GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error)

Brains

Hi all. I was hoping someone could shed some light on the issues I am having assisting my employee with a Java 10 Deployment through GPO. We previously installed Java 8 with no issue utilizing the same GPO. As a matter of fact, if I swap the Java 10 (64-bit) msi for a Java 8 (32-bit) msi in the GPO, it installs fine (Both MSIs are in the same folder on the file server). I have attached log files below. I acquired this msi the same way as version 8 - Ran the exe and pulled the msi from temp folder.

Please let me know if I should look in additional locations for better information.

Steps Taken

Wiped out cached GPO
** DEL /S /F /Q "%ALLUSERSPROFILE%\Microsoft\Group Policy\History*.*"
** REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies /f
** REG DELETE HKLM\SOFTWARE\Policies\Microsoft /f
** REG DELETE HKLM\SOFTWARE\Policies\Microsoft /f
** REG DELETE "HKCU\Software\Microsoft\Windows\Currentversion\Group Policy Objects" /f
** REG DELETE HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies /f
** DEL /F /Q C:\WINDOWS\security\Database\secedit.sdb
** Klist purge
Ran Java Uninstall Tool
Verified folder and file access for Authenticated Users and SYSTEM (Java 8 msi in same folder works)
Switched between Java 10 and Java 10.0.1 - Both 64bit
Enabled Windows Installer Logging via GPO
** voicewarmupx
Recreated GPO
Verified MSI Installs properly if ran manually

Event Log Entries

Log Name: System
Source: Application Management Group Policy
Date: 5/23/2018 12:47:18 PM
Event ID: 108
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: <COMPUTERNAME>.pridedallas.com
Description:
Failed to apply changes to software installation settings. Software changes could not be applied. A previous log entry with details should exist. The error was : %%1603

Log Name: System
Source: Application Management Group Policy
Date: 5/23/2018 12:47:18 PM
Event ID: 303
Task Category: None
Level: Information
Keywords: Classic
User: SYSTEM
Computer: <COMPUTERNAME> .pridedallas.com
Description:
The removal of the assignment of application Java 10.0.1 (64-bit) from policy Java - <GPO Name> succeeded.

Log Name: System
Source: Application Management Group Policy
Date: 5/23/2018 12:47:18 PM
Event ID: 102
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: <COMPUTERNAME> .pridedallas.com
Description:
The install of application Java 10.0.1 (64-bit) from policy Java - <GPO Name> failed. The error was : %%1603

GPO Log

Text
4016 5/23/2018 12:47:06 PM Starting Software Installation Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Foxit modusGate directQuarantine <Java GPO Name> Event XML

1085 5/23/2018 12:47:18 PM Windows failed to apply the Software Installation settings. Software Installation settings might have its own log file. Please click on the "More information" link. Event XML

7016 5/23/2018 12:47:18 PM Completed Software Installation Extension Processing in 11782 milliseconds. Event XML
Screenshots of Policy

Image: https://content.spiceworksstatic.com/service.community/p/post_images/0000309870/5b05bd2c/attached_image/1.jpg

Image: https://content.spiceworksstatic.com/service.community/p/post_images/0000309871/5b05bd33/attached_image/2.jpg

Log Files:

jusched.log - https://pastebin.com/2VX3MQsR

MSIb23b.log - https://pastebin.com/HQu2wYj7

MSIb23c.log - https://pastebin.com/XLam3qVB

MSIb239.log - https://pastebin.com/ht0hmg03

The only error I can see is listed below. I haven't been able to find any results regarding this message:

ERROR: LocalSystem is only supported for Enterprise MSI

Thanks for the help!

JaredBusch

Java 10 is not Free I thought.

momurda

Error 1603 is really dumb error.

You receive an "error 1603: A fatal error occurred during installation" error message when you try to install a Windows Installer package

Symptoms

When you try to install a Microsoft Windows Installer package, you may receive the following error message: 
Error 1603: A fatal error occurred during installation.
If you click OK in the message box, the installation rolls back.
Cause

You may receive this error message if any one of the following conditions is true: 
Windows Installer is attempting to install an app that is already installed on your PC.
The folder that you are trying to install the Windows Installer package to is encrypted.
The drive that contains the folder that you are trying to install the Windows Installer package to is accessed as a substitute drive.
The SYSTEM account does not have Full Control permissions on the folder that you are trying to install the Windows Installer package to.
You notice the error message because the Windows Installer service uses the SYSTEM account to install software.

