https://community.splunk.com/t5/Installation/Installation-ended-prematurely-on-fresh-install-of-Splunk-7-3-3/m-p/519100#M6663 <P>Fresh install of Splunk 7.3.3 on Windows Server 2016 index server.</P> <P>I kept getting the "Splunk installation ended prematurely" with no clear evidence as to why. I tried most of the possible solutions in older posts, with no improvement.</P> <P>Turns out my domain Splunk service account had been set up with membership in a slew of groups, including the domain admin group. This apparently caused a permissions disconnect in the index server local security policy, where both Deny logon as a batch job and Deny logon as a service included Domain Admin. So, even though my Splunk service account had permission to Logon as a batch job and Logon as a service, it was blocked because of the Domain Admin membership.</P> <P>I removed the service account from the Domain Admin group and the installation completed successfully.</P> Fri, 11 Sep 2020 21:09:56 GMT jeff47 2020-09-11T21:09:56Z https://community.splunk.com/t5/Installation/Installation-ended-prematurely-on-fresh-install-of-Splunk-7-3-3/m-p/519100#M6663 <P>Fresh install of Splunk 7.3.3 on Windows Server 2016 index server.</P> <P>I kept getting the "Splunk installation ended prematurely" with no clear evidence as to why. I tried most of the possible solutions in older posts, with no improvement.</P> <P>Turns out my domain Splunk service account had been set up with membership in a slew of groups, including the domain admin group. This apparently caused a permissions disconnect in the index server local security policy, where both Deny logon as a batch job and Deny logon as a service included Domain Admin. So, even though my Splunk service account had permission to Logon as a batch job and Logon as a service, it was blocked because of the Domain Admin membership.</P> <P>I removed the service account from the Domain Admin group and the installation completed successfully.</P> Fri, 11 Sep 2020 21:09:56 GMT https://community.splunk.com/t5/Installation/Installation-ended-prematurely-on-fresh-install-of-Splunk-7-3-3/m-p/519100#M6663 jeff47 2020-09-11T21:09:56Z https://community.splunk.com/t5/Installation/Installation-ended-prematurely-on-fresh-install-of-Splunk-7-3-3/m-p/519101#M6664 <P>Can you check windows architecture and msi file architecture you downloaded from Splunk. Both should match.</P><P>if you are trying to install 32 bit splunk msi file on 64 bit windows server. Mostly you get that error.</P> Fri, 11 Sep 2020 15:11:58 GMT https://community.splunk.com/t5/Installation/Installation-ended-prematurely-on-fresh-install-of-Splunk-7-3-3/m-p/519101#M6664 thambisetty 2020-09-11T15:11:58Z