Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Client rollback

Created: 25 Sep 2012 • Updated: 26 Sep 2012 | 8 comments
This issue has been solved. See solution.
All clients on XP work fine, get all the updates and definitions, but some of them have the status "Installation failed, performed rollback" in Symantec Endpoint Protection Manager, and every boot they try install and rollback something.
What I need to do to complete the installation?

Comments 8 CommentsJump to latest comment

Ashish-Sharma's picture

hi,

Kindly provide SEP_Inst.log

Log Files are located in %temp% or %systemroot%\temp

Thanks In Advance

Ashish Sharma

andrm2003's picture

file contains a part of the Russian text, RU version installed

AttachmentSize
SEP_INST.zip 84.05 KB
Ashish-Sharma's picture

HI

MSI (s) (E8:60) [10:37:11:421]: Deferring clean up of packages/files, if any exist
MSI (s) (E8:60) [10:37:11:421]: MainEngineThread is returning 1603
MSI (s) (E8:CC) [10:37:11:421]: No System Restore sequence number for this installation.
=== Завершение записи журнала: 25.09.2012  10:37:11 ===
MSI (s) (E8:CC) [10:37:11:421]: User policy value 'DisableRollback' is 0
MSI (s) (E8:CC) [10:37:11:421]: Machine policy value 'DisableRollback' is 0
MSI (s) (E8:CC) [10:37:11:421]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (E8:CC) [10:37:11:421]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (E8:CC) [10:37:11:421]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (E8:CC) [10:37:11:421]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (s) (E8:CC) [10:37:11:421]: Restoring environment variables
MSI (s) (E8:CC) [10:37:11:437]: Destroying RemoteAPI object.
MSI (s) (E8:78) [10:37:11:437]: Custom Action Manager thread ending.
MSI (c) (E0:8C) [10:37:11:437]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (E0:8C) [10:37:11:437]: MainEngineThread is returning 1603

 Check this artical

Symantec Endpoint Protection 12.1 client install rolls back, returning 1603
 
 
SEPM installation rolls back.

Thanks In Advance

Ashish Sharma

andrm2003's picture
No, TECH170259 did not help, the same message in log, the same status.
Cleanwipe then attempting to reinstall not resolve also.
andrm2003's picture

I have no LiveUpdate in control panel-add/remote program, sp3 is newer that this microsoft update, and SEPM on my server work fine. Not my case...

Ashish-Sharma's picture

Hi,

Kindly provide Client OS version ?

Try to user SEP 12.1 Cleanwipe tool.

First you will be install Live update after SEP client .

Thanks In Advance

Ashish Sharma

andrm2003's picture

The problem was at the stations, where the users are not built-in administrator, but they in the group "Administrators". The problem was when client installing in the background, in the interactive mode everything is installed without errors.

SOLUTION