Unable to install an MSI package on an OfficeScan client

Support
Solution ID Last Updated
1096841 Date : 2013/12/20 Time:7:02 AM , (PST)


Product/Version Platform
OfficeScan - 10.6;
Windows - 2003 Enterprise, 2003 Enterprise 64-bit, 2008 Enterprise

Problem Description

Follow the steps in this solution if any of the following occurs:
  1. Installing MSI packages such as an AutoCAD/Autodesk software in an OfficeScan client results in the following error:
  2. Copying large files from a network location to a local drive either failed or is very slow.

Solution

This issue is caused by Real-time scan's MSI checking. MSI checking is when ntrtscan.exe detects the file access and verifies the file signature, requiring a "Read" privilege, which in turn takes time to complete.
During verification, setup.exe opens the same file, this time with a "Write" privilege which is rejected by the Windows File System, interrupting the installation.
To solve this issue, disable MSI checking.
Do the following:
Important: Disabling MSI Checking will not diable Real-time scan on the .msi file.
  1. Log on to the OfficeScan (OSCE) server.
  2. Go to the OSCE installation path: C:\Program Files\Trend Micro\Officescan\PCCSRV
  3. Create a backup of the ofcscan.ini file.
  4. Open the ofcscan.ini file and add the following parameters under Global Setting:
    [Global Setting]
    EnableRTScanMsiInstall=0
  5. Save the changes.
  6. Log on to the OfficeScan Server Management Console.
  7. Go to Networked Computers > Global Client Settings.
  8. Click Save.
  9. Go to the client machine, right-click the OSCE client icon and click Update Now.
  10. Verify if the client registry has the following values:
    [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
    EnableRTScanMsiInstall=0
You can now install AutoCAD/Autodesk on the client machine.
 
If you want to re-enable MSI checking, follow the steps below.
To re-enable MSI checking:
For all clients:
  1. Modify this parameter on the server's ..\pccsrv\ofcscan.ini file:
    [Global Setting]
    EnableRTScanMsiInstall=1
  2. Save the changes.
  3. Log on to the OSCE server management console.
  4. Go to Networked Computers > Global Client Settings.
  5. Click Save.
  6. On the client machine, right-click the OSCE client icon and select Update Now.
  7. Verify if the client registry has the following values:
    [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
    EnableRTScanMsiInstall=1
For a single client:
  1. Delete this parameter on the server's ..\pccsrv\ofcscan.ini file:
    EnableRTScanMsiInstall=0
  2. On the client machine that you want to re-enable MSI checking:
    1. Unload the OSCE client.
    2. Modify the following registry values:
      [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
      EnableRTScanMsiInstall=1
    3. Reload the OSCE client.


Rate this Solution
Did this article help you?

Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on