matt@securenetit.com.au

Error while installing: System error 0x534 [In progress]

79 posts in this topic

Hi there,

 

When installing KSC 10.0.3361 on a Windows Server 2012 server which is also a domain controller I get the following error:

 

Error while installing: System error 0x534 (No mapping between account names and security IDs was done.).

 

Attached are screenshots

post-428062-1360058894_thumb.png

Share this post


Link to post
Share on other sites

Avoid installing KSC on a domain controller.

 

Check OS SKU, because Datacenter Edition isn't supported yet.

 

Check account/access rights used to install KSC.

Share this post


Link to post
Share on other sites

I too am experiencing the same issue.

 

We're a fairly small company. I don't really want to buy a server just to run Kaspersky Security Center.

 

This is not Datacenter Edition. I'm running Server 2008 R2 standard.

 

I'm running the installer as the domain admin. Any other ideas?

Share this post


Link to post
Share on other sites

I have the same error. Is it possible to install KSC10 on Windows 2008 server with domain controller anyway? With version 9 i had no problem on Windows 2003 server. It's no solution for me to buy for example separate Windows 7 station maybe to install KSC10 ??

Share this post


Link to post
Share on other sites

@keysd : Standard Edition grants you two virtual machine licences, but if you have only one server it won't be of any use to you (as far as i know Hyper-v and AD mix isn't supported).

 

This is probably linked to Windows 2012 and domain controllers reinforced security, check install logs for more info. Try to launch setup as an admin.

Check the version of SQL installed by KSC - i still think it's SQL Express 2005, which isn't supported on Windows Server 2012.

 

SQL-based applications doesn't work very well on domain controllers because of security constraints. And messing up with security settings to make it work is something you really do not want to do.

 

If you are a very small company (how much clients ?) you can try to install on a Windows client - but i wouldn't recommended it.

Share this post


Link to post
Share on other sites
please show me you installation logs ( in temp folder)

 

I am new in this forum with similar error. Can you check my logfile? Ho can I show it to you? Full file is about 40Mb. Maybe enough a part of it? The biggest attachment size is 300k here.

 

Thanks for advance,

 

Lesliewednesday

Share this post


Link to post
Share on other sites

Hello, got the same Error, tried it in 1000 ways with other User Accounts. My Windows Server 2008 is not Primary DC but Backup DC, Update from SC9 to SC 10 dont worked so i uninstalled all, also the SQL Server...I lost all my Settings :(

 

http://81.169.176.243/temp.zip

Share this post


Link to post
Share on other sites
Hello, got the same Error, tried it in 1000 ways with other User Accounts. My Windows Server 2008 is not Primary DC but Backup DC, Update from SC9 to SC 10 dont worked so i uninstalled all, also the SQL Server...I lost all my Settings :(

 

http://81.169.176.243/temp.zip

Thanks. Submited bug issue 215185

Share this post


Link to post
Share on other sites

Dear All,

 

I want install the KSC10 on Windows 2003 standard (32bit) server (domain controller) and MS SQL Server 2005 standard.

I have the same problem (0x534 - No mapping between account names and security IDs was done).

I tested the Kaspersky Administrator Kit (kasp8.0.2177_adminkiten), installed and work fine in this system. But, if I upgrade to KSC 10 the install process stopped with 0x534 error.

 

I verified the the following registry subkeys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\MSSQL.X\Setup\SQLGroup

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\MSSQL.X\Setup\AGTGroup

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\MSSQL.X\Setup\FTSGroup

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\MSSQL.X\Setup\ASGroup

 

I checked the SID (with the PsGetSID) of SQLServer2005MSFTEUser$ComputerName$InstanceName and so on.

 

All is OK.

 

Which/What is the before step of the install process at the 0x534 error?

 

Thank you for your answers!

