Endpoint Protection

Hi,

i have upgraded my Symantec Manager from 12.1 to 12.1 RU1. My manager got upgraded, but when i upgraded my clients they are not upgrading and still showing old version. In properties (Deployment message) of the clients it is showing as client has accepted the upgrade package..But not installed.

what to do? need help urgently..

please find the SEP_INST Log file..

Attachment(s)

SEP_INST.zip   131 KB 1 version

use the local administrator account , as the current account does not have access to registry

MSI (s) (34:64) [16:30:52:561]: Product: Symantec Endpoint Protection -- Error 1406. Could not write value SEPINSTALLSCRIPTSDIR to key \SOFTWARE\Symantec\Symantec Endpoint Protection\{FCF84532-5E19-4602-85DC-07AD26FE0070}\Common Client\PathExpansionMap.  System error .  Verify that you have sufficient access to that key, or contact your support personnel.
 

Hi

After upgread SEPM from older version to new version check wether firewall is disebale are not firewall should be disable are we should add firewall portno

And check wether your able to ping your server machine from client machine and check same for telnet also

Create the installation packages for clients in server machine go to Admin tab and select the installation packages and right click  and add the latest version of SEPM it push from server and new version will be install in client machines and it get update with latest version.

iam upgrading the clients from manager only..Upgrade groups with package option..iam using domain admin only

however the logs shows the user does not have registry access, hence the failure.

Can you try local admin and see if it helps?

Hello,

Here are few Articles which addresses this issue:

1) Unable to open the Symantec Endpoint Protection client interface after migrating to 12.1 on Windows 7 64-bit

Hi,

Iam Using all the clinets as Managed..How to solve this issue? Since i have upgraded 1 week ao..but none of my clients are upgraded

You want me to add the user as local admin or local admin as administrator? or i need to login as local admin in server and try to push the clients?

Awating Reply?

try adding local admin as administrator account.

Please find the event log after updating the client..client is not upgraded..

Log Name:      Application
Source:        MsiInstaller
Date:          19-12-2011 AM 9:06:28
Event ID:      1033
Task Category: None
Level:         Information
Keywords:      Classic
User:          SYSTEM
Computer:      isdpcs4033.hosur.tvsmotor.co.in
Description:
Windows Installer installed the product. Product Name: Symantec Endpoint Protection. Product Version: 12.1.1000.157. Product Language: 1033. Manufacturer: Symantec Corporation. Installation success or error status: 1603.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">1033</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-12-19T03:36:28.000000000Z" />
    <EventRecordID>9309</EventRecordID>
    <Channel>Application</Channel>
    <Computer>isdpcs4033.hosur.tvsmotor.co.in</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>Symantec Endpoint Protection</Data>
    <Data>12.1.1000.157</Data>
    <Data>1033</Data>
    <Data>1603</Data>
    <Data>Symantec Corporation</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
    <Binary>7B46413638393032332D304237322D343737312D393841362D4131433932374535383230377D3030303034333165303965663964616630313939363164303930636130356662613339343030303030393034</Binary>
  </EventData>
</Event>

client upgrade

once SEPM console get upgrade  go to Admin tab and sellect the installation tab and right click and add latest version 12.1 RU1 for 32 Bit and 64 Bit autometically from console machine it push to clients once client get installed restart the cleint machine and check of latest version and you should disable the windowes firewall

Kindly update since my clients are not upgraded to new version

Pete,

I am having the identical issue, on one of my clients so far.

And can confirm that neither the local or domain Administrator accounts will succeed in installing the SEP 12.1 RU1 client.

In my case, what is different about this machine is that the user did not heed our instructions to reboot when the SEP installer asked him to, and instead the old version managed to reinstall itself at some point later in the day. 

My first attempt to resolve the error was to uninstall the old client, and push the new version out from the server, but that did not work.  I have also tried extracting the deployment package and installing it that way, but no change in the result there either.

Top Google hit for this error does not apply directly, as this is a 32-bit XP system, and it also claims this was resolved in RU 1: http://www.symantec.com/business/support/index?page=content&id=TECH164707

But, I'm wondering if there's something to that.

Mithun,

Suggestion #2 sounds like confirmation of my thoughts on this.  Will the Norton 2009 removal tool listed there work on Endpoint 12.1 clients, however?

Thanks

Thanks for the help..when we found one application control policy preventing the clients to access the manager, after disabling the policy "protect client files and registry keys" it is working fine.

all my clients are started getting upgraded