Advance Agent installation via GPO fails with 80004005

Version 2

    Verified Product Versions

    Endpoint Manager 9.6Endpoint Manager 2016.x


    While deploying the Advance Agent MSI file via a GPO, the LANDesk Agent does not install. However, if the EXE file is started manually the installation succeeds.

    Within the AdvanceAgent.log in the windows\temp directory, there are lines with “Attempting to download file” and “returned 80004005”.


    Installing the AdvanceAgent via the MSI file is a two phase process. First the MSI installs an AdvanceAgent Service which then tries to pull the full installation (aka the EXE) and the starts the EXE do fulfil the installation.

    The 80004005 means  “Access Denied” to the share where the EXE file is located. But checking the permissions on the share shows that “everyone” does have read access.


    The AdvanceAgent Service is running as “local system account”.  So the Access to the server share is denied.

    To solve this, “domain computers” have to be added to the permissions of the share to have read access. Now the AdvanceAgent Service should be able to pull the EXE and finish the installation of the agent.