FMS installation error

[tj2419]

We are trying to install FMS on a Windows 7 SP1 32bit machine and keep getting the following error. We are just trying to install it manually using the FMSInst.exe in SIMS\Setups\FMS

 

"You do not have access to make the required system configuration modifications. Please rerun this installation from an administrators account"

 

I have tried domain admin and local admin accounts, i have checked they have permissions to the Software reg group and still no luck.

 

Any ideas?

 

Thanks

[Meldrew]

Running the exe evelated, ie Right click > Run as administrator?

 

Meldrew

[matt40k]

Why aren't you using SOLUS3 @tj2419?

[tj2419]

Why aren't you using SOLUS3 @tj2419?

 

I've never used it before is pretty much the reason. Our SIMS tends to be managed by the LEA but we are moving from two domains to a single domain (finally).

 

Is there any freely available guidance for how to do it with SOLUS 3 as it is installed on our MIS server.

 

I've tried the elevated permissions and get the same error.

[dapaulio]

Have you full read write access to the s:

Trying running and elevated cmd window s:\sims\setups\fmsinst.exe

 

Not done this manually since solid 3. Definitely the way forward.

[tj2419]

Have you full read write access to the s:

Trying running and elevated cmd window s:\sims\setups\fmsinst.exe

 

Not done this manually since solid 3. Definitely the way forward.

 

Yes, full access to the sims drive. Just tried the elevated cmd and get the same error.

[dapaulio]

I know you said you tried your domain admin and local admin but Is your domain login a member of local adminstrators group.

Something else to consider Also is UAC enabled?

[matt40k]

Our SIMS tends to be managed by the LEA but we are moving from two domains to a single domain (finally).

 

Contact them, your school is paying them for support etc, they should be able to give you better support then my - log on to the server, open up SOLUS3 UI and add the machine to the FMS workstation list thingy

 

Also is UAC enabled?

 

UAC should always be enabled.

[dapaulio]

 

 

 

UAC should always be enabled.

 

Wasn't questioned whether it should or shouldnt be enabled. if you were to disable it to test, Depending on the outcome would determine what route you would take to resolve it

Edited August 15, 2017 by dapaulio

[dapaulio]

To setup solus you would need to contact your sims support provider to register and license the client. (We had to anyway). As Matt mentioned you will be paying your lea for sims support so you may as well delegate them the task.

[tj2419]

Contact them, your school is paying them for support etc.

 

They are looking into it for us but the guy they need is away till next week and I wanted to try sort it sooner.

 

We do have solus 3 installed on the server and they use it for updates there just never been used with clients. Is there a guide on how to add a machine to deploy fms using it?

 

Thanks again for all the advice

[dapaulio]

https://faq.scomis.org/kb3062/

Found this. Enabled Uac is not supported so looks as though you may have to disable it to use it anyway.

Run through the link see if anything jumps out or resolves your problem

[dapaulio]

 

We do have solus 3 installed on the server and they use it for updates there just never been used with clients. Is there a guide on how to add a machine to deploy fms using it?

 

Thanks again for all the advice

 

Don't have any documentation but from memory if you

click on target

Click on clients

Down the bottom click add

Tick fms and click add computer

Select computers

Install submitting an administrator credentials for the installation

 

Hope this helps

[tj2419]

Don't have any documentation but from memory if you

click on target

Click on clients

Down the bottom click add

Tick fms and click add computer

Select computers

Install submitting an administrator credentials for the installation

 

Hope this helps

 

Thanks i feel like I'm getting closer. Now looks like might be a firewall thing stopping it. Any ideas on the exceptions that may need to be added to the clients?

 

Cheers

[dapaulio]

Yes there are firewall settings you have to deploy to all your computers.

This is an email that our sims support sent me

 

1. Load the Group Policy Editor and navigate to the Windows Firewall node (http://technet.microsoft.com/en-us/l.../bb490626.aspx).

 

2. Open the Windows Firewall: Define port exceptions properties dialog.

 

 

 

IMPORTANT NOTE: Ensure that you access the Windows Firewall: Define port exceptions properties via the correct route. The correct route is Computer Configuration | Policies | Administrative Templates | Network | Network Connections | Windows Firewall | Domain Profile | Windows Firewall: Define inbound port exceptions.

 

3. Select the Enabled radio button.

 

4. In the Options panel, click the Show button to display the Show Contents dialog.

 

5. Add the following values:

 

52965:TCP:*:Enabled:SOLUS 3 Deployment Server

 

52966:TCP:*:Enabled:SOLUS 3 Agent

 

8739:TCP:*:Enabled:SOLUS 3 Agent Notifier UI

 

IMPORTANT NOTE: Setting group policy port exceptions disables local port exceptions unless overridden in group policy. To do this, open the Windows Firewall: Allow local port exceptions properties dialog and select the Enabled radio button.

 

 

 

6. Click the OK button to close the Show Contents dialog.

 

7. Click the OK button to close the Windows Firewall: Define inbound port exceptions dialog.

 

8. Open the Windows Firewall: Allow inbound remote administration exception properties dialog.

 

 

 

IMPORTANT NOTE: Ensure that you access the Windows Firewall: Allow inbound remote administration exception properties via the correct route. The correct route is Computer Configuration | Policies | Administrative Templates | Network | Network Connections | Windows Firewall | Domain Profile | Windows Firewall: Allow inbound remote administration exception.

 

 

 

9. Select the Enabled radio button.

 

10. In the Options panel, enter * in the Allow unsolicited incoming messages from these IP addresses: field.

 

11. Click the OK button to close the Windows Firewall: Allow inbound remote administration exception dialog.

 

12. Open the Windows Firewall: Define inbound program exceptions dialog.

 

13. In the Options panel, click the Show button to display the Show Contents dialog.

 

14. Enter: C:\Windows\System32\wbem\unsecapp.exe:Enabled:.NET Proxy for DCOM (WMI).

 

15. Click the OK button to close the Windows Firewall: Define inbound program exceptions dialog.

 

 

 

Also, these ports need to be open on all devices: TCP 139, UDP 137, UPD 138 for browsing the network (NetBios) on all devices.

[tj2419]

Yes there are firewall settings you have to deploy to all your computers.

This is an email that our sims support sent me

 

Thanks, i've added them and seems to be connecting to the agent now Is there a way to check on the progress of an installation? I have assigned FMS but can't see anywhere if it is successful or not?

 

Many thanks again

[dapaulio]

Click back on the agents tab and find the deployed agent it will give you a status update at intervals

 

One thing to watch after deployment check that the connect.ini for sims and fmsconnect.ini are correct.

I had to deploy a gpo that robocopy the two over to the computers install path on shutdown/startup script

[dapaulio]

Other s3 quirks to watch is when an update is released and the computer is offline, it will deploy the update on delay on coming back online. Typically 5mins by which time the staff are already reporting an incompatible database error.

Every update now I send an all staff email explaining there has been an update and if sims isn't working instructing them...

First to try manually updating from the s3 agent or waiting a max 10 mins before logging with IT

Hope this helps

[tj2419]

Thanks so much for your help I'll give it a go tomorrow 😁