Endpoint Protection

Good afternoon everyone,

in our company we use SEP 12.1.5 . Some weeks ago we migrated from SEP11 to SEP 12.1.5 all of our clients. The network deploy via Tivoli Endpoint Manager successfully installed the update on most of the clients but some of them did not update for different reason.

Today I'm facing an issue with one of those clients. After logging onto user's pc I noticed that SEP 11 was still running on the machine so I proceeded with manual update.

Normally I run SEP 12.1.5 package on top of the old version and I never experienced any problem with that, but in this case I encountered "Error 2343. Specified path is empty.". So I followed this post: https://www-secure.symantec.com/connect/forums/error-2343-specified-path-empty-when-install-sep-client and now I don't have any version of SEP installed and when I try to install V12.1.5 the installation process starts normally and just quit itself after few seconds without any error reported.

I also tried to remove all Symantec components using the Wipe tool but it did not help.

Please fing the log below:
LOGS addes as attachments below.

Any suggestion will be appreciated!

Thank you all and kind regards,

Mattia

Can you post the SEP_INST.log and SIS_INST.log files please.

What logs do I need to gather in order to troubleshoot a failed SEP 12.1 client installation?

http://www.symantec.com/docs/TECH164067

But the log says it was success

MSI (s) (B0:24) [14:02:43:045]: Note: 1: 1728
MSI (s) (B0:24) [14:02:43:045]: Product: Symantec Endpoint Protection -- Configuration completed successfully.

MSI (s) (B0:24) [14:02:43:045]: Windows Installer reconfigured the product. Product Name: Symantec Endpoint Protection. Product Version: 12.1.5337.5000. Product Language: 1033. Manufacturer: Symantec Corporation. Reconfiguration success or error status: 0.

What logs do I need to gather in order to troubleshoot a failed SEP 12.1 client installation?

http://www.symantec.com/docs/TECH164067

Please post the SEP_INST.log and SIS_INST.log files as attachments

LOG attached

Attachment(s)

SEP_INST.LOG__16.txt   2.36 MB 1 version

SIS LOG attached

Attachment(s)

SIS_INST.LOG__4.txt   3.54 MB 1 version

LOGs added as attachments

It does but the fact is that SEP is not starting automatically and even if I try to run it manually from C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\Bin\SymCorpUI.exe I get the following error:

"Symantec Endpoint Protection cannot open becouse some Symantec services are stopped. Restart the symantec services, and then open Symantec Endpoint Protection."

All the Symantec services available on this machine are started...

See if this works, open services.msc

disable Symantec endpoint, kill endpoint service from taskmanager,

start the service.

Hello Rafeeq,

tried your suggestion, disabled Sepmasterservice, killed it from cmd, restarted it... nothing happend

Any other idea?

Thanks

Mattia

2015-03-25T13:09:55.177Z ERROR I SIS          Failed to copy the settings from just created ccSettings file to running settings.  Error=0x80000207
2015-03-25T13:09:55.177Z ERROR I SIS          File: C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\NonTransactedTemp\file1
2015-03-25T13:09:55.177Z ERROR I SIS            source key [\] destination key [\SEP\InstalledFeatures]

This is  the error that is shown in sis log.

Use cleanwipe, and install just core. Then reboot...

Add the features one by one following a reboot beofre adding the next feature. This will fix the issue..