Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] Error installing Wazuh Agent without VBScript component / Replace .vbs in installer #194

Closed
ruffy91 opened this issue Oct 3, 2024 · 3 comments
Assignees
Labels
level/task Task issue reporter/community Issue reported by the community type/enhancement Enhancement issue

Comments

@ruffy91
Copy link

ruffy91 commented Oct 3, 2024

Wazuh version Component Install type Install method Platform
4.9.0 Wazuh Agent Installer Agent Packages Windows Server 2025

Issue

Since Windows 11 24H2/Windows Server 2025 the vbscript engine is an optional component and can be removed from windows. In 2027 it will be removed by default. https://techcommunity.microsoft.com/t5/windows-it-pro-blog/vbscript-deprecation-timelines-and-next-steps/ba-p/4148301

Problem

The installation or upgrade of the Wazuh agent fails when vbscript has been removed with the following errors in the msi log:

MSI (s) (F4:CC) [06:39:08:226]: Doing action: CheckSvcRunning
MSI (s) (F4:CC) [06:39:08:226]: Note: 1: 2205 2:  3: ActionText 
Action start 6:39:08: CheckSvcRunning.
MSI (s) (F4:38) [06:39:08:232]: Generating random cookie.
MSI (s) (F4:38) [06:39:08:245]: Created Custom Action Server with PID 7432 (0x1D08).
MSI (s) (F4:A0) [06:39:08:353]: Running as a service.
MSI (s) (F4:A0) [06:39:08:385]: Hello, I'm your 32bit Impersonated custom action server.
DEBUG: Error 2738:  Could not access VBScript runtime for custom action 
MSI (s) (F4:34) [06:39:10:993]: Product: Wazuh Agent -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2738. The arguments are: , , 

Action ended 6:39:11: CheckSvcRunning. Return value 3.
Action ended 6:39:11: INSTALL. Return value 3.
MSI (s) (F4:CC) [06:39:11:022]: MainEngineThread is returning 1603

Solution

Please consider replacing the .vbs components by powershell scripts in the installer.

@juliancnn juliancnn transferred this issue from wazuh/wazuh Oct 3, 2024
@gdiazlo gdiazlo added reporter/community Issue reported by the community level/task Task issue type/enhancement Enhancement issue labels Oct 14, 2024
@gdiazlo
Copy link
Member

gdiazlo commented Oct 14, 2024

Thanks @ruffy91, we will consider this for the next major version of Wazuh, which is currently in the works.

@vikman90
Copy link
Member

@ruffy91 @gdiazlo I've added this requirement to the issue to develop the new Agent package:

Thank you for letting us know.
Best regards.

@wazuhci wazuhci moved this from Triage to Done in XDR+SIEM/Release 5.0.0 Oct 14, 2024
@vikman90 vikman90 self-assigned this Oct 14, 2024
@ivancarlosti
Copy link

Just waiting for 5.0 release, still with problems :/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
level/task Task issue reporter/community Issue reported by the community type/enhancement Enhancement issue
Projects
Status: Done
Development

No branches or pull requests

4 participants