AnyConnect Software not installed on Windows 10

Question

Hello Team,

We tried to upgrade Anyconnect secure mobility client 4.9.00086 through the SCCM tool on the end-user machines. Some of the users having issues after the upgrade. they are getting below error message.

"There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor." error message while installing the latest AnyConnect Client applications on user PCs.

This issue has occurred on Windows 10 1607 (OS Build 14393.3930) version. On this OS we can not install a higher version anyconnect file and a lower version anyconnect file.

Some of the user's are sitting in offices and some of the users are working from home through VPN.

When we deploy package through SCCM that time user connected on VPN and at that time existing VPN get uninstall & communication of that systems with SCCM get disconnected so that new version up-gradation is gets stuck till when it again communicate to SCCM. After communicating with SCCM then also it's not working.

We have tried the below troubleshooting steps.

> The customer has followed the steps as per the article https://www.petenetlive.com/KB/Article/0000985. After that tried to install the AnyConnect 4.9.00086 version again, but we were still getting the same error message.
> Shared PurgeNotifyObjects.exe file with the customer and ran the command "PurgeNotifyObjects.exe -confirmdelete". After that tried to install the AnyConnect 4.9.00086 version again, but we were still getting the same error message.
> Also tried to run the Microsoft trouble-shooter tool https://support.microsoft.com/en-us/help/17588/windows-fix-problems-that-block-programs-being-installed-or-removed
> Tried to install different versions of AnyConnect Client 4.9.01095 and 4.8.03052, the installation has failed with the same error message.

On the same OS version, the same Anyconnect version is successfully installed on the end-user machine.

Can you please suggest the next step to resolve this issue? It's really helpful for me.

Thanks,
Ashwin

Answer 1

You need to contact the vendor of the application of support with their application and its installation. Additionally, note that Win 10 1607 is well passed its end of life (18 months ago) and is not supported.

Answer 2

Hi, Ashwin

Did you find out the solution to resolve the installation issue? I had the same issue now.

Thanks.

Answer 3

@Ashwin Chougule in the interim where you are having issues with Cisco any connect, try to connect user VPN via browser rather then client. If that's not enabled you can do that from Cisco box. It will allow you to connect VPN via browser. On second hand you can start the plan to upgrade whole environment to latest Microsoft build. Hope this helps.

Answer 4

Someone turn the heat up in here its freezing cold.. Hello sir, may I ask if you have checked the Registry for any obstacles involving the AnyConnect installation?

Answer 5

I distribute Cisco AC by custom cmd script.

I set "Deployment Type" options to "Download content from distribution point and run locally". This is necessary prerequisite for running app independently on network.

The cmd installation script:

@echo off  
set version=4.9.03049  
setlocal enabledelayedexpansion  
set LogFile=%temp%\installIse.log  
set curr_dir=%cd%   
echo _________________________________________________________________________________________________________________________>> %LogFile%  
echo ===================Zacatek instalace 802.1x v%version% Wifi NB- %date% %time%============================================>> %LogFile%  
echo curr_dir=%cd% >> %LogFile%  
set ErrorExitCode=0  
  
REM ----------------- Detekce NB pomoci dotazu do WMI na typ zařízení ---------------------------------------  
for /F "tokens=1 skip=1 eol=; usebackq" %%A  in (`WMIC ComputerSystem GET PCSystemType`) do (  
	echo PCType = %%A  >> %LogFile%  
	set PCType=%%A  
	if %%A GEQ 1 goto NextStep  
	)  
:NextStep	  
echo Detekovan HW (1-PC, 2-NB, 3-Workstation) %PCType% >> %LogFile%  
echo curr_dir Install Script=%cd% >> %LogFile%  
  
if %PCType%==2 goto NB  
  
REM -------------- goto NB -znamena instalace jako NB -------------------------------------------------------  
REM -------------- goto PC -znamena instalace jako PC -------------------------------------------------------  
goto NB  
  
