During the installation or upgrade of Enterprise Console 5.x, the installer fails with the error:
Unable to install Database - A custom action failed
Note: This article is a landing page linking to known issues that can cause the install, upgrade or uninstall to fail in this way. This article is linked from article 114627 which is linked from the installer when the installation fails.
To confirm this issue, you should locate the database MSI log file (see article 114627) and search for text from the following lines:
MSI (s) (88:B4) [15:04:26:331]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI1006.tmp, Entrypoint: AddAdminsAccountsToGroup
AddAdminsAccountsToGroup: Adding local administrators to group: Sophos DB Admins
AddAdminsAccountsToGroup: Error 0x8007056c: NetLocalGroupAddMembers failed
CustomAction AddAdminsToDBAdminsGroup returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
First seen in
Enterprise Console 5.0.0
Enterprise Console 5.2.0
This issue is caused by a 'Special identities' account being a member of the built-in 'Administrators' group.
What To Do
This issue is fixed in Enterprise Console 5.2.0 or higher. See article 119105 if you want to upgrade. Otherwise:
- Open the built-in 'Administrators' group. (Start | Run | Type:
dsa.msc | Press return )
- View the list of members and locate the 'Special identities' account and remove from the group.
Note: A 'special identities' account can be identified by an red up arrow on the account.
- Re-run setup.exe (C:\sec_5x\ServerInstaller\Setup.exe) to attempt the installation or upgrade.
- After a successful installation/upgrade add the members previously removed.