Problem Description
Symantec Endpoint Protection 11.x client installation is subject to a failure and subsequent rollback on Windows XP Embedded OS. Although SEP client can be installed on Embedded Operating Systems, the installation process often gets stuck because of partial incompatibility issues. However, PC-based Embedded OS should usually work correctly with the SEP client from MR2 onwards. Nevertheless, sometimes there are installation issues. The following description provides a description on one of the most common problems.
Error
Error message extracted from SEP_INST.LOG
MSIASSERT - 2011-04-08-15-34-01-828 : cc::CServiceControl::WaitForService(188) : Service status is incorrect. Returning false:
MSIASSERT - StartEventLogService: WaitForService failed:
Action ended 15:34:01: InstallFinalize. Return value 3.
MSI (s) (9C:0C) [15:36:41:640]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (9C:0C) [15:36:41:640]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (9C:0C) [15:36:41:640]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (9C:0C) [15:36:41:640]: Restoring environment variables
MSI (s) (9C:0C) [15:36:41:640]: Destroying RemoteAPI object.
MSI (s) (9C:F4) [15:36:41:640]: Custom Action Manager thread ending.
MSI (c) (78:80) [15:36:41:656]: Back from server. Return value: 1603
MSI (c) (78:80) [15:36:41:656]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (78:80) [15:36:41:656]: PROPERTY CHANGE: Deleting SECONDSEQUENCE property. Its current value is '1'.
Action ended 15:36:41: ExecuteAction. Return value 3.
MSI (c) (78:80) [15:36:41:656]: Doing action: SetupCompleteError
Action 15:36:41: SetupCompleteError.
Action start 15:36:41: SetupCompleteError.
Action 15:36:41: SetupCompleteError. Dialog created
Action ended 15:37:17: SetupCompleteError. Return value 2.
Action ended 15:37:17: INSTALL. Return value 3.
Environment
SEP 11.0.6005 RU6a but also known to happen on other versions
Windows XP Embedded on PC-based machine
Cause
Issue with Event Log Service
Solution
1) Ensure the Windows Event Log service is started and set to automatic.
2) Ensure that logon to the OS is made with administrative permissions.
3) Navigate to Start>Run and enter "services.msc" without quotes.
4) In the Services window that opens, scroll down and locate Windows Event Log service.
5) Right click and choose Properties.
6) On the General tab click the Startup type drop-down menu and select Automatic.
7) Under Server status click the Start button.
8) Click Apply to save your changes.
9) Restart the machine in question and run SEP installation again
More information on SEP and XP Embedded OS:
Endpoint Protection for Windows XP Embedded Documentation
http://www.symantec.com/business/support/index?page=content&id=DOC2237
Symantec Endpoint Protection for Windows XP Embedded Readme.txt
http://www.symantec.com/business/support/index?page=content&id=TECH102660
Symantec Endpoint Protection support for embedded operating systems
http://www.symantec.com/business/support/index?page=content&id=TECH106027