Gabor

 

This is the part of my install log:

 

MSI (s) (3C:D4) [11:43:36:603]: Executing op: ActionStart(Name=RegisterSrvNagent,Description=Registering Network Agent service,)

MSI © (50:3C) [11:43:36:572]: Creating MSIHANDLE (963) of type 790531 for thread 7228

MSI © (50:3C) [11:43:36:572]: Closing MSIHANDLE (963) of type 790531 for thread 7228

MSI (s) (3C:D4) [11:43:36:619]: Executing op: CustomActionSchedule(Action=RegisterSrvNagent,ActionType=17409,Source=BinaryData

,Target=RegisterSrvNagentCA,CustomActionData=3C3F786D6C2076657273696F6E3D22312E30

2220656E636F64696E673D225554462D38223F3E0A3C726F6F7420786D6C6E733A534F41502D454E5

63D22687474703A2F2F736368656D61732E786D6C736F61702E6F72672F736F61702F656E76656C6F

70652F2220786D6C6E733A534F41502D454E433D22687474703A2F2F736368656D61732E786D6C736

F61702E6F72672F736F61702F656E636F64696E672F2220786D6C6E733A7873693D22687474703A2F

2F7777772E77332E6F72672F323030312F584D4C536368656D612D696E7374616E63652220786D6C6

E733A7873643D22687474703A2F2F7777772E77332E6F72672F323030312F584D4C536368656D6122

20786D6C6E733A6E733D2275726E3A706572736F6E2220786D6C6E733A706172616D3D22687474703

A2F2F74656D707572692220786D6C6E733A616B6C776E67743D22687474703A2F2F74656D70757269

2E6F72672F616B6C776E67742E7873642220786D6C6E733A77757354797065733D22687474703A2F2

F6D6963726F736F66742E636F6D2F7773646C2F74797065732F2220786D6C6E733A777573436C6965

6E74536F61703D22687474703A2F2F7777772E6D6963726F736F66742E636F6D2F536F66747761726

5

MSI © (50:3C) [11:43:36:603]: Creating MSIHANDLE (964) of type 790531 for thread 7228

MSI © (50:3C) [11:43:36:603]: Closing MSIHANDLE (964) of type 790531 for thread 7228

MSI (s) (3C:D4) [11:43:36:650]: Creating MSIHANDLE (1095) of type 790536 for thread 3028

MSI (s) (3C:F8) [11:43:36:650]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI3D6.tmp, Entrypoint: RegisterSrvNagentCA

MSI (s) (3C:F8) [11:43:40:181]: Closing MSIHANDLE (1095) of type 790536 for thread 3028

MSI (s) (3C:D4) [11:43:40:181]: Executing op: ActionStart(Name=RollbackRegisterServer,Description=Unregistering Administration Server service,)

MSI (s) (3C:D4) [11:43:40:197]: Executing op: CustomActionSchedule(Action=RollbackRegisterServer,ActionType=17665,Source=Binar

yData,Target=UnregisterServerCA,CustomActionData=3C3F786D6C2076657273696F6E3D2231

2E302220656E636F64696E673D225554462D38223F3E0A3C726F6F7420786D6C6E733A534F41502D4

54E563D22687474703A2F2F736368656D61732E786D6C736F61702E6F72672F736F61702F656E7665

6C6F70652F2220786D6C6E733A534F41502D454E433D22687474703A2F2F736368656D61732E786D6

C736F61702E6F72672F736F61702F656E636F64696E672F2220786D6C6E733A7873693D2268747470

3A2F2F7777772E77332E6F72672F323030312F584D4C536368656D612D696E7374616E63652220786

D6C6E733A7873643D22687474703A2F2F7777772E77332E6F72672F323030312F584D4C536368656D

612220786D6C6E733A6E733D2275726E3A706572736F6E2220786D6C6E733A706172616D3D2268747

4703A2F2F74656D707572692220786D6C6E733A616B6C776E67743D22687474703A2F2F74656D7075

72692E6F72672F616B6C776E67742E7873642220786D6C6E733A77757354797065733D22687474703

A2F2F6D6963726F736F66742E636F6D2F7773646C2F74797065732F2220786D6C6E733A777573436C

69656E74536F61703D22687474703A2F2F7777772E6D6963726F736F66742E636F6D2F536F6674776

1

MSI (s) (3C:D4) [11:43:40:213]: Executing op: ActionStart(Name=RegisterServer,Description=Registering Administration Server service,)

MSI © (50:3C) [11:43:40:181]: Creating MSIHANDLE (965) of type 790531 for thread 7228

MSI © (50:3C) [11:43:40:181]: Closing MSIHANDLE (965) of type 790531 for thread 7228

MSI (s) (3C:D4) [11:43:40:228]: Executing op: CustomActionSchedule(Action=RegisterServer,ActionType=17409,Source=BinaryData,Ta

rget=RegisterServerCA,CustomActionData=3C3F786D6C2076657273696F6E3D22312E30222065

