NVP vProxy: Unable to install FLR agent on a Windows Virtual Machine.

Summary: During a File Level Recover (FLR) of a Windows Virtual Machine (VM) protected with the NetWorker VMware Protection (NVP) vProxy appliance. The FLR mount fails, stating that the FLR agent is not installed and the virtual machine does not allow installation. The process returns exit code 1625. ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

The NetWorker VMware Protection integration is configured with the vProxy Appliance.  The file level restore (FLR) to a Windows virtual machine fails during the FLR agent installation with: 
159373:nsrvproxy_flr: vProxy Log: YYYY/MM/DD HH:MM:SS INFO:   [@(#) Build number: 233] Unmounting after mount failure: Unable to install FLR agent on VM '[VM_NAME]' (vm-442): Failed to install vProxy Agent on "[VM_NAME]": Command 'C:\Windows\system32\msiexec.exe' terminated with exit code 1625.

Cause

The Microsoft Windows exit status during the msi installation is related to an operating system security setting: 
C:\Windows\system32>net helpmsg 1625
This installation is forbidden by system policy. Contact your system administrator.
There are several possibilities causing the issue some of which are listed below:
  1. User Account Control (UAC) settings are set too high.
  2. An Active Directory Domain Policy is not allowing software installs.
  3. Internet Explorer (IE) settings have restricted the FLR Agent MSI package from being installed.
  4. There is antivirus software that is installed on the target VM blocking the FLR agent install.

Resolution

This is a Windows security setting issue which must be reviewed by the local Administrator and cannot be addressed through NetWorker. The Windows administrator account can be used to install the FLR agent, subsequent FLR can be run using another account. The following workarounds can be used to install the FLR Agent on the target virtual machine:
 

NetWorker Web User Interface (NWUI) Method

If NWUI server has been installed in the NetWorker environment, you can specify Run with elevated privileges during the FLR. This option is not available in the NetWorker Management Console (NMC) or Data Protection Restore Client. https://NetWorker_Server:9090/nwui
 

Run with elevated privileges

Verify if NWUI is installed on the NetWorker server (Included by default on NetWorker Virtual Edition):

Linux: rpm -qa | grep lgtonwui
Windows: wmic product get name, version, vendor | find "Web UI Server"
 

Manual Installation Method

If the FLR agent cannot be installed using NMC, NetWorker Web UI, or Restore Client, manually install it on the target VM operating system.

  1. Log in to the Windows VM you want to perform the FLR to, using the FLR user credentials.
  2. Copy the FLR agent from the vProxy to the Windows VM using one of the following methods:
    1. Connect to the vProxy as admin, using a Secure Copy Protocol (SCP) agent (FileZilla, WinSCP, so on). Copy the installation package from: /opt/emc/sw-repo/vflragent/windows
SCP vProxy agent
  1. Using command line on the Windows VM, if the scp command is available. Open an Administrator PowerShell prompt:
    scp admin@vPROXY_ADDRESS:/opt/emc/sw-repo/vflragent/windows/emc*.msi TARGET-DIRECTORY-DOWNLOAD-PATH
    Example:

scp command example 

  1. On the VM, right-click the emc-vProxy-FLRAgent package, and click Install. Click Yes if prompted by UAC regarding the package install.
  2. The FLR agent is displayed in Programs and Features from the Control Panel:
Programs and Features showing FLR agent installed

Additional Information

User Account Control (UAC)

If the UAC settings on the target VM are high, temporarily turn UAC off to perform the FLR. If UAC settings cannot be modified and installations continue to fail from restore options, attempt the manual install method.

Firewall Software

If there is an antivirus software installed on the target VM, check to see if any settings can potentially block software installation. It has been observed that some software's may block the FLR agent installation, while still allowing other applications to install. Temporarily disable the firewall to see if agent installation succeeds when disabled. If this succeeds, review firewall configuration options to allow installation of the FLR agent when enabled. 

Agentless Workaround

Linux VMs:
NVP vProxy: Unable to install FLR agent on Linux Virtual Machine.

Affected Products

NetWorker, VMware
Article Properties
Article Number: 000052278
Article Type: Solution
Last Modified: 17 Nov 2025
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.