Keep getting error code -3 when trying to deploy software

[boundsw]

Hi all.

 

Relatively new to SCCM, but have been playing for a while and managing to get things working. I have got a whole bunch of applications to deploy to xp and w7 machine collections with success, but now im stuck on one and I need some help !! That’s where you all come in, hopefully.

Ok, so this is the basics of what I have.

 

Application to deploy is ‘Cisco Ironport desktop encryption plugin’

 

I have created answer files for this install on win xp/7 machines.

 

I have run the install, referring to the answer file manually on xp and 7 machines, and the install works. Great.

 

Answer file and .exe file are placed in the package source location on the SCCM server

 

I have two test collections, one for XP, and one for 7 machines

 

I have created one package “Ironport Encryption Plugin” with two programs “Install Cisco Ironport W7 x64” and “Install Cisco Ironport XP x86”

 

I have created 2 advertisements that are assigned to the two collections.

 

The win XP install deploys and works

The W7 install always fails, and I cannot work out why !

 

Windows XP command that works:

CiscoEmailSecurity-7-2-0-039.exe /s /v /qn /f1\\******\support$\SCCMDeploy\Cisco Ironport Plugin\winxpunattend.iss

 

Windows 7 command that DOES NOT work

CiscoEmailSecurity-7-2-0-039.exe /s /v /qn /f1\\******\support$\SCCMDeploy\Cisco Ironport Plugin\w7x64unattend.iss

 

(***** is the DFSRoot comapny name, so I have removed that here)

 

The error in the system status is :

 

The program for advertisement "00120023" failed ("00100040" - "Install Cisco Ironport W7 x64"). A failure exit code of -3 was returned.

User context: NT AUTHORITY\SYSTEM

 

Possible cause: Systems Management Server (SMS) determines status for each program it executes. If SMS cannot find or correlate any installation status Management Information Format (MIF) files for the program, it uses the program's exit code to determine status. An exit code of -3 is considered a failure.

Solution: For more information on the exit code, refer to the documentation for the program you are distributing.

[boundsw]

move the .exe, the 2 answefiles, and the cmd to a temp folder called "warren" in the root of c:\ on the test machine "warrentest"

 

Does not work :

 

pushd %~dp0

setup.exe /s /f1w7x64unattend.iss

popd

exit /b %errorlevel%

 

share the folder called warren on the test machine, and ref this share in the cmd :

 

pushd %~dp0

setup.exe /s /f1"\\warrentest\warren\w7x64unattend.iss"

popd

exit /b %errorlevel%

 

This works

 

so for me, the answer to this is, keep referencing the iss file in a share (which just happens to be the SCCM server)

 

BUT why is SCCM, changing my command line and putting the quotes in the wrong place !

[Peter33]

Conclusion = The Setup wants an absolute path for the answer file ? This is a behaviaor i know from Oracle Client Setups but not from Install Shield Installers.

 

If you name the answer file Setup.iss and call the Setup without the /f1 switch it should work though. The Setup.exe should be looking for a Setup.iss by itself. This neat little setup seems to be some kind of nightmare

First thing i would try is to transform the whole thing into a Wise MSI. Unfortunately you don't have this opportunity.

[boundsw]

Thanks for everyones input and ideas with this.

 

The absolute path conclusion does appear to be an answer for the problem, but its not a resolution unfortunatly.

 

Whats still bugging me is, if I use the command string in SCCM of : CiscoEmailSecurity-7-2-0-039.exe /s /v /qn /f1"\\DFSROOT\support$\SCCMDeploy\Cisco Ironport Plugin\w7x64unattend.iss"

 

I get an error of

 

Program started for advertisement "00120023" ("00100040" - "Install Cisco Ironport W7 x64").

Command line: "C:\Windows\SysWOW64\CCM\Cache\00100040.29.System\CiscoEmailSecurity-7-2-0-039.exe" /s /v /qn /f1"\\DFSRoot\support$\SCCMDeploy\Cisco Ironport Plugin\w7x64unattend.iss"

Working directory: C:\Windows\SysWOW64\CCM\Cache\00100040.29.System\

User context: NT AUTHORITY\SYSTEM

 

why is the command format being changed ? Has anyone seen this behavoiur before ?

[Peter33]

I don't see anything wrong in the command. SCCM was only appending the absolute path to the executable, but quotes are set in acorrect way. The only problem i see that the system has no access to the share. Has the Network Acccess Account a read access to the share?

[boundsw]

Yes the system account has access to the share.

 

I dont understand why SCCM closes the quotes after the .exe

[Peter33]

I dont understand why SCCM closes the quotes after the .exe

 

Because SCCM would interprete the whole line as executable path oterwise. This way the system can make a difference between the executable and arguments.

What happens if you name the answerfile just Setup.iss and the run a simple CiscoEmailSecurity-7-2-0-039.exe /s ?

[Mikey C]

1) I prefer InstEd-It to Orca (which is difficult to obtain)

 

http://www.instedit.com/ There is a great free version too.

 

2) Also, have you thought about using a task sequence to run the different command lines one after another, rather than a batch file? Might have an impact on the command line being interfered with (if that is what is happening)

 

3) And I would ALWAYS get msi installs and bootstrap installers to generate a log file in everycase. We have created a suitable folder on every machine in our envinronment and use that path for all SD log files, so any member of ICT staff can pole around if there are issues.

 

Hope this helps.