Unable to install an MSI package on an OfficeScan client

  • Updated:
    • 2 Dec 2015
  • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
  • Platform:
    • Windows 2003 Enterprise
    • Windows 2003 Enterprise 64-bit
    • Windows 2008 Enterprise
Summary

Follow the steps in this solution if any of the following occurs:

  • Installing MSI packages such as an AutoCAD/Autodesk software in an OfficeScan client results in the following error:

  • Copying large files from a network location to a local drive either failed or is very slow.
Details
Public

This issue is caused by Real-time scan's MSI checking. MSI checking happens when ntrtscan.exe detects the file access and verifies the file signature, requiring a "Read" privilege, which in turn takes time to complete.

During verification, setup.exe opens the same file, this time with a "Write" privilege which is rejected by the Windows File System, interrupting the installation.

To solve this issue, disable MSI checking.

 
Disabling MSI Checking will not disable Real-time scan on the .msi file.
  1. Log on to the OfficeScan (OSCE) server.
  2. Go to the OSCE installation path: C:\Program Files\Trend Micro\Officescan\PCCSRV.
  3. Create a backup of the ofcscan.ini file.
  4. Open the ofcscan.ini file. Under Global Setting, modify the following parameter to "0", which is set to "1" by default. Add the parameter if it does not exist.

    [Global Setting]
    EnableRTScanMsiInstall=0

  5. Save the changes.
  6. Log on to the OfficeScan Server Management Console.
  7. Go to Networked Computers > Global Client Settings.
  8. Click Save.
  9. Go to the client machine, right-click the OSCE client icon and click Update Now.
  10. Verify if the client registry has the following values:

    [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
    EnableRTScanMsiInstall=0

You can now install AutoCAD/Autodesk on the client machine.

If you want to re-enable the MSI checking, follow the steps for your product version.

For all clients:

  1. Modify this parameter on the server's ..\pccsrv\ofcscan.ini file:

    [Global Setting]
    EnableRTScanMsiInstall=1

  2. Save the changes.
  3. Log on to the OSCE server management console.
  4. Go to Networked Computers > Global Client Settings.
  5. Click Save.
  6. On the client machine, right-click the OSCE client icon and select Update Now.
  7. Verify if the client registry has the following values:

    [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
    EnableRTScanMsiInstall=1

For a single client:

  1. Delete this parameter on the server's ..\pccsrv\ofcscan.ini file:

    EnableRTScanMsiInstall=0

  2. On the client machine that you want to re-enable MSI checking, do the following:
    1. Unload the OSCE client.
    2. Modify the following registry values:

      [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
      EnableRTScanMsiInstall=1

  3. Reload the OSCE client.

This feature is disabled by default in OfficeScan 11.0. This means that the default value is:

[HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
EnableRTScanMsiInstall=0

To enable the feature:

  1. Activate first the deferred scanning.
    1. Open the OfficeScan web console.
    2. Go to Agents > Global Agent Settings.
    3. Tick the Enable deferred scanning on file operations option.
  2. Modify this parameter on the server's ..\pccsrv\ofcscan.ini file:

    [Global Setting]
    EnableRTScanMsiInstall=1

    EnableProcessDeferScan=1

  3. Save the changes.
  4. Log on to the OSCE server management console.
  5. Go to Agents > Global Agent Settings.
  6. Click Save.
  7. On the client machine, right-click the OSCE client icon and select Update Now.
  8. Verify if the client registry has the following values:

    [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration]
    EnableRTScanMsiInstall=1

Premium
Internal
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.