"Installation failed: Access is denied" error message when you try to perform a remote installation of Computer Associates eTrust Antivirus 7.0 client software on a computer that is running Windows XP Service Pack 2

Article translations Article translations
Article ID: 870901 - View products that this article applies to.
Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect your system.
Expand all | Collapse all

SYMPTOMS

When you try to use the Computer Associates eTrust Antivirus Remote Install utility to install the eTrust Antivirus 7.0 client on a computer that is running Microsoft Windows XP Service Pack 2 (SP2), the installation does not succeed. When you click Install to Targets, you receive the following error message:
Installation failed: Access is denied. (5)

CAUSE

This behavior occurs because of changes to the Remote Procedure Call service in Windows XP SP2. By default, the RestrictRemoteClients registry entry is turned on in Windows XP SP2. This registry entry restricts access to all remote procedure call interfaces.

WORKAROUND

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows


To work around this behavior, install the eTrust Antivirus client locally. If you cannot install the eTrust Antivirus client locally, you can modify the registry to turn off the RestrictRemoteClients registry entry. To do this, follow these steps.

Warning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.
  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\RPC
    If this subkey does not exist, follow these steps:
    1. Locate and then click the following registry subkey:
      HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT
    2. On the Edit menu, point to New, and then click Key.
    3. Type RPC as the subkey name, and then press ENTER.
    4. Right-click RPC, point to New, and then click DWORD Value.
    5. Type RestrictRemoteClients as the entry name, and then press ENTER.
  3. Right-click the RestrictRemoteClients entry, and then click Modify.
  4. In the Value Data box, type 0 (zero), and then click OK.
  5. Quit Registry Editor.
  6. Restart your computer.
If you modify the registry, we recommend that you turn the RestrictRemoteClients registry entry back on after you install the eTrust Antivirus 7.0 client. To turn the RestrictRemoteClients registry entry back on, set the value to 1 or to 2, and then restart your computer. By default, the value of the RestrictRemoteClients registry entry is 1 in Windows XP SP2.

MORE INFORMATION

For information about how to contact Computer Associates, visit the following Computer Associates Web site:
http://www.ca.com
Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

For additional information about the RPC Interface Restriction feature in Windows XP SP2, and also for a description of the RestrictRemoteClients registry entry and its possible values, visit the following Microsoft Web site:
http://technet.microsoft.com/en-us/library/bb457156.aspx
The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

Properties

Article ID: 870901 - Last Review: July 30, 2007 - Revision: 2.7
APPLIES TO
  • Microsoft Windows XP Professional Service Pack 2 (SP2)
Keywords: 
kbremoting kbvirus kbconnectivity kbnetwork kb3rdparty kbtshoot kbprb kberrmsg KB870901

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com