KB Article | Forcepoint Support

Notes & Warnings

The information in this article recommends editing the registry. Before proceeding, back up the registry, and be sure you understand how to restore the registry if a problem occurs. Refer to the Microsoft Knowledge Base (support.microsoft.com/kb/256986/EN-US/) for information on backing up, restoring, and editing the registry.

Forcepoint provides information on how to edit the Windows registry as a convenience to its customers, but does not support Windows in any way and will not be responsible for any problems that may arise from such editing.

WARNING: Using Registry Editor incorrectly may cause serious problems that could require you to reinstall the operating system. Forcepoint and Microsoft do not guarantee that you can solve problems that result from using the Registry Editor incorrectly. Use Registry Editor at your own risk.


Problem Description

When trying to install the Forcepoint DLP Endpoint, the installer asks you to restart the endpoint machine. Even after restarting, the installer asks to be restarted again. How do I resolve this issue?


The Forcepoint DLP Endpoint checks the following before prompting you to restart the endpoint machine:
  • Check the registry key at
    "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations".
    If one or more of the endpoint files are pending a rename, the installer prompts the user to restart the endpoint machine.
  • Check to see if the driver QIP.SYS is installed on the endpoint machine. If the driver is there and the installer is doing a fresh install, the installer prompts you to restart the endpoint machine.
Follow the steps below to resolve:
  1. Remove or rename all QIP related DLL and SYS files from:
    • C:\Windows\SysWOW64\
    • C:\Windows\System32\
    • C:\Windows\System32\drivers\
  2. If it exists, delete the QIP key (and the sub keys and values under it) at "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\".
  3. If it exists, delete any keys containing "QIP" at "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations".
  4. Restart the endpoint machine.
  5. Install the Forcepoint DLP Endpoint again and restart the endpoint machine.

keywords: endpoint install fail; endpoint installation fail; failure to install endpoint; cannot install endpoint; Please reboot your computer before install; QIPCAP.dll; QIPCAP64.dll; PendingFileRenameOperations

Article Feedback

Thank you for the feedback and comments.