REM ------------------ Sekce pro instalaci jen na PC ----------------------------------------------------  
:PC  
set DeviceType=PC  
call msiexec /package anyconnect-win-%version%-core-vpn-predeploy-k9.msi /norestart /passive PRE_DEPLOY_DISABLE_VPN=1 /l*v %temp%\anyconnect-win-%version%-core-vpn-predeploy-k9.log  
if %ERRORLEVEL% == 0 goto PokracujCore  
if %ERRORLEVEL% == 1619 goto PokracujCore  
if %ERRORLEVEL% == 3010 goto PokracujCore  
rem 3010 - navratovy kod pro restart systemu  
	set /a ErrorExitCode=%ERRORLEVEL%  
	echo Chyba instalace - msiexec /package anyconnect-win-%version%-core-vpn-predeploy-k9.msi /norestart /passive >> %LogFile%  
	echo exit error: %ErrorExitCode% >> %LogFile%  
	goto end  
:PokracujCore  
echo Dokoncena instalace PC- msiexec /package anyconnect-win-%version%-core-vpn-predeploy-k9.msi /norestart /passive PRE_DEPLOY_DISABLE_VPN=1 >> %LogFile%  
call msiexec /package anyconnect-win-%version%-nam-predeploy-k9.msi /norestart /passive /l*v %temp%\anyconnect-win-%version%-nam-predeploy-k9.log  
if %ERRORLEVEL% == 0 goto Pokracuj  
if %ERRORLEVEL% == 1619 goto Pokracuj  
if %ERRORLEVEL% == 3010 goto Pokracuj  
rem 3010 - navratovy kod pro restart systemu  
	set /a ErrorExitCode=%ERRORLEVEL%  
	echo Chyba instalace - msiexec /package anyconnect-win-%version%-nam-predeploy-k9.msi /norestart /passive >> %LogFile%  
	echo exit error: %ErrorExitCode% >> %LogFile%  
	goto end  
:Pokracuj  
echo Dokoncena instalace - msiexec /package anyconnect-win-%version%-nam-predeploy-k9.msi /norestart /passive >> %LogFile%  
goto Next1  
  
REM -------------- Sekce pro instalaci jen na NB ------------------------------------------  
:NB  
set DeviceType=NB  
call msiexec /package anyconnect-win-%version%-core-vpn-predeploy-k9.msi /norestart /passive /l*v %temp%\anyconnect-win-%version%-core-vpn-predeploy-k9.log  
if %ERRORLEVEL% == 0 goto PokracujCoreNB  
if %ERRORLEVEL% == 1619 goto PokracujCoreNB  
rem 3010 - navratovy kod pro restart systemu  
	set /a ErrorExitCode=%ERRORLEVEL%  
	echo Chyba instalace - msiexec /package anyconnect-win-%version%-core-vpn-predeploy-k9.msi /norestart /passive >> %LogFile%  
	echo exit error: %ErrorExitCode% >> %LogFile%  
	goto end  
:PokracujCoreNB  
echo Dokoncena instalace NB - msiexec /package anyconnect-win-%version%-core-vpn-predeploy-k9.msi /norestart /passive >> %LogFile%  
call msiexec /package anyconnect-win-%version%-nam-predeploy-k9.msi /norestart /passive /l*v %temp%\anyconnect-win-%version%-nam-predeploy-k9.log  
if %ERRORLEVEL% == 0 goto PokracujNB  
if %ERRORLEVEL% == 1619 goto PokracujNB  
if %ERRORLEVEL% == 3010 goto PokracujNB  
rem 3010 - navratovy kod pro restart systemu  
	set /a ErrorExitCode=%ERRORLEVEL%  
	echo Chyba instalace - msiexec /package anyconnect-win-%version%-nam-predeploy-k9.msi /norestart /passive >> %LogFile%  
	echo exit error: %ErrorExitCode% >> %LogFile%  
	goto end  
:PokracujNB  
echo Dokoncena instalace - msiexec /package anyconnect-win-%version%-nam-predeploy-k9.msi /norestart /passive >> %LogFile%  
  
call msiexec /package anyconnect-win-%version%-gina-predeploy-k9.msi /norestart /passive /l*v %temp%\anyconnect-win-%version%-gina-predeploy-k9.log  
if %ERRORLEVEL% == 0 goto PokracujGinaNB  
if %ERRORLEVEL% == 1619 goto PokracujGinaNB  
if %ERRORLEVEL% == 3010 goto PokracujGinaNB  
rem 3010 - navratovy kod pro restart systemu  
	set /a ErrorExitCode=%ERRORLEVEL%  
	echo Chyba instalace - msiexec /package anyconnect-win-%version%-gina-predeploy-k9.msi /norestart /passive >> %LogFile%  
	echo exit error: %ErrorExitCode% >> %LogFile%  
	goto end  
:PokracujGinaNB  
echo Dokoncena instalace - msiexec /package anyconnect-win-%version%-gina-predeploy-k9.msi /norestart /passive >> %LogFile%  
:Next1  
  
