Endpoint Protection

 View Only

  • 1.  Client rollback

    Posted Sep 25, 2012 11:55 PM

     

    All clients on XP work fine, get all the updates and definitions, but some of them have the status "Installation failed, performed rollback" in Symantec Endpoint Protection Manager, and every boot they try install and rollback something.
    What I need to do to complete the installation?


  • 2.  RE: Client rollback

    Posted Sep 25, 2012 11:59 PM

    hi,

    Kindly provide SEP_Inst.log

    Log Files are located in %temp% or %systemroot%\temp



  • 3.  RE: Client rollback

    Posted Sep 26, 2012 12:38 AM
      |   view attached

    file contains a part of the Russian text, RU version installed

    Attachment(s)

    zip
    SEP_INST_56.zip   84 KB 1 version


  • 4.  RE: Client rollback

    Posted Sep 26, 2012 01:44 AM

    HI

    MSI (s) (E8:60) [10:37:11:421]: Deferring clean up of packages/files, if any exist
    MSI (s) (E8:60) [10:37:11:421]: MainEngineThread is returning 1603
    MSI (s) (E8:CC) [10:37:11:421]: No System Restore sequence number for this installation.
    === Завершение записи журнала: 25.09.2012  10:37:11 ===
    MSI (s) (E8:CC) [10:37:11:421]: User policy value 'DisableRollback' is 0
    MSI (s) (E8:CC) [10:37:11:421]: Machine policy value 'DisableRollback' is 0
    MSI (s) (E8:CC) [10:37:11:421]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (E8:CC) [10:37:11:421]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (E8:CC) [10:37:11:421]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (E8:CC) [10:37:11:421]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (s) (E8:CC) [10:37:11:421]: Restoring environment variables
    MSI (s) (E8:CC) [10:37:11:437]: Destroying RemoteAPI object.
    MSI (s) (E8:78) [10:37:11:437]: Custom Action Manager thread ending.
    MSI (c) (E0:8C) [10:37:11:437]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (E0:8C) [10:37:11:437]: MainEngineThread is returning 1603

     Check this artical

    Symantec Endpoint Protection 12.1 client install rolls back, returning 1603
     
     
    SEPM installation rolls back.

     



  • 5.  RE: Client rollback

    Posted Sep 26, 2012 02:19 AM

     

    No, TECH170259 did not help, the same message in log, the same status.
    Cleanwipe then attempting to reinstall not resolve also.


  • 6.  RE: Client rollback

    Posted Sep 26, 2012 02:23 AM

    Check this

    SEPM installation rolls back.


  • 7.  RE: Client rollback

    Posted Sep 26, 2012 03:31 AM

    I have no LiveUpdate in control panel-add/remote program, sp3 is newer that this microsoft update, and SEPM on my server work fine. Not my case...



  • 8.  RE: Client rollback

    Posted Sep 26, 2012 03:34 AM

    Hi,

    Kindly provide Client OS version ?

    Try to user SEP 12.1 Cleanwipe tool.

    First you will be install Live update after SEP client .



  • 9.  RE: Client rollback
    Best Answer

    Posted Sep 26, 2012 11:33 PM

    The problem was at the stations, where the users are not built-in administrator, but they in the group "Administrators". The problem was when client installing in the background, in the interactive mode everything is installed without errors.