收集紀錄檔
- TMSM_Install.log 顯示權限發生問題:
InstallShield 15:45:11: Invoking script function ChangeClientFoldrACL 1: ServerInfoTool.exe --dir-acl "C:\Program Files (x86)\Trend Micro\Apex One\Addon\TMSM\TMSM_HTML\ActiveUpdate\ClientInstall" S-1-5-32-546 1: Warning: Unable to set client package folder ACL:2 InstallShield 15:45:11: Setup aborted InstallShield 15:45:11: CallScriptFunctionFromMsiCA() ends, result 0x642 CustomAction ChangeClientFoldrACL returned actual error code 1602 (note this may not be 100% accurate if translation happened inside sandbox) Action ended 15:45:11: ChangeClientFoldrACL. Return value 2. Action ended 15:45:11: INSTALL. Return value 2.
- 在安裝過程中，安裝的指令需要去修改 ClientInstall 資料夾的 ACL，但是操作失敗。
2022-10-07 15:45:11.8705 INFO [1] ServerInfoTool - ========================== 2022-10-07 15:45:11.8861 INFO [1] ServerInfoTool - = ServerInfoTool Started = 2022-10-07 15:45:11.8861 INFO [1] ServerInfoTool - ========================== 2022-10-07 15:45:11.8861 INFO [1] ServerInfoTool - Called to set update directory ACL 2022-10-07 15:45:11.8861 DEBUG [1] ServerInfoTool - Directory: C:\Program Files (x86)\Trend Micro\Apex One\Addon\TMSM\TMSM_HTML\ActiveUpdate\ClientInstall 2022-10-07 15:45:11.8861 DEBUG [1] ServerInfoTool - SID : S-1-5-32-546 2022-10-07 15:45:11.8861 ERROR [1] ServerInfoTool - System.InvalidOperationException: This access control list is not in canonical form and therefore cannot be modified. at System.Security.AccessControl.CommonAcl.ThrowIfNotCanonical() at System.Security.AccessControl.CommonAcl.SetQualifiedAce(SecurityIdentifier sid, AceQualifier qualifier, Int32 accessMask, AceFlags flags, ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType) at System.Security.AccessControl.DiscretionaryAcl.SetAccess(AccessControlType accessType, SecurityIdentifier sid, Int32 accessMask, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags) at System.Security.AccessControl.CommonObjectSecurity.ModifyAccess(AccessControlModification modification, AccessRule rule, Boolean& modified) at System.Security.AccessControl.CommonObjectSecurity.SetAccessRule(AccessRule rule) at TMSM.Setup.ServerInfoTool.addReadExecPermission(String dir, String sid) at TMSM.Setup.ServerInfoTool.Main(String[] args)
下列情況可能導致此問題發生：
- 當前用戶的權限不足以執行 Apex One Mac 安裝所需的操作
- 有另一個程序阻擋了安裝任務，或者系統已配置為阻止更改資料夾權限。
解決方案
遵循以下步驟進行問題排除：
- 聯繫 趨勢科技技術支援部門取得TMSM Removal tool。
- 解壓縮 TMSM Removal Tool
- 透過系統管理員身分執行命令提示字元，並切換路徑至 TMSM Removal tool 位置
- 執行指令 PsExec.exe -s -i cmd.exe
- 切換至新跳出的命令提示字元視窗。(PsExec 會將新跳出的命令提示字元視窗優先權變更為 system，以確保可透過系統註冊表單刪除軟體的安裝資訊)
- 執行 removeTMSM.bat
- 在命令提示字元中變更路徑為 C:\Program Files (x86)\Trend Micro\Apex One\ 並執行以下指令：
ICACLS Addon /T /C /RESET此變更會添加資料夾預設繼承 ACL 權限。 - 操作步驟完成後，嘗試重新登入 Apex One 伺服器主控台並前往嵌入程式頁面
- 主控台應該可顯示最新版本 Apex One (Mac)的下載按鈕。請下載和安裝嵌入程式