Install AIPScanner in different directory

U-231 1

I looked through Microsoft documentation for any information how to install the [AzInfoProtection_UL.exe] binaries to different directory. My company standards are to use C: Drive only for OS which is managed by Windows Team and D: Drive that is used for the application. So I need to install it instead of default C:\Program Files (x86)" to "D:\Program Files (x86)" I tried the [AzInfoProtection_UL.msi] package and the MSIEXEC but the switches don't work (INSTALLDIR or APPDIR, etc.)

Anyone tried to install the AIPScanner Binaries/ AIPscanner itself to other than default location? It is disappointing that the installer doesn't give option...

Any help would be greatly appreciated.

1 answer

Givary-MSFT 28,571 Reputation points Microsoft Employee

2022-01-24T12:17:51.3+00:00

@U-231

Apologies for the delay in reaching out to you.

I have tested this issue behavior in my lab and debugged the issue, by enabling the msi logging and found we need to use "INSTALLLOCATION" switch, below is the command which i used.

msiexec /i Azinformation_UL.msi INSTALLLOCATION="D:\Test" /qb

Note: Instead of D:\test you can provide your installation directory.

Reference to create windows installer logging - https://learn.microsoft.com/en-us/troubleshoot/windows-client/application-management/enable-windows-installer-logging

If you have any other questions, please let me know.

Thank you for your time and patience throughout this issue.

----------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
U-231 1 Reputation point

2022-01-24T15:52:55.557+00:00

Thanks for looking into this for me. I tried to install it with INSTALLLOCATION switch and that worked. The Binaries were installed under the D:\ Drive. However, here is the problem, after installation i attempted to install the AIP scanner with the usual command that i did before and worked Install-AIPScaner......however i got error message (please see attached) pretty much the error says i can't find that cmdlet. Looks like installing to location other than default creates this problem, unless we can manually point where the binaries are so the cmdlets will be available.

Go ahead after you installed in your lab, try to run the command to install the AIP scanner or simply open PowerShel ISE and type Install- tab and you should see AIP if not than it means running command is moot point. Same thing to the whole installation, even if we installed binaries to other location but can't use the cmdlets it defeats the purpose of doing this.

Appreciate your help

Givary-MSFT 28,571 Reputation points Microsoft Employee

2022-01-24T17:04:28.047+00:00

@U-231

I tried the same in my lab, faced similar issue. Download the AIP Module manually by referring to this article
https://learn.microsoft.com/en-us/azure/information-protection/install-powershell
https://www.powershellgallery.com/packages?q=AIP+Module
Let me know if the issue still persists.

U-231 1 Reputation point

2022-01-24T17:45:26.287+00:00

I installed the AIPService manually, it was successful I can see all the AIPService cmdlets

https://learn.microsoft.com/en-us/powershell/module/aipservice/?view=azureipps

But there are still no AIPScanner cmdlets like Install-AIPScanner which is needed to install the scanner. When I ran the Install-AIPScanner command it still says it can't find this cmdlet.

Can you check in your lab if you this cmdlet is available (ensure the main Azinformation_UL.exe) installer wasn't installed prior)

Givary-MSFT 28,571 Reputation points Microsoft Employee

2022-01-25T06:57:37.53+00:00

@U-231

Tested this issue, we need to load the PowerShell module to use Install-AIPScanner cmdlet, ( initially i couldnt find Install-AIPScanner cmdlet, after performing the below steps able to see the cmdlet ).

Navigate to this location and import the module.
cd "D:\Program Files (x86)\Microsoft Azure Information Protection\powershell\AzureInformationProtection"

import-module .\AzureInformationProtection.psd1

If you have any other questions, please let me know.

Thank you for your time and patience throughout this issue.

U-231 1 Reputation point

2022-01-25T15:28:03.367+00:00

Thanks, that worked. I was able to import and after that the cmdlet was available. I was able to run the installer. However, I uncovered few items:

After reboot of the server, the cmdlet is no longer available, i have to run import-module again. Is there a way to import the module so it is persistent?

The service and installation files are under D:\Program Files (x86)\Microsoft Azure Information Protection. However, it appears the scanner logs, reports are still being written to C:\Users\MyUser\AppData\Local\Microsoft ---can it be written to D:\ as well?

We previously did Install the AIPService PowerShell module - is that still required?

Givary-MSFT 28,571 Reputation points Microsoft Employee

2022-01-27T11:17:54.493+00:00

@U-231

I did check on changing the log location, found this article, refer to changing log levels or location section

https://github.com/MicrosoftDocs/Azure-RMSDocs/blob/master/Azure-RMSDocs/deploy-aip-scanner-manage.md

The report folder location or name cannot be changed. If you want to store reports in a different location, consider using a directory junction for the folder.

For example, use the Mklink command: mklink /j D:\Scanner_reports C:\Users\aipscannersvc\AppData\Local\Microsoft\MSIP\Scanner\Reports

Givary-MSFT 28,571 Reputation points Microsoft Employee

2022-01-31T05:54:18.267+00:00

@U-231

I have tested the issue in my lab, here are my findings.

Q) After reboot of the server, the cmdlet is no longer available, i have to run import-module again. Is there a way to import the module so it is persistent?
Ans: Set the environmental variable setting to the same location, refer to the screenshot which I tested in my lab, and it worked as expected.

Q) The service and installation files are under D:\Program Files (x86)\Microsoft Azure Information Protection. However, it appears the scanner logs, reports are still being written to C:\Users\MyUser\AppData\Local\Microsoft ---can it be written to D:\ as well? I saw your comment below, but if we do this it will only create link to C:\ Drive, the reports will still be written to the C:\ Drive correct?
mklink /j D:\Scanner_reports C:\Users\aipscannersvc\AppData\Local\Microsoft\MSIP\Scanner\Reports
Ans: No, using mklink you can create the link to which ever drive/location you specify. If you want to have the logs in D:\ drive you can do it.

Q) We previously did Install the AIPService PowerShell module - is that still required?
Ans: Yes, that module is required as well, different cmdlets are available in that module.

If you have any other questions, please let me know.

Thank you for your time and patience throughout this issue.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

U-231 1 Reputation point

2022-02-09T14:15:18.403+00:00

I followed your steps and created the mklink under D:\Program Files (x86)\Microsoft Azure Information Protection\MSIP\ however it appears it is just a 'shortcut' to C:\Users\aipscannersvc\AppData\Local\Microsoft\MSIP\ After I run new scan the reports are still being written to C:\ and when i go to D:\ location and click on the link it brings me to C:\ which is nothing more than a shurtcut.

Am I missing anything?

Givary-MSFT 28,571 Reputation points Microsoft Employee

2022-02-14T04:19:23.743+00:00

@U-231

Yes you are right, mklink just creates a junction point or shortcut to the exact location.

As per this https://github.com/MicrosoftDocs/Azure-RMSDocs/blob/master/Azure-RMSDocs/deploy-aip-scanner-manage.md

The report folder location or name cannot be changed..

Let me know if you have any questions.
Sign in to comment

Share via

Install AIPScanner in different directory

1 answer