Jorge's Quest For Knowledge!

All About Identity And Security On-Premises And In The Cloud – It's Just Like An Addiction, The More You Have, The More You Want To Have!

(2018-10-25) When Installing The Azure AD Password Protection DC Agent Generates An Error

Posted by Jorge on 2018-10-25


If you are installing the Azure AD Password Protection DC Agent on an RWDC and you receive the following error….

image

Figure 1: An Error The Azure AD Password Protection DC Agent Setup Wizard Ended Prematurely

….execute the AADPwdProtection\AzureADPasswordProtectionDCAgent.msi with the following options

MSIEXEC /i AzureADPasswordProtectionDCAgent.msi /log AzureADPasswordProtectionDCAgent.log

After it errors again, open the log file and search for the word ERROR. When you do, you will most likely find why it errors. If it has the same cause as I had, you will see something similar to the following:

Dumping MSI properties of interest:
  ‘INSTALLDIR’ = ‘C:\Program Files\Azure AD Password Protection DC Agent\’
  ‘Installed’ = ”
  ‘INSTALLLEVEL’ = ‘1’
  ‘ProductCode’ = ‘{67E66797-A45C-4C3C-B481-554F9F427227}’
  ‘ProductID’ = ”
  ‘ProductName’ = ‘Azure AD Password Protection DC Agent’
  ‘ProductState’ = ‘-1’
  ‘ProductVersion’ = ‘1.2.10.0’
  ‘ProgramFiles64Folder’ = ‘C:\Program Files\’
  ‘Remove’ = ”
  ‘UPGRADINGPRODUCTCODE’ = ”
  ‘BPL_NONUPGRADEABLEAPPFOUND’ = ”
  ‘BPL_STATEMIGRATIONFOLDER’ = ”
Done with MSI property dump
CheckForNonUpgradeableApps – opened Uninstall key with 9 subkeys
CheckForNonUpgradeableApps – a nonupgradeable app was found ‘Azure AD Password Protection DC Agent’ – ‘1.1.10.3’
CustomAction BPL_CheckForNonUpgradeableApps returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 16:30:01: BPL_CheckForNonUpgradeableApps. Return value 3.
Action ended 16:30:01: INSTALL. Return value 3.


In plain English this means you are trying to install a newer version on top of an version that cannot be upgraded. Check the versions. The old version here was installed by means months ago when I participated in the public preview. Today I wanted to install the officially released version and had forgotten the old version was still installed.

The solution here? Uninstall the old version first and install the newer version. After both the uninstall and the install a reboot of the RWDC is required.

To determine if a version is already installed and if yes to uninstall it, execute the following commands:

WMIC PRODUCT GET NAME | FIND /I "Azure AD Password Protection DC Agent"

WMIC PRODUCT WHERE NAME="Azure AD Password Protection DC Agent" CALL UNINSTALL

….and if you are a PowerShell junky, you can also use the following for the uninstall

$product = Get-WmiObject -Class win32_product -Filter "Name like ‘Azure AD Password Protection DC Agent’"

$product

$product.Uninstall() # WARNING: Reboot is immediate, no mercy and no questions asked!!!

After the uninstall and reboot, install the newest AzureADPasswordProtectionDCAgent.msi available from Microsoft

Cheers,
Jorge

————————————————————————————————————————————————————-
This posting is provided "AS IS" with no warranties and confers no rights!
Always evaluate/test everything yourself first before using/implementing this in production!
This is today’s opinion/technology, it might be different tomorrow and will definitely be different in 10 years!
DISCLAIMER:
https://jorgequestforknowledge.wordpress.com/disclaimer/
————————————————————————————————————————————————————-
########################### Jorge’s Quest For Knowledge ##########################
####################
http://JorgeQuestForKnowledge.wordpress.com/ ###################
————————————————————————————————————————————————————-

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

 
%d bloggers like this: