80070005 The installation could not be started: Access is denied.

  • N.º del artículo: 119690
  • Calificación:
  • 12 clientes puntuaron este artículo con un 2.3 sobre 6 de media.
  • Actualizado: 27 abr 2016


After attempting to deploy Sophos endpoint software to a computer the following error is reported to the console.

80070005 The installation could not be started: Access is denied. The computer may need additional configuration before installation.

First seen in
Enterprise Console 5.0.0


  1. Security permissions on one or more files/folders in the central distribution location are missing or corrupt.
    • For example, this error can be recreated if you remove all security permissions from the file setup.exe under the Windows CIDs folder and then attempt to protect a computer.
  2. The operating system of the remote computer is Windows 8+ in a workgroup environment.

What To Do

  1. Permissions need to be restored.  Either:
    • Rename the package folder that you are attempting to deploy from and force Update Manager to update (to recreate the folder).
    • Locate a folder above the package folder with the correct permissions and force these permissions down to all child files and folders.
  2. Modify specific settings as detailed in article 118354.

Both of the options mentioned above are explained in further detail below.

Re-create the package folder

  1. In Windows Explorer browse to the package folder (e.g., C:\ProgramData\Sophos\Update Manager\Update Manager\CIDs\S000 - from the console check 'View' | 'Bootstrap Locations' for the correct subscription).
  2. Rename the package folder.  For example rename 'SAVSCFXP' to 'SAVSCFXP.old'.
  3. From the console, on the Update Manager view, right-click the Update Manager and select 'Update Now'.
    If you refresh the Windows Explorer window your will see a new 'SAVSCFXP' folder created.
  4. Deploy to the endpoint computer again.
    You can delete 'SAVSCFXP.old' after the new 'SAVSCFXP' folder has been created.

If the problem is not resolved continue below.

Force permissions from a correctly configured folder

  1. In Windows Explorer browse to the CIDs folder (e.g., C:\ProgramData\Sophos\Update Manager\Update Manager\).
  2. Right-click on the 'CIDs' folder and select 'Properties'.
  3. On the 'Security' tab check the Group and user names listed.  Normal permissions will show 'Create Owner', 'Authenticated Users', SYSTEM, 'Administrators', etc.  Other groups and users may also be mentioned as well.
  4. If the groups mentioned above are listed skip to step five.  If the groups are not mentioned you should check the folder above the 'Update Manager' folder for correct permissions.  Work back and compare will other folders as required until a folder with the normal permissions is located.
  5. From the 'Security' tab click the 'Advanced' button.
  6. From the 'Advanced Security Settings for...' click the 'Change Permissions' button.
  7. Locate the option 'Replace all child object permissions with inheritable permissions from this object' and select the option.
  8. Click 'OK' to all dialogs open to confirm the changes.
  9. Deploy to the endpoint computer again.

Si necesita más ayuda, póngase en contacto con soporte técnico.

Valore el artículo

Muy malo Excelente