I get this frequently with CRM plugin installer as well.
Most of the time is because of lingering remnants of previous installation.

Brains

@jaredbusch Could you point me to some documentation? I may have missed that part.

momurda

Here is link from ms.
https://support.microsoft.com/en-us/help/834484/you-receive-an-error-1603-a-fatal-error-occurred-during-installation-e
It details cause and possible resolutions.

momurda

@jaredbusch This page mentions nothing about not being free
http://www.oracle.com/technetwork/java/javase/downloads/jre10-downloads-4417026.html

Brains

@momurda My understanding is that 1603 errors are normally "generic" non-specific errors. I am pretty sure I covered all bullet pointed causes during my testing. There may be some Java 10 remnants in there somewhere, but the Java uninstall tool didn't find anything and I have tried applying the GPO to a machine that supposedly never had Java installed before - it still failed in the same way

momurda

Can you run the java 10 msi file directly with success?
Perhaps prereq software needed.

Brains

@momurda said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

Can you run the java 10 msi file directly with success?
Perhaps prereq software needed.

Yep. If I manually run the MSI, it installs fine.

momurda

Try this

msiexec /i "jre10filename.msi" /q ENTERPRISE=YES

Just a long shot, obviously change it to the msi file name for java10.

JaredBusch

@brains said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

@jaredbusch Could you point me to some documentation? I may have missed that part.

No, because I probably remember incorrectly.

JaredBusch

@momurda said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

@jaredbusch This page mentions nothing about not being free
http://www.oracle.com/technetwork/java/javase/downloads/jre10-downloads-4417026.html

It is also interesting that Oracle has not updated java.com to reference 10.0.1.
It is only available from oracle.com.
http://www.oracle.com/technetwork/java/javase/downloads/index.html

Brains

@momurda said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

msiexec /i "jre10filename.msi" /q ENTERPRISE=YES

What does the ENTERPRISE switch do? Were you recommending I test to see if it fails installation when I run the command manually or did you want me to modify the MSI to add that value? Or create a transform (never done that before)?

alt text

Dashrender

@jaredbusch said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

@brains said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

@jaredbusch Could you point me to some documentation? I may have missed that part.

No, because I probably remember incorrectly.

I thought v 8 was the last desktop version... but maybe it's only last version to have browser interaction?

momurda

It supposed to do things the enterprise way, silently, no reboots. https://www.java.com/en/download/help/msi_install.xml
They say here you only get this with the paid version of JRE but I think that isn't true.

JaredBusch

@brains said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

@momurda said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

msiexec /i "jre10filename.msi" /q ENTERPRISE=YES

What does the ENTERPRISE switch do? Were you recommending I test to see if it fails installation when I run the command manually or did you want me to modify the MSI to add that value? Or create a transform (never done that before)?

Just add the switch to your install command.

It is obvious what it means from your earlier error of ERROR: LocalSystem is only supported for Enterprise MSI.

You are only allowed to install Java locally with the enterprise MSI.

That switch seems to tell it that it is the Enterprise version.

JaredBusch

@momurda said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

It supposed to do things the enterprise way, silently, no reboots. https://www.java.com/en/download/help/msi_install.xml

But that does not mean it is the actual enterprise MSI. But it may work.

JaredBusch

Why are you trying to install Java 10 when even java.com still installs Java 8?

JaredBusch

@momurda said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

It supposed to do things the enterprise way, silently, no reboots. https://www.java.com/en/download/help/msi_install.xml
They say here you only get this with the paid version of JRE but I think that isn't true.

For the record, the chocolatey package is also still Java 8 and uses these arguments. They do not use ENTERPRISE

  $installArgs = "/s REBOOT=0 SPONSORS=0 AUTO_UPDATE=0 $32dir"
  $installArgs64 = "/s REBOOT=0 SPONSORS=0 AUTO_UPDATE=0 $64dir"

JaredBusch

@dashrender said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

@jaredbusch said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

@brains said in GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error):

@jaredbusch Could you point me to some documentation? I may have missed that part.

No, because I probably remember incorrectly.

I thought v 8 was the last desktop version... but maybe it's only last version to have browser interaction?

Yes, that is what I remember. Now to find a source for that. I thought it was a thread here.

Unsolved GPO - Unable To Deploy Java 10 64bit - Fails to install (1603 Error)