Symantec Endpoint Protection installation fails with "CreateProcessAndWait( LUCHECK.EXE ) returned 206" in the installation log

Article:TECH96559  |  Created: 2009-01-05  |  Updated: 2011-06-13  |  Article URL http://www.symantec.com/docs/TECH96559
Article Type
Technical Solution


Environment

Problem




 Symantec Endpoint Protection installation rolls back with "CreateProcessAndWait( LUCHECK.EXE ) returned 206" in the installation log


Error



LUCA: InstallLiveUpdate enter.
LUCA: C:\Users\ADMINI~1\AppData\Local\Temp\VFCCFIRX\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
MSI (s) (A8:F4) [16:31:20:736]: User policy value 'DisableRollback' is 0
MSI (s) (A8:F4) [16:31:20:736]: Machine policy value 'DisableRollback' is 0
Action ended 16:31:20: InstallFinalize. Return value 3.

Solution



There are a multiple solutions for this issue.

  1. Remove old LiveUpdate folders:
    • Navigate to C:\ProgramData\Symantec and delete LiveUpdate (if present).
    • Navigate to C:\Documents and Settings\All Users\Application Data\Symantec and delete LiveUpdate (if present).
    • Start install of Symantec Endpoint Protection Client.
       
  2. Fix the %AppData% variable for the SYSTEM account.
    • Open 'regedit' from a run prompt.
    • Navigate to HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders.
    • Make sure that the AppData string is set to: %USERPROFILE%\Application Data for Windows XP/ Windows Server 2003 or %USERPROFILE%\AppData\Roaming for Windows Vista/ Windows 7/ Windows Server 2008.
      Note: Any other values here that do not have %USERPROFILE% may be incorrect as well and could cause issues.
    • Start install of Symantec Endpoint Protection Client.


       


Legacy ID



2009100514432648


Article URL http://www.symantec.com/docs/TECH96559


Terms of use for this information are found in Legal Notices