Unable to install an MSI package on an OfficeScan client

Support
Solution ID Last Updated
1096841 Date : 2014/06/27 Time:5:36 AM , (PST)


Product/Version Platform
OfficeScan - 10.6, 11.0;
Windows - 2003 Enterprise, 2003 Enterprise 64-bit, 2008 Enterprise

Problem Description

Follow the steps in this solution if any of the following occurs:
  1. Installing MSI packages such as an AutoCAD/Autodesk software in an OfficeScan client results in the following error:
  2. Copying large files from a network location to a local drive either failed or is very slow.

Solution

This issue is caused by Real-time scan's MSI checking. MSI checking is when ntrtscan.exe detects the file access and verifies the file signature, requiring a "Read" privilege, which in turn takes time to complete.
During verification, setup.exe opens the same file, this time with a "Write" privilege which is rejected by the Windows File System, interrupting the installation.
To solve this issue, disable MSI checking.
Do the following:
Important: Disabling MSI Checking will not disable Real-time scan on the .msi file.
  1. Log on to the OfficeScan (OSCE) server.
  2. Go to the OSCE installation path: C:\Program Files\Trend Micro\Officescan\PCCSRV
  3. Create a backup of the ofcscan.ini file.
  4. Open the ofcscan.ini file. Under Global Setting, modify the following parameter to "0", which is set to "1" by default. Add the parameter if it does not exist.
    [Global Setting]
    EnableRTScanMsiInstall=0
  5. Save the changes.
  6. Log on to the OfficeScan Server Management Console.
  7. Go to Networked Computers > Global Client Settings.
  8. Click Save.
  9. Go to the client machine, right-click the OSCE client icon and click Update Now.
  10. Verify if the client registry has the following values:
    [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
    EnableRTScanMsiInstall=0
You can now install AutoCAD/Autodesk on the client machine.
 
If you want to re-enable MSI checking, follow the steps below.
To re-enable MSI checking:
For all clients:
  1. Modify this parameter on the server's ..\pccsrv\ofcscan.ini file:
    [Global Setting]
    EnableRTScanMsiInstall=1
  2. Save the changes.
  3. Log on to the OSCE server management console.
  4. For OfficeScan 11.0, go to Agents > Global Agent Settings. For earlier versions of OfficeScan, go to Networked Computers > Global Client Settings.
  5. Click Save.
  6. On the client machine, right-click the OSCE client icon and select Update Now.
  7. Verify if the client registry has the following values:
    [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
    EnableRTScanMsiInstall=1
For a single client:
  1. Delete this parameter on the server's ..\pccsrv\ofcscan.ini file:
    EnableRTScanMsiInstall=0
  2. On the client machine that you want to re-enable MSI checking:
    1. Unload the OSCE client.
    2. Modify the following registry values:
      [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
      EnableRTScanMsiInstall=1
    3. Reload the OSCE client.


Rate this Solution
Did this article help you?

Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on