Attempting to install Cisco Duo Security 2FA MFA in Windows Server using Active Directory Group Policy Objects GPO but didn't succeed on 29 April 2022 Friday

May 01, 2022

Subject: Attempting to install Cisco Duo Security 2FA MFA in Windows Server using Active Directory Group Policy Objects GPO but didn't succeed on 29 April 2022 Friday

Good day from Singapore,

The following are the reference guides which I have followed.

Reference guide 1: Duo Authentication for Windows Logon (RDP) - Active Directory Group Policy

Link: https://duo.com/docs/winlogon-gpo

Reference guide 2: How to link a GPO to an OU?

Link: https://www.manageengine.com/products/active-directory-audit/kb/how-to/how-to-link-a-gpo-to-an-ou.html

Reference guide 3: Windows SDK

Link: https://developer.microsoft.com/en-us/windows/downloads/windows-sdk/

Reference guide 4: Win MSI deploy via GPO fails

Link: https://community.duo.com/t/win-msi-deploy-via-gpo-fails/10692

Reference guide 5: How to create and manage the Central Store for Group Policy Administrative Templates in Windows

Link: https://docs.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store

Reference guide 6: Duo Authentication for Windows Logon and RDP (it's important to enroll users before installation)

Link: https://duo.com/docs/rdp

Reference guide 7: Group Policy Software installation fails - Error 1612

Link: https://community.spiceworks.com/topic/637438-group-policy-software-installation-fails-error-1612

I have created a Group Policy Object GPO to install Cisco Duo Security Group Policy MSI Installer in Windows Server 2012 R2 Datacenter, which is a domain member server, but it failed.

Here are the error messages from Event Viewer in Windows Server:

Windows failed to apply the Software Installation settings. Software installation settings might have its own log file. Please click on the "More information" link.

The install of application Duo Authentication for Windows Logon x64 from policy Deploy Duo Client to Windows server failed. The error was : %%1612

Is it possible that Cisco Duo Security Group Policy MSI installer is incompatible with Windows Server 2012 R2 Datacenter?

Is it possible that Cisco Duo Security Group Policy MSI installer can only be installed on domain member workstations like Windows 8, Windows 10 and Windows 11?

The following guide keeps mentioning domain member workstations for a total of 4 times.

Reference guide: Duo Authentication for Windows Logon (RDP) - Active Directory Group Policy

Link: https://duo.com/docs/winlogon-gpo

I have a 2nd question. If it is not due to incompatibility issue, could the installation error be due to file and folder names on the centralized software deployment share?

Deployment source: \\fileserver1\d\Duo4.2.0\DuoWindowsLogon64.msi

Transforms: \\fileserver1\d\Duo4.2.0\duo420-64.mst

I am wondering if the file and folder names listed above could present a problem.

I am looking forward to your replies.

Thank you very much.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming

Singapore

1st May 2022 Sunday

REFERENCES

===========

[1] https://answers.microsoft.com/en-us/windows/forum/windows_other-windows_programs/attempting-to-install-cisco-duo-security-2fa-mfa/ad2cd8a5-96ec-486d-b647-6e353fc0ced6