6E636F64696E673D225554462D38223F3E0A3C726F6F7420786D6C6E733A534F41502D454E563D226

87474703A2F2F736368656D61732E786D6C736F61702E6F72672F736F61702F656E76656C6F70652F

2220786D6C6E733A534F41502D454E433D22687474703A2F2F736368656D61732E786D6C736F61702

E6F72672F736F61702F656E636F64696E672F2220786D6C6E733A7873693D22687474703A2F2F7777

772E77332E6F72672F323030312F584D4C536368656D612D696E7374616E63652220786D6C6E733A7

873643D22687474703A2F2F7777772E77332E6F72672F323030312F584D4C536368656D612220786D

6C6E733A6E733D2275726E3A706572736F6E2220786D6C6E733A706172616D3D22687474703A2F2F7

4656D707572692220786D6C6E733A616B6C776E67743D22687474703A2F2F74656D707572692E6F72

672F616B6C776E67742E7873642220786D6C6E733A77757354797065733D22687474703A2F2F6D696

3726F736F66742E636F6D2F7773646C2F74797065732F2220786D6C6E733A777573436C69656E7453

6F61703D22687474703A2F2F7777772E6D6963726F736F66742E636F6D2F536F66747761726544697

3

MSI © (50:3C) [11:43:40:213]: Creating MSIHANDLE (966) of type 790531 for thread 7228

MSI © (50:3C) [11:43:40:213]: Closing MSIHANDLE (966) of type 790531 for thread 7228

MSI (s) (3C:D4) [11:43:40:260]: Creating MSIHANDLE (1096) of type 790536 for thread 3028

MSI (s) (3C:D8) [11:43:40:260]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI3D7.tmp, Entrypoint: RegisterServerCA

MSI (s) (3C:8C) [11:43:44:650]: Creating MSIHANDLE (1097) of type 790531 for thread 6284

MSI (s) (3C!8C) [11:46:46:903]: Application: Kaspersky Security Center Administration Server - Error 25002. Error while installing: System error 0x534

 

MSI (s) (3C:8C) [11:46:46:903]: Closing MSIHANDLE (1097) of type 790531 for thread 6284

MSI (s) (3C:D8) [11:46:46:918]: Closing MSIHANDLE (1096) of type 790536 for thread 3028

MSI © (50:3C) [11:43:44:666]: Creating MSIHANDLE (967) of type 790540 for thread 7228

Share this post


Link to post
Share on other sites

I tried to delete all registry entries manually, no chance! Then i found http://support.kaspersky.com/de/faq/?qid=207618902, that cleans whole system from Kaspersky Products... I removed also SQL2005 complete and installed 2008 from KSC10! Seems that Something goes wrong with Domain rights for the Users added by Setup (This KLAdmin, KL* Users in Domain, i also tried to delete it, they are added new in everey run of Setup), so i tried the Custom install with Domain Administrator Account....But nothing worked out!

 

Finally i've tested KSC10 ona fresh installed Windows 7 64bit and Win 2008 R2 as Domain Member, not as PDC or BDC. It worked, but i like to install it on our BDC, cause this Server has nothing to do....some shares and DNS, wow... a third Win 2008 Server is no problem but a waste of Time, License, Hard Disk Space, CPU, RAM...Anyway, KSC9 worked as a PDC / BDC. I try to reinstall KSC9, then the KSC10 Console Plugin and all i need for KES10. No other way at the Moment. 50 Computers are running without KSC now, i get more and more errors with updates and VPN Networks are blocked, somehow we cant add trusted network over the Clients...

Edited by isAG

Share this post


Link to post
Share on other sites

I've managed to install and the secind time worked fine!

 

Taked the following steps: (i don't know wich one worked...)

 

1. Run Administration Server Account Switch Utility and changed the user from DOMAIN\Administrator to .\System

2. Run Administration Server Account Switch Utility and changed the user from \System to DOMAIN\Administrator

3. Restarted the server (it's this enough???)

4. Install again and worked fine

 

 

Share this post


Link to post
Share on other sites
I've managed to install and the secind time worked fine!

 

Taked the following steps: (i don't know wich one worked...)

 

1. Run Administration Server Account Switch Utility and changed the user from DOMAIN\Administrator to .\System

2. Run Administration Server Account Switch Utility and changed the user from \System to DOMAIN\Administrator

3. Restarted the server (it's this enough???)

4. Install again and worked fine

Yea. Good workaround. After some tests i will add this information to knowledge base. Thank you very much

Share this post


Link to post
Share on other sites

I had version 8 installed on my Windows 2008 R2 domain controller. I started installing KSC 10 on top in order to upgrade and got the same error.