REM -------------- Sekce pro společné aplikace pro PC a NB -------------------------------  
REM -------------- Instalace Umbrella ----------------------------------------------------  
call msiexec /package anyconnect-win-%version%-umbrella-predeploy-k9.msi /norestart /passive LOCKDOWN=1 /l*v %temp%\anyconnect-win-%version%-umbrella-predeploy-k9.log  
if %ERRORLEVEL% == 0 goto PokracujUmbrellaNB  
if %ERRORLEVEL% == 1619 goto PokracujUmbrellaNB  
if %ERRORLEVEL% == 3010 goto PokracujUmbrellaNB  
rem 3010 - navratovy kod pro restart systemu  
	set /a ErrorExitCode=%ERRORLEVEL%  
	echo Chyba instalace - msiexec /package anyconnect-win-%version%-umbrella-predeploy-k9.msi /norestart /passive >> %LogFile%  
	echo exit error: %ErrorExitCode% >> %LogFile%  
	goto end  
:PokracujUmbrellaNB  
echo Dokoncena instalace - msiexec /package anyconnect-win-%version%-umbrella-predeploy-k9.msi /norestart /passive >> %LogFile%  
REM ----------------Instalace ISE Posture modulu -----------------------------------------  
call msiexec /package anyconnect-win-%version%-iseposture-predeploy-k9.msi /norestart /passive /l*v %temp%\anyconnect-win-%version%-iseposture-predeploy-k9.log  
if %ERRORLEVEL% == 0 goto PokracujIsePostureNB  
if %ERRORLEVEL% == 1619 goto PokracujIsePostureNB  
if %ERRORLEVEL% == 3010 goto PokracujIsePostureNB  
rem 3010 - navratovy kod pro restart systemu  
	set /a ErrorExitCode=%ERRORLEVEL%  
	echo Chyba instalace - msiexec /package anyconnect-win-%version%-iseposture-predeploy-k9.msi /norestart /passive >> %LogFile%  
	echo exit error: %ErrorExitCode% >> %LogFile%  
	goto end  
:PokracujIsePostureNB  
echo Dokoncena instalace - msiexec /package anyconnect-win-%version%-iseposture-predeploy-k9.msi /norestart /passive >> %LogFile%  
REM -------------Instalace DART modulu ----------------------------------------------------  
call msiexec /package anyconnect-win-%version%-dart-predeploy-k9.msi /norestart /passive /l*v %temp%\anyconnect-win-%version%-dart-predeploy-k9.log  
if %ERRORLEVEL% == 0 goto PokracujDartNB  
if %ERRORLEVEL% == 1619 goto PokracujDartNB  
if %ERRORLEVEL% == 3010 goto PokracujDartNB  
rem 3010 - navratovy kod pro restart systemu  
	set /a ErrorExitCode=%ERRORLEVEL%  
	echo Chyba instalace - msiexec /package anyconnect-win-%version%-dart-predeploy-k9.msi /norestart /passive >> %LogFile%  
	echo exit error: %ErrorExitCode% >> %LogFile%  
	goto end  
:PokracujDartNB  
echo Dokoncena instalace - msiexec /package anyconnect-win-%version%-dart-predeploy-k9.msi /norestart /passive >> %LogFile%  
REM ----------------konec instalací MSI casti----------------------------------------------  
  
REM ----------------Casti s kopirovaním konfiguracnich souboru-----------------------------  
if not exist "C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client" (set /a ErrorExitCode+=128  
	echo Neexistuje cesta "C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client" - exit error: %ErrorExitCode% >> %LogFile%  
	goto end)  
if not exist "C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Network Access Manager\system\" goto CreateNAM  
:ReturnNAM  
copy configuration.xml "C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Network Access Manager\system\" /Y  
if %ERRORLEVEL% NEQ 0 (set /a ErrorExitCode+=128  
	echo Nepodarilo prekopirovat data configuration.xml >> %LogFile%  
	goto end)  
echo Soubor konfigurace zkopirovan - configuration.xml >> %LogFile%  
  
.  
.  
rem  You could write here your own commands.  
.  
.  
.  
  
goto end  
:CreateNAM  
md "C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Network Access Manager\system\"  
echo Vytvorena cesta "C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Network Access Manager\system\" >> %LogFile%  
goto ReturnNAM  
  
  
  
  
:End  
  
set curr_dir=  
echo Error exit Code is %ErrorExitCode% >> %LogFile%  
echo ======================Konec instalace v%version%- %date% %time%============================================>> %LogFile%  
set LogFile=  
echo Error exit Code is %ErrorExitCode%  
  
exit /b %ErrorExitCode%  

The script install Cisco AC msi files. Detect chassis type for different installation and configuration. Script created log file for debugging.