Link to home
Start Free TrialLog in
Avatar of cheerylilgoth
cheerylilgoth

asked on

Trouble installing Cisco VPN on Windows 2003

Hi, I've been in contact with one of our users who keeps recieving the Windows Installer 1722 error message when he tries to install the Cisco VPN client.  I sent him some things to try but they apparantly didn't work and I was hoping someone here might be able to give me a hand (I still need to go through VPN training here at work).  Here's the worklog so far:
-------------------------------------------------
1/22/2005 11:01:26 PM web
Client's Problem Description:
General Request

Worklog:

User:

I am trying to install vpnclient-win-msi-4.0.5.B-k9.exe on a Windows 2003 machine and get these errors about 2/3 of the way through the installation process:

GetINFclass error: The system cannot find the path specified.

&

Error 1722. There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor.

My machine is realtively clean and has no NortonAV or forewall.

Thanks for any help.

Me:  

Hi,

From what I can tell, you may want to delete the isntallation package you have downloaded, redownload it and try to reinstall again.  The Cisco website says this about error 1722:

If the computer is powered off or loses power during an MSI installation of the VPN Client, the VPN Client may not be registered in Control Panel, and the following may occur when attempting to reinstall:

          o A message may appear stating:
            Deterministic Network Enhancer Add Plugin Failed
            Click the "OK" button.
          o Error 1722. There is a problem with this Windows Installer package. A program as part of the setup did not finish as expected. Contact your Support personnel or package vendor. Click the "OK" button.
          o Error 1101. Error reading from file c:\config.msi\laff4.rbs. Verify that the file exits and you can access it. Click the "OK" button.
          o Error 1712. One or more of the files required to restore your computer to its previous state could not be found. Restoration will not be possible. Click the "OK" button.

After clearing the last message box, restart MSI installation. It should successfully install the VPN Client.

Please let me know if that doesn't solve the issue for you.

User:

Greetings,

Thanks for your help with this issue which I still can not resolve.

Did reload the vpnclient-win-msi-4.0.5.D-k9.exe file (version D this
time rather than version B which I had previoulsy tried.).  Still the
same 1722 error (http://microscopy.unc.edu/tmp/vpn-install-err-11.GIF).  
The install process did abort and rollback (see
http://microscopy.unc.edu/tmp/vpn-install-err-12.GIF ), so there was
nothing I could find to uninstall/remove.  Computer never crashed, lost
power, etc.  Did reboot between install attempts with no success.

Application Event log did report two things:
http://microscopy.unc.edu/tmp/vpn-install-err-14.GIF   
http://microscopy.unc.edu/tmp/vpn-install-err-13.GIF
http://microscopy.unc.edu/tmp/vpn-install-err-15.GIF

My system runs only basic networking, except for terminal services. It
seems that Cisco VPN and Windows2003 do not work well together?  Has
anyone else got them to work or had problems?

---------------------------------------------------------------------

Help, please?  Thanks in advance everyone!
ASKER CERTIFIED SOLUTION
Avatar of Les Moore
Les Moore
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jwisetech
jwisetech

While I understand the intent of the accepted answer, the reality is that Windows server OS is used by many as its more closely mimics deployment environments. For me, it provides many more tools OOTB than the workstation OS...so I successfully installed (hacked) Cisco VPN on windows 2003 (sp1). Note that I only have a single nic and rather vanilla server I tested with but it does work...but like everything else, there are so many variables that this solution may not work for you. (note too that this solution may open up a security hole on the server...but then again, Windows is full of them so just keep a watchful eye on your firewall logs...)

VPN Software version is 4.6.02

Background:

The default configuration of the server resulted in an error during the installation of the Cisco VPN Software, but not a fatal one so it basically performed a partial install. I then rebooted when prompted. On startup, the server reported a service failure. Upon inspection of the event logs (Service) it was noted that the Cisco’s IPSec driver could not run due to a DNE failure. DNE (Deterministic Network Enhancer) is a protocol that Cisco’s VPN service requires.  

So, I found the DNE install, drivers, etc under %system/Program Files/Common Files/DNE. I attempted to install those manually by installing the .inf files I found. On reboot I receive additional failures; the service failure as described above, and (Application) event errors indicating that DCOM security for a CLSID object was insufficient for a provider (a registry provider id) was preventing an application for running.  Upon further inspection of the registry (the CLSID was provided in the error) I found that the application was netman…, and the provider id was %system/Documents and Settings/NetworkServices…hmmm…

The Fix:

I opened the Component Services module on the server and drilled into the DCOM service entries.  I opened the properties on the netman component, and added the “NETWORK SERVICES” AND “NETWORK” security objects the security for netman, and allowed local access to both.  

I then ran the Cisco installation process again and, as expected, it complained that the software was already installed so I let it remove and restart the system.

I then re-ran the Cisco installation and viola, no errors during the install. The install rebooted the system as expected and upon login, I successfully vpn’d.

In Summary:

Your installation experience may be completely different than mine…so, print this on soft paper and use it for what it is worth :)
jwisetech's process worked for me! Thanks a lot! lrmoore: try not to judge why people might need certain setups!
JWISETECH's process worked for me as well.  Thanks.
jwisetech:...You are the VERY GENIOUS and MASTER.
Really your suggestion fixed my long burning problem.
Keep up the spirit and Thanks a lot once again for your time to contibute your intelligence for the dummy people like me. Appreciate