Windows 10: CrowdStrike Falcon Sensor Installation Failure

Hello,We are working through deploying CrowdStrike as our new IDS/IPS and had a few machines decide not to cooperate. I have been in contact with CrowdStrike support to the extent they told me I need a Windows specialist.So far I have run CrowdStrike's Windows diagnostic tool, A "Get-InstallerRegistration.ps1" from CrowdStrike support, collected a Windows Installation Log during install attempt, and also run Windows ProcMon during Installation. When running the installation a dialogue box appears that says, "Service 'Crowdstrike Falcon Sensor Service' CSFalconService could not be installed.

:)

 

Can't update to 1909 [HRESULT 0x800704B8]

The other site might be better because I have seen this error before with other Enterprise folks and they were not, as far as I know, able to resolve it. So I will just point out a few things. Good Luck with it.

The Bios seems to be from 2018, have you checked for an update?

I see this message in your log. Perhaps it is involved but is there a way to repair or update the Security Data Base?

Using Sdb Id: [{11111111-1111-1111-1111-111111111111}] Size: [13432712] Modified: [2016-01-01T00:00:00], at path C:\$WINDOWS.~BT\Sources\appraiser.sdb

And lastly, the anti-Virus situation could be relevant. The situation with Windows Defender being out of date, may be because the other Anti-Virus had disabled it. But recent Windows build versions and the Anti-Virus seem to work in together so the Windows Defender definitions are up to date.

SP Antivirus software information:

Name: CrowdStrike Falcon Sensor, Path: C:\Program Files\CrowdStrike\CSFalconService.exe, Timestamp: Fri, 06 May 2022 15:38:34 GMT, State: 266240

Name: Check Point Anti-Malware, Path: C:\Program Files (x86)\CheckPoint\Endpoint Security\Anti-Malware\epam_svc.exe, Timestamp: Fri, 06 May 2022 15:31:15 GMT, State: 266256

Name: Windows Defender, Path: %ProgramFiles%\Windows Defender\MsMpeng.exe, Timestamp: Tue, 07 Jan 2020 16:42:22 GMT, State: 393472

Name: CrowdStrike Falcon Sensor, Path: C:\Program Files\CrowdStrike\CSFalconService.exe, Timestamp: Thu, 20 May 2021 12:17:12 GMT, State: 266240

Name: CrowdStrike Falcon Sensor, Path: C:\Program Files\CrowdStrike\CSFalconService.exe, Timestamp: Thu, 10 Mar 2022 13:36:53 GMT, State: 266240

 

security or firewall settings might be blocking the connection ?

CrowdStrike falcon blocking internet access from every where. i can't even update windows.

here are the detail provide by the troubleshooter:-

Diagnostics information (Network Security)

Details about network security diagnosis:

Settings that might be blocking the connection:

Provider name: CrowdStrike

Provider description: CsAgent

Filter name: CrowdStrike WFP Filter

Provider context name:

 

"Application Install install package failure!" while installing 13.9

Running Windows 7 Ultimate x64 and MSI 6970 Lightning.

I was upgrading from 13.4 after I did a clean uninstall with AMD Catalyst Install Manager.

Doesn't say what installation failed in the install log. Everything in the log says Success but at the very bottom it says "Application Install: install package failure!" but doesn't say what failed to install.

I only install video drivers and no CCC.

The only thing I noticed is AMD Catalyst Install Manager is not listed in my programs list.