Symptoms
The NetWorker VMware Protection integration is configured with the vProxy Appliance. The file level restore (FLR) to a Windows virtual machine fails during the FLR agent installation with:
159373:nsrvproxy_flr: vProxy Log: YYYY/MM/DD HH:MM:SS INFO: [@(#) Build number: 233] Unmounting after mount failure: Unable to install FLR agent on VM '[VM_NAME]' (vm-442): Failed to install vProxy Agent on "[VM_NAME]": Command 'C:\Windows\system32\msiexec.exe' terminated with exit code 1625.
Cause
The Microsoft Windows exit status during the msi installation is related to an operating system security setting:
C:\Windows\system32>net helpmsg 1625
This installation is forbidden by system policy. Contact your system administrator.
There are several possibilities causing the issue some of which are listed below:
User Account Control (UAC) settings are set too high.An Active Directory Domain Policy is not allowing software installs.Internet Explorer (IE) settings have restricted the FLR Agent MSI package from being installed.There is anti-virus software that is installed on the target VM blocking the FLR agent install.
Resolution
This is a Windows security setting issue which must be reviewed by the local Administrator and cannot be addressed through NetWorker. The Windows administrator account can be used to install the FLR agent, subsequent FLRs can be run using another account. The following workarounds can be used to install the FLR Agent on the target virtual machine:
NetWorker Web User Interface (NWUI) Method
If NWUI server has been installed in the NetWorker environment, you can specify Run with elevated privileges during the FLR. This option is not available in the NetWorker Management Console (NMC) or Data Protection Restore Client. https://NetWorker_Server:9090/nwui
Verify if NWUI is installed on NetWorker server (Included by default on NetWorker Virtual Edition):
Linux: rpm -qa | grep lgtonwuiWindows: wmic product get name, version, vendor | find "Web UI Server"
Manual Installation Method
If the FLR agent cannot be installed from the NetWorker Management Console, NetWorker Web User Interface, or Data Protection Restore Client, you can manually install it on the target VM operating system. 1. Log in to the Windows VM you want to perform the FLR to, using the FLR user credentials.2. Connect to the vProxy as admin, using an SCP agent (FileZilla, WinSCP, so on). Copy the installation package from: /opt/emc/sw-repo/vflragent/windows
3. On the VM, right-click the emc-vProxy-FLRAgent package, and click Install. Click Yes if prompted by UAC regarding the package install.4. The FLR agent is displayed in Programs and Features from the Control Panel:
