Proactive IT Security
 

Push install fails and returns warning/alert

Search Support Articles

SEARCH Advanced Search

Date published: 2009-06-08       Date updated: 2011-01-14

Product:
Endpoint Protection

Module(s):
Installation, Distribution, Upgrade

Operations System(s):
Windows XP 32 bits
Windows Vista 32 bits
Windows 2000
Windows XP 64 bits
Windows Vista 64 bits
Windows 2003 Server

Problem description

Push install fails and returns one of the following warnings/alerts:

Could not install: host offline: (800706ba:The RPC server is unavailable.)
Could not install: access denied (80041002:)
Could not install: access denied (80070005: Access is denied.)

Problem solution

The most common reasons for these issues are given below.

Please note that other (less common) reasons for these warnings/errors exist. Contact your local support department if the solutions below does not help.

Could not install: host offline: (800706ba:The RPC server is unavailable.)

The Windows Firewall blocks RPC by default. To be able to push install, an exception for remote administration needs to be added to the targeted clients firewall. If the Windows Firewall is not needed it can be disabled instead.

Creating an exception for Remote administration in the firewall:

On Windows XP client:

Allowing for remote administration exeption in the firewall is done through windows group policy. Either locally on the client, or as a distributed domain policy.

Necessary steps to allow for remote administration exeption:

  1. Start Group Policy editor: Start -> Run. Type gpedit.msc and click OK.
  2. Select: Computer Configuration -> Administrative Templates -> Network ->Network Connections -> Windows Firewall.
  3. Open either Domain Profile or Standard Profile, depending on which profile you want to configure.
    The Domain Profile settings take effect when users are actively logged in by a Domain Controller. The Standard Profile is used when users are logged in without being authenticated by a Domain Controller, for example when they're out of the office, or the computer is not part of a domain.
  4. Double-click Windows Firewall: Allow remote administration exception.
  5. Select Enabled in the Settings tab on the Windows Firewall: Allow remote administration exception properties dialog box..
  6. Click OK to save the settings.

On Windows Vista client:

  1. Go to Start -> Control Panel -> Security Center.
  2. Select Windows Firewall in the left menu.
  3. Select Allow a program through Windows Firewall in the left menu.
  4. Check the check box for Remote Administration.
  5. Check the check box for Windows Management Instrumentation (WMI).
  6. Click OK to save the settings.

Could not install: access denied (80041002:)

Norman Endpoint Manager uses the WIN32_Product WMI class for push install. This WMI class is not available by default on Windows Server 2003 32- and 64-bit or on Windows XP 64-bit. Without this WMI class push install will fail.

Making the WIN32_Product WMI class available:

  1. Go to Start -> Control Panel -> Add or Remove Programs
  2. Click Add/Remove Windows Components.
  3. In the Windows Components Wizard, select Management and Monitoring Tools and then Details.
  4. In the Management and Monitoring Tools dialog, select WMI Windows Installer Provider and click OK.
  5. Click Next.

Could not install: access denied (80070005: Access is denied.)

Windows XP Professional-based computers that are not part of a domain needs to disable simple filesharing. Windows XP Professional-based computers that are joined to a domain use only the classic file sharing and security interface, and should not require any further configuration regarding simple file sharing.

For Windows XP computers who are not part of a domain, do the following to disable the use of simple file sharing:

  1. In Windows Explorer, select Tools -> Folder Options.
  2. Select the View tab and uncheck the check box for Use simple file sharing (Recommended).
  3. Click OK to save the setting.
  4. Reboot the computer.