Endpoint Protection

We just recently switched to SEP from McAfee, and while we can install SEP 11.0.6a manually via export package on Windows 7 Pro x64, we have yet to be able to install SEP on Windows 7 Pro x64 via "Find Unmanaged Computers".  It works great on all of our Windows XP clients, but will not work on any of our clean brand new Windows 7 Pro x64 boxes.  Not one.  We've diabled the following services:

Windows Defender
Windows Security Center
Windows Firewall
UAC
Interactive Detection Service
File Sharing wizard

We are using a Domain Admin account, tried the local admin account, enabled network discovery.

It's not the Live Update issue as the install isn't even starting.  Basically all that is happening is 2 files are being put in the C:\TEMP directory.  The files are:

c:\TEMP\Clt-Inst\vpremote.dat
c:\TEMP\Clt-Inst\vpremote.exe

That's it.  No logs anywhere, no setup, doesn't even run.  No event logs either.

I'm at a loss.  Has anyone actually been able to use the "Find Unmanaged Computers" on Windows 7 Pro x64?  Does anyone have it working?  If so what on earth did you do to get it working?  I'm working on this with support as well but they're having trouble with this as well it seems.  Anyone?

disable UAC and then run the install; it would work

As I've stated above, I've tried that.  It doesn't work.

I have done it on 2 windows7 64 bit with no problems. didn't have to change a thing.

I did make one mistake once, however by trying to use the 32 bit package rather than the 64 but package. in that instance it SEPM claimed it had finished, but nothing on the client.
 

We definitely made sure we selected x64, but thanks for the reply.  I wonder what makes our machines different.  It's very odd.  Brand new install of Windows 7 too, several machines.  They were ghosted using sysprep, don't see why that would matter though.

are you able to install those locally?

It installs just fine using the export package feature and manually installing, yes.  That's a bit cumbersome for hundreds of computers though.

can you check this also plz

Cannot install Symantec Endpoint Protection 11 to computers running Windows Vista when using the 'Find Unmanaged Computers' tool
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007091919104648

Yep, tried it.  I've seen this document already as well.   Still no go.

As an aside, when using remote deploy tools, when it says it's finished, it means it's finished pushing the files over.  It doesn't report back with whether or not the installation was a success.

What about pushing an exported package out through Migration and Deployment Wizard?  Do you get the same results?

There are no errors in the event logs regarding vpremote.exe, correct?

Is msiexec running on the computer?  if so, if it's stalled out, stop the process, delete the clt-inst folder then try again.

sandra

Run the sep support tool on the client to see if it identifies any issues.

@ Marcus, This may not be related, but are you doing this through the Web console? If so, there is a problem with packages when doing it this way. Check to make sure the MD5 of the 64 bit package is different than the 32 bit package.

Best,
Thomas

I'm doing it through the Java-based console.  Not sure how to check the MD5?

The Migration and Deployment Wizard gets a little further in that it does copy the setup.exe to the client for a total of three files, however, it stalls out and does not run setup.exe.  I've deleted these files and rebooted but still no luck.  No information is in the event logs reguarding SEP at all.

It's not the same issue then. No worries on the MD5.

I'll do this now.

I ran the support tool and no problems were detected, everything is green.  I just don't get it.

Just fyi, don't know that it matters, but the server is a Windows Server 2008 Enterprise R2 VMware virtual machine.  Please keep in mind everything works great pushing out to Windows XP clients.  Could this be a weird server issue?

Well, after a reboot the client now finally installs using the Migration and Deployment Wizard.  I think it's working with this now due to disabling the Interactive Services Detection service.  Is there any way to install this Migration and Deployment Wizard on management PCs for our support team so we don't have to go to the server everytime we need to deploy to Windows 7?  This is still rather cumbersome.  Better, but cumbersome.

Something else to verify is that you create an install setting configured with silent install that you choose during the Find Unmanaged installation.