Error 1921 message during Intune/MECM deployment resulting from upgrading existing SD Clients 8.6x-9.1x to 9.2

Error 1921. Service WinMagic SecureDoc Service could not be stopped. Verify that you have sufficient privileges to stop system services.



Cause: The current command from KB article #1912 relies on default installer behavior that worked in older Windows and Intune/MECM environments. With newer Windows versions and stricter SYSTEM context execution, it could no longer access certain paths or handle silent installation correctly, causing silent failures. The updated command explicitly sets silent installation, logging, and reboot suppression options, ensuring the installer runs reliably, generates logs, and completes successfully under Intune or MECM.

Resolution:

Step 1:

For SecureDoc_64.exe: Copy and paste the entries below to Notepad and rename the text file to *.bat (i.e. install.bat).
@echo off

REM Create Directory
mkdir "C:\temp\CopySD\SDClient"

REM Copy files to workstation
xcopy KnownConfigs.xml "C:\temp\CopySD\SDClient" /y
xcopy PackageSettings.ini "C:\temp\CopySD\SDClient" /y
xcopy SDConnex.cer "C:\temp\CopySD\SDClient" /y
xcopy SDProfile.spf "C:\temp\CopySD\SDClient" /y
xcopy SecureDoc_64.exe "C:\temp\CopySD\SDClient" /y

REM Change to installer folder
cd /d "C:\temp\CopySD\SDClient"

REM Run installer silently without reboot and generate logs
SecureDoc_64.exe /s /v"/qn /l*v %WINDIR%\SDSetup_Client_v9.2_291.log ALLUSERS=2 SDEBUG=1 SDREBOOT=NO SDPROMPTRESTART=NO REBOOT=ReallySuppress"

REM Wait until installer finishes
:loop
tasklist /fi "imagename eq SecureDoc_64.exe" | findstr /i "SecureDoc_64.exe" > nul
if %ERRORLEVEL%==0 (
timeout /t 2 /nobreak > nul
goto loop
)
echo Installation complete.
exit /b

For SecureDoc_64.msi: Copy and paste the entries below to Notepad and rename the text file to *.bat (i.e., install.bat)

@echo off
REM Create Directory
mkdir "C:\temp\CopySD\SDClient"

REM Copy files to workstation
xcopy KnownConfigs.xml "C:\temp\CopySD\SDClient" /y
xcopy PackageSettings.ini "C:\temp\CopySD\SDClient" /y
xcopy SDConnex.cer "C:\temp\CopySD\SDClient" /y
xcopy SDProfile.spf "C:\temp\CopySD\SDClient" /y
xcopy SecureDoc_64.msi "C:\temp\CopySD\SDClient" /y

REM Change to installer folder
cd /d "C:\temp\CopySD\SDClient"

REM Run MSI installer silently without reboot and generate logs
Start /wait msiexec.exe /i "SecureDoc_64.msi" /qn /norestart /l*v "%WINDIR%\SDSetup_Client_v9.2_291.log" ALLUSERS=2 SDEBUG=1 SDREBOOT=NO SDPROMPTRESTART=NO REBOOT=ReallySuppress INSTALLLEVEL=3

echo Installation complete.
exit /b 0

Important Note when using SecureDoc_64.msi:

The .NET Redistributable Package installer (a runtime libraries) is a pre-requisite for the success of the MSI installation. When using .msi, consider creating two packages, one for the .net installer and one for the .msi. This will create a dependency between them. Install the C++ Redist pkg and then re-run the *.msi.

The .exe contains both the .NET Redistributable Package installer AND the MSI in one package.
It is recommended to just use .exe file. For more information regarding the *.msi file dependency, please Google search “msi installer requirements dependency”

Step 2:

On the install command field, replace the command line with something like C:\installSD.bat

This batch file will create a temp directory and copy our files to the directory so the installation can proceed.