Endpoint Protection

After removing Symantec AntiVirus v10.1.x, Endpoint 11 install fails.  One "return value 3" is logged:

AgentMainCA: SAVMIGINSTDIR=
MSI (s) (E0!14) [09:34:55:223]: PROPERTY CHANGE: Modifying LUCONFIGURED property. Its current value is '1'. Its new value: '0'.
AgentMainCA: No DestinationDirectory data found or value was empty
MSI (s) (E0!14) [09:34:55:223]: PROPERTY CHANGE: Modifying RUNLIVEUPDATE property. Its current value is '1'. Its new value: '0'.
MSI (s) (E0!14) [09:34:55:223]: PROPERTY CHANGE: Adding FEATURESTATECHANGE property. Its value is '1'.
AgentMainCA: Don't run LiveUpdate.
MSI (s) (E0:B8) [09:34:55:239]: Doing action: saveEPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1
Action ended 9:34:55: ParseSetAid.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5. Return value 1.
MSI (s) (E0:B8) [09:34:55:239]: PROPERTY CHANGE: Adding regBBDriver.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1 property. Its value is '0'.
Action start 9:34:55: saveEPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1.
MSI (s) (E0:B8) [09:34:55:239]: Doing action: saveSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1
Action ended 9:34:55: saveEPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1. Return value 1.
MSI (s) (E0:D4) [09:34:55:317]: Invoking remote custom action. DLL: C:\WINNT\Installer\MSI77.tmp, Entrypoint: saveSPState
Action start 9:34:55: saveSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1.
saveSPState: called
serviceIsRunning: OpenService FAILED with error 1060
serviceIsRunning: OpenService FAILED with error 1060
MSI (s) (E0!14) [09:34:55:520]: PROPERTY CHANGE: Adding spState property. Its value is '0'.
MSI (s) (E0!14) [09:34:55:520]: PROPERTY CHANGE: Adding restoreSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1 property. Its value is '0'.
saveSPState: SymProtect is off
saveSPState: exiting
Action ended 9:35:25: saveSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1. Return value 3.  



Any help would be greatly appreciated...
An

Here is the exact document you need:

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/76536fbaeace96cb80257507003db395?OpenDocument

The cause of this problem is the permissions on the TEMP directory.

Cheers,
Aniket

thank you for the response, unfortunately the install does not succeed.  I created a new TEMP directory (c:\TMP), set the environment path, and rebooted the server.  The most recent log:

MSI (s) (E8:00) [11:16:28:687]: Doing action: saveEPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1
Action ended 11:16:28: ParseSetAid.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5. Return value 1.
MSI (s) (E8:00) [11:16:28:703]: PROPERTY CHANGE: Adding regBBDriver.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1 property. Its value is '0'.
Action start 11:16:28: saveEPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1.
MSI (s) (E8:00) [11:16:28:703]: Doing action: saveSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1
Action ended 11:16:28: saveEPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1. Return value 1.
MSI (s) (E8:04) [11:16:28:734]: Invoking remote custom action. DLL: C:\WINNT\Installer\MSI1A.tmp, Entrypoint: saveSPState
Action start 11:16:28: saveSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1.
saveSPState: called
serviceIsRunning: OpenService FAILED with error 1060
serviceIsRunning: OpenService FAILED with error 1060
MSI (s) (E8!24) [11:16:29:000]: PROPERTY CHANGE: Adding spState property. Its value is '0'.
MSI (s) (E8!24) [11:16:29:000]: PROPERTY CHANGE: Adding restoreSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1 property. Its value is '0'.
saveSPState: SymProtect is off
saveSPState: exiting
Action ended 11:16:59: saveSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1. Return value 3.
Action ended 11:16:59: INSTALL. Return value 3.

 This issue looks diffrent...the previoud SAV or may be SEP installation was corrupted and not removed properly.Symevent drivers wopuld be still present on this system.

You either go for manual removal of SAV or Get in touch with Tech support and ask for Cleanwipe tool.
Rn cleanwipe then re-run the install.

unfortunately, the cleanwipe tool did not resolve the problem.  I'll let this client machine run the older version until we can decomission that particular host.  Thank you for your help.