Netwrix Auditor System Health Log - eventID 1004 "Agent installation has failed. Process msiexec /i uavrfull_agent.msi finished with exit code: "1603".

This article explains the nature of this issue that you may encounter while trying to deploy agent to audit User Activity and provides a resolution.
Email It to Me Print this Page
Symptoms The 1004 event is logged in the Netwrix Auditor System Health event log stating that "Agent installation has failed. Process msiexec /i uavrfull_agent.msi finished with exit code: "1603".
Note: If you use Netwrix Auditor 6.5 and below, you will see this error in the Session information in Netwrix Auditor console.

The errror occurred while trying to deploy an agent for auditing User Activity.
Cause The agent installation failed because it is being blocked by the following Microsoft Update: http://support.microsoft.com/kb/2918614.
Resolution
To resolve this issue:
  1. Install the following Microsoft Update: https://support.microsoft.com/en-us/kb/3000988.
  2. Retry agent installation. To do it, navigate to the Services snap-in, locate and restart the following service:
  • Netwrix Auditor 5.0 - 6.5 - NetWrix User Activity Video Reporter Service
  • Netwrix Auditor 7.x - Netwrix Auditor User Activity Collector Serivce
  • Netwrix Auditor 8.x - 9.x - Netwrix Auditor User Activity Audit Service
Was this information helpful?