Agent Hardening and Installer Issues

Issues Running the Installer

If you encounter issues when running the installer on an agent endpoint with hardening, follow these steps:

1. Undo the hardening by updating the job settings on the Restrict Account Permissions on Agent Services (Windows) policy to include local administrators added. This enables upgrade tools with the required permissions to complete the agent upgrades.

2. Use your preferred method for applying the policy with the new administrators.

3. Then, run the installer as a local administrator.

Recovering a Hardened Windows Agent That Cannot Reach the Console

When a hardened agent is deadlocked or offline and cannot communicate with the console, policy changes cannot reach it and it the agent cannot be uninstalled or upgraded with the normal procedures.This requires contacting IBM Security Support as a last resort.

This is intended for when an agent is hardened and has lost communication with the console (so a policy change cannot reach it) and cannot be uninstalled or upgraded normally. This is a last-resort recovery, not a routine procedure.

Please contact the Delinea Support team for more information. See Generating a Support File.