The problem is that the upgrade uninstalled the old version and now I can't install version 10 because of this error.

 

 

 

 

Share this post


Link to post
Share on other sites
I had version 8 installed on my Windows 2008 R2 domain controller. I started installing KSC 10 on top in order to upgrade and got the same error.

The problem is that the upgrade uninstalled the old version and now I can't install version 10 because of this error.

 

Have you try the above steps?

Share this post


Link to post
Share on other sites

Hi

 

I am having the exact same problem on a new installation - not an upgrade. I'm unable to use the account switch trick as KSC doesn't install at all.

 

This is a 2012 Standard OEM Domain controller. There are no other servers or workstations available in the site to deploy on

 

From the log file

 

25.02.2013 17:10:51.705 00000E84.00000830 L4 KLSTD: Leave shared lock('C:\ProgramData\Application Data\KasperskyLab\adminkit\SS_SETTINGS.lck')

25.02.2013 17:10:51.705 00000E84.00000830 L1 KLSRVSWCH: Starting KLSRVSWCH::MyLookupAccountName...

25.02.2013 17:10:51.705 00000E84.00000830 L1 KLSRVSWCH: MyLookupAccountName(KlScSvcE1B55E84B87BD)

25.02.2013 17:10:51.705 00000E84.00000830 L1 KLSRVSWCH: ...KLSRVSWCH::MyLookupAccountName took 2.373604 ms (User: 0 ms, Kernel: 0 ms, FullLoad: 0 %)

25.02.2013 17:10:51.705 00000E84.00000830 L2 KLERR: #1, Error was caught in SI_UnassignRights, ..\security_inst\si_exports.cpp@445. Error params: (1181/0x534 ("System error 0x534 (No mapping between account names and security IDs was done.)"), "KLSTD", ..\..\std\win32\srv_switch_acls.cpp@223)

Error loc: ''.

 

 

Is there any resolution for this? i've had no issues upgrading a couple of existing KSC 9 installations to 10 on 2008 R2

Share this post


Link to post
Share on other sites

Hi all. Our developers ask more information:

1. Did you use domain forest ?

2. how many Domain Controllers in your network ?

3. 5-level install traces. Use this archive to collect this trace files . installer_libs.zip

Don't forget on 64-bit OS you need to import in 32-bit registry (in SysWOW64 folder)

Share this post


Link to post
Share on other sites
I've managed to install and the secind time worked fine!

 

Taked the following steps: (i don't know wich one worked...)

 

1. Run Administration Server Account Switch Utility and changed the user from DOMAIN\Administrator to .\System

2. Run Administration Server Account Switch Utility and changed the user from \System to DOMAIN\Administrator

3. Restarted the server (it's this enough???)

4. Install again and worked fine

 

Somehow, this really worked for me on the Second Domain Controller with step 2. You have to install KSC9, then launch C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\klsrvswch.exe, switch from Local System to Domain and Choose your Domain Administrator Account. Finish Wizard, you don't have to restart. Launch KSC10 Setup and finish it!

 

Thank you for that Workaround!

Edited by isAG

Share this post


Link to post
Share on other sites
Hi all. Our developers ask more information:

1. Did you use domain forest ?

2. how many Domain Controllers in your network ?

3. 5-level install traces. Use this archive to collect this trace files . installer_libs.zip

Don't forget on 64-bit OS you need to import in 32-bit registry (in SysWOW64 folder)

 

1. Yes

2. Two (Installation of KSC is on Second DC [bDC])

3. I will try this now!

Share this post


Link to post
Share on other sites
Hi all. Our developers ask more information:

1. Did you use domain forest ?

2. how many Domain Controllers in your network ?

3. 5-level install traces. Use this archive to collect this trace files . installer_libs.zip

Don't forget on 64-bit OS you need to import in 32-bit registry (in SysWOW64 folder)

 

1. Yes

2. 8

3. Will try these out today

Share this post


Link to post
Share on other sites
3. I will try this now!

 

 

3. Will try these out today

Waiting for your reports

Share this post


Link to post
Share on other sites
Waiting for your reports

 

Dear All!

 

1, Yes

2, 2 (I want install KSC to Second DC)

3, I have tested it. How to upload my log file (10MB zip)?

 

Thank you for your answers!

Gabor

 

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now