Importante
Known Issue for infrastructure agent v1.73.0 and above: MSI installation may fail with error 1603 on systems with Windows Group Policy restrictions.
Problem
- Installation worked with v1.72.x but fails with v1.73.0 or newer
- Occurs on hardened or CIS-compliant Windows systems
- Service
newrelic-infrais not created
Cause
The infrastructure agent v1.73.0+ uses deferred PowerShell custom actions for installation. The Windows Group Policy setting HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer\DisableMSI (when set to 1 or 2) blocks these actions for security reasons.
Solution
Temporarily disable the MSI restriction during installation:
# Store original value$regPath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer"$origValue = (Get-ItemProperty -Path $regPath -Name DisableMSI -ErrorAction SilentlyContinue).DisableMSI
try { # Temporarily allow MSI custom actions if (-not (Test-Path $regPath)) { New-Item -Path $regPath -Force | Out-Null } Set-ItemProperty -Path $regPath -Name DisableMSI -Value 0 -Type DWord -Force # Run the installation msiexec.exe /qn /i PATH\TO\newrelic-infra.msi GENERATE_CONFIG=true LICENSE_KEY=YOUR_LICENSE_KEY } finally { # Restore original value if ($null -ne $origValue) { Set-ItemProperty -Path $regPath -Name DisableMSI -Value $origValue -Type DWord -Force } else { Remove-ItemProperty -Path $regPath -Name DisableMSI -ErrorAction SilentlyContinue }}Run this PowerShell script to check if the DisableMSI policy will cause issues:
$regPath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer"$disableMsi = (Get-ItemProperty -Path $regPath -Name DisableMSI -ErrorAction SilentlyContinue).DisableMSI
if ($null -eq $disableMsi -or $disableMsi -eq 0) { Write-Host "DisableMSI not set or set to 0 - Installation should work"} else { Write-Host "WARNING: DisableMSI is set to $disableMsi - Installation will likely fail with error 1603" Write-Host "Use the workaround above to install successfully"}