Fatal error (Error code: 0x80070643): Unable to installadd the NFS role services on Windows 2008 R2 server

Recently we got an issue where the customer was unable to install NFS role services on Windows 2008 R2. He was getting the error message below.

To begin with, we got the output of the command ‘netstat –ano’ to verify if any other service is running on port ‘111’. But the output did not had port ‘111’ listed.

Customer was logged in as local Administrator account on the machine. We tried installing the component as domain admin account on the same machine. But this did not help the cause. We still got the same error.

We checked the Windows Installer service and that was not running. Starting the service also made no difference as we were still getting the same error.

Then we browse to the registry location below and found that we were unable to create any new Key.

“HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\ShellIconOverlayIdentifiers”

We verified the permission on the registry key and also tried adding the Administrator user and the domain user to this registry and gave full control. Still we were unable to create a new key and were getting permission denied.

Verified with the customer if he has any Antivirus running on his system or not. Customer informed that he has McAfee running.

We found that “McAfee’s Access Protection rule” blocking the Installation by restricting the edit permission on the registry key below:

“HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\ShellIconOverlayIdentifiers”

We then disabled the “Access Protection rule” and tried creating a new key on the same registry location. We were able to create it. Then we tried installing the NFS role services and this time it was installed successfully.

Comments

• Anonymous
  March 06, 2013
  I had the same error in Windows 7 and disabled my McAfee access protection and I was then able to install services for NFS.  Thanks!