Software Install Failing with Sensor Running - Access Denied on Rename

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Unable to install software with Carbon Black Cloud sensor running
• Verbose .msi log (install with /L*v switches) of installed software shows "Access is Denied" messages, similar to:

  MSI (s) (B8:38) [11:02:22:473]: Assembly Error:Access is denied.

• Procmon capture during install shows ACCESS DENIED on rename, similar to:
  

Environment

• Carbon Black Cloud Sensor: 3.9.x- 4.0.x
• Microsoft Windows: All Supported Versions

Cause

Issue with installers that do rename operations

Resolution

Upgrade to the 4.1+ sensor where this issue has been resolved (DSEN-28051)