Error Installing Service: PanAgent

[Gunther]

Hi all,

user - better: usergroups - identification is a major point in our evaluation of the PAN-Firewall.

Now when trying to install "PanAgent-3.1.2" on my windows7 laptop the software itself is installed, but the

service failes: "Error Installing Service" when trying to execute PanAgentServices.exe

(Of course using administrator-rights)

Is this a known problem?

Is there any other option to identify users in a microsoft-environment?

Greetings,

Gunther

[dwhyte]

You may need to call into support and have the support engineer help you to troubleshoot

[wayne_webner]

try to disable the UAC

[HAI_LE]

That's a strange error message indeed.  I thought that the PanAgents were supposed to be installed on a server (I currently have it installed on Win 2k3 Server), but I understand that you are using it for testing purposes, which is why you are probably doing it on Win7.

Can you try and see if you can install it on a WinXP client (if available)?  I doubt it's an OS issue, but stranger things have happened.  

[Gunther · Accepted solution]

Thanks for the answers so far. Still no luck..

I have disabled UAC both on a win7 notebook and on a Win XP SP3 machine, but

installation failed nevertheless. (now with a different error : windows installer has disovered a problem and

has to be ended)

The links

https://live.paloaltonetworks.com/message/1504  and

https://live.paloaltonetworks.com/docs/DOC-1644

seem to be helpful (thanks Sascha)

I will try to get my hands on a 2003/2008 server next week to see what happens in that environment.

best greetings,

Gunther

** Update: the trick to run a command prompt as administrator and to start the .msi program from there

did work on the win7 box finally!

I still wonder, why a program which has nothing to do than reading a log file and send the information

to the firewall must have those Administrators rights, including writing in

UAC-protected memory?? I think this is a bug ..

Greetings,

Gunther

[HAI_LE]

Well, I took a look at the PanAgent installation and configuration guide: https://live.paloaltonetworks.com/docs/DOC-1166

Looks like it doesn't support Win7 for sure, but should have worked on a WinXP SP3 machine.  One other question: is the WinXP native language you are using the "English"?  I'm just pulling straws here, but it's possible that maybe the PanAgent doesn't like the native language of the OS.  Again, I've seen stranger things happen, but worth asking about.

But yeah, might be good to try a Win Server 2k3 or 2k8 and see how that works for you.  Let us know your results.

Whoops, didn't catch your edit.  Glad you got it working!