Login to participate
Security ArticlesRSS

Installation for Symantec Endpoint Protection (SEP) rolls back due to insufficient rights for the Domain/Local Administrator account to write the registry values or installation

Abhishek Pradhan's picture

Question/Issue: What do I do in wherein installation Rolls back as the Domain/Local Administrator account does not have enough rights to write the Registry values?

Symptoms: Installation rolls back at the point "Writing Registry enteries"; Live update registration Failed; Error: 10 The LiveUpdate install failed;

Cause: Installation Rolls back as the Domain administrator or Local Administrator account doesn't have rights to write the values into the Registry.
Solution:

To resolve this issue follow the steps below:

1. Check if Windows Server 2003 Server Resource Kit Tools is installed. If it is not installed download and install Windows 2003 Server Resource Kit tools into the following location "C:\Program Files\Windows Resource Kit\Tools"

2. Download and install SubInACL into the following Location: C:\Program Files\Windows Resource Kit\Tools

3. Create a file named "reset.cmd" in C:\Program Files\Windows Resource Kits\Tools folder.

4. Edit the "reset.cmd" file with the following content:

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f
subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f
subinacl /subdirectories %SystemDrive% /grant=administrators=f

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f
subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f
subinacl /subdirectories %SystemDrive% /grant=system=f

5. Go to command prompt

6. Type cd "C:\Program Files\Windows Resource Kit\Tools"

7. Type "reset.cmd" and press enter

Note: Wait till the process completes and the cursor comes back to the Command Prompt (This may take time from 10 minutes till a few hours as well)

8. Install Symantec Endpoint Protection (SEP)

References:

Error: "Install Error:10. The LiveUpdate install failed because LiveUpdate was not able to register one of its components"
http://service1.symantec.com/SUPPORT/sharedtech.nsf/d3c44a1678bd8f45852566aa005902cb/cc9946a5f817049488256de5005f2a90?OpenDocument&src=bar_sch_nam

Windows Server 2003 Resource Kit Tools Download:
http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

SubinACL Download:
http://www.microsoft.com/downloads/details.aspx?FamilyId=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en

Nel Ramos's picture

thank you... good on the

thank you...
good on the prep..

Nel Ramos