Views:

This issue is caused by Real-time scan's MSI checking. MSI checking happens when ntrtscan.exe detects the file access and verifies the file signature, requiring a "Read" privilege, which in turn takes time to complete.

During verification, setup.exe opens the same file, this time with a "Write" privilege which is rejected by the Windows File System, interrupting the installation.

To solve this issue, disable MSI checking.

Disabling MSI Checking will not disable Real-time scan on the .msi file.
  1. Log on to the OfficeScan (OSCE) server.
  2. Go to the OSCE installation path: C:\Program Files\Trend Micro\Officescan\PCCSRV.
  3. Create a backup of the ofcscan.ini file.
  4. Open the ofcscan.ini file. Under Global Setting, modify the following parameter to "0", which is set to "1" by default. Add the parameter if it does not exist.

    [Global Setting]
    EnableRTScanMsiInstall=0

  5. Save the changes.
  6. Log on to the OfficeScan Server Management Console.
  7. Go to Networked Computers > Global Client Settings.
  8. Click Save.
  9. Go to the client machine, right-click the OSCE client icon and click Update Now.
  10. Verify if the client registry has the following values:

    [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
    EnableRTScanMsiInstall=0

You can now install AutoCAD/Autodesk on the client machine.

If you want to re-enable the MSI checking, follow the steps for your product version.

For all clients:

  1. Modify this parameter on the server's ..\pccsrv\ofcscan.ini file:

    [Global Setting]
    EnableRTScanMsiInstall=1

  2. Save the changes.
  3. Log on to the OSCE server management console.
  4. Go to Networked Computers > Global Client Settings.
  5. Click Save.
  6. On the client machine, right-click the OSCE client icon and select Update Now.
  7. Verify if the client registry has the following values:

    [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
    EnableRTScanMsiInstall=1

For a single client:

  1. Delete this parameter on the server's ..\pccsrv\ofcscan.ini file:

    EnableRTScanMsiInstall=0

  2. On the client machine that you want to re-enable MSI checking, do the following:
    1. Unload the OSCE client.
    2. Modify the following registry values:

      [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
      EnableRTScanMsiInstall=1

  3. Reload the OSCE client.

This feature is disabled by default in OSCE 11.0 / XG. The default value is:

[HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
EnableRTScanMsiInstall=0

To enable the feature:

  1. Activate first the deferred scanning.
    1. Open the OfficeScan web console.
    2. Go to Agents > Global Agent Settings.
    3. Tick the Enable deferred scanning on file operations option.
  2. Modify this parameter on the server's ..\pccsrv\ofcscan.ini file:

    [Global Setting]
    EnableRTScanMsiInstall=1

    EnableProcessDeferScan=1

  3. Save the changes.
  4. Log on to the OSCE server management console.
  5. Go to Agents > Global Agent Settings.
  6. Click Save.
  7. On the client machine, right-click the OSCE client icon and select Update Now.
  8. Verify if the client registry has the following values:

    [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
    EnableRTScanMsiInstall=1

Keywords: AUTOCAD,AUTODESK,MSI Scanning,MSI package installation