Error 1346: Either a required impersonation level was not provided

Technical Articles ID: KB56194
Last Modified: 2021-08-12 12:38:16 Etc/GMT

Environment

McAfee Agent (MA) 5.x

Problem 1

You see the error below in the <User-Temp_Folder>\McAfeeLogs\FrmInst_<computer_name>.txt file:

English - error 1346: Either a required impersonation level was not provided, or the provided impersonation level is invalid.
German - error 1346: Entweder wurde eine geforderte Identitätswechelebene nicht geliefert, oder die gelieferte Identitätswechselebene ist unzulässig.
French - error 1346: Soit un niveau d'emprunt d'identité quis n'a pas ètè fourni, soit le niveau d'empruint d'identité fourni n'est pas valide.

Problem 2

You see an error with a path similar to the following example:

There was an unexpected error during setup execution. See this log file for details:

C:\DOCUME~1\<User>~1\LOCALS~1\Temp\McAfeeLogs\\FrmInst_<computername>.txt

Problem 3

A customized agent installation package, FramePkg.exe with embedded user credentials, fails during installation.

Cause

A customized agent installation package, FramePkg.exe with embedded user credentials, doesn’t install successfully. Security settings introduced in Windows 2000 SP4 and later releases cause this issue.

By default, the Impersonate a client after authentication user rights setting, SeImpersonatePrivilege, is assigned only to members of the Administrators group and the System account.

For more information, see this Microsoft Knowledge Base article.

Solution 1

The following changes allow the user's account to run the FramePkg.exe package on the user's computer. The package has embedded administrator and password credentials that are created at the ePO console and server. The embedded credentials allow the user to run and install McAfee Agent 4.x.

IMPORTANT: This allowance doesn’t give full administrator permissions to the user to install other applications.

Take one of the actions below, depending on your environment:

If you’re using Active Directory Group Policies, edit the Domain Security Policy on the Domain Controller:

Click Start, Programs, Administrative Tools, Domain Security Policy
If you aren’t using Active Directory Group Policies, change the configuration on the local computer:

Click Start, Settings, Control Panel, Administrative Tools, Local Security Policies.

Expand Local Policies and select User Rights Assignment.
In the right pane, double-click Impersonate a client after authentication.
In the Security Policy Setting dialog box, click Add User or Group.
In the Select Users, Computers or Groups dialog box, type the name of the Group or User who runs the FramePkg.exe file.
Select Check Names and verify that the name is correct.
Repeat the steps applied to the Impersonate a client after authentication setting to the Create global objects setting.

Solution 2

To determine the user account or to verify that the user right setting causes this issue, assign the Impersonate a client after authentication and Create global objects user rights to the Everyone group:

If the program works correctly, the new security setting causes the issue.
If the problem continues after you make these changes, contact Microsoft for assistance to verify that the configurations are correct.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Error 1346: Either a required impersonation level was not provided

Environment

Problem 1

Problem 2

Problem 3

Cause

Solution 1

Solution 2

Affected Products

Languages:

Title

Title

Knowledge Center

Error 1346: Either a required impersonation level was not provided

Environment

Problem 1

Problem 2

Problem 3

Cause

Solution 1

Solution 2

Affected Products

Languages:

Choose your region

Title

Title