensure that the `Program Files (x86)` directory has permissions set for `NT AUTHORITY\NETWORK SERVICE`.
- If unsure, you can reset the permissions on that specific directory back to defaults and attempt the installation again.
- Check if your Windows operating system is fully updated.
- Verify or reinstall .NET Framework 4.7.2 or a later version.
- Check or reinstall Universal CRT.
- There is a possibility that registry key HKEY_USERS\S-1-5-20 doesn't have the required permission for NETWORK SERVICE and fsnethoster is unable to create an entry there. Follow the steps below to fix the issue:
- Click Start
- Type regedit, and press Enter
- Navigate to and select registry key
-
HKEY_USERS\S-1-5-20
- Select Edit
- Select Permissions
- Click Add...
- Type NETWORK SERVICE (if you are using a non English version of Windows, this name will be different. In German for example it is Netzwerkdienst)
- Click Check Names (the name should get underlined)
- Click OK
- Check Allow checkbox for Full Control (also Read permission should be automatically allowed)
- Click Apply
- Click OK
By following these steps, you may be able to address the missing permissions issue and proceed with the installation of the WithSecure product.
If the above steps did not fix the issue, follow the workaround below to try fix the installation issue:
- Rename following files to anything else (e.g. vcruntime140_old.dll):
- On 64 bit Windows:
- On 32 bit Windows:
- Restart the computer.
Article no: 000002638