Endpoint Protection

 View Only

  • 1.  Endpoint Installation, Event ID's 10005, event ID's 11708

    Posted Dec 14, 2009 12:37 PM
    I currently have a server running 2008 server datacenter, the server is a domain controller and also is running Hyper V.

    When I try to do the install of the client package I receive two event ID's in the event viewer, both event ID 10005 and event ID 11708.

    Event ID 10005
    Product: Symantec Endpoint Protection -- Symantec Endpoint Protection has detected that there are pending system changes that require a reboot.  Please reboot the system and rerun the installation.

    Event ID 11708
    Product: Symantec Endpoint Protection -- Installation operation failed.

    I have restarted the server and did not help, the install does not appear to install.

    The version which I am currently running is 11.0.3001

    I do have other servers running 2008 which are using the same client install package and are working correctly.

    Has anyone seen this problem.  thanks for the help.





  • 2.  RE: Endpoint Installation, Event ID's 10005, event ID's 11708

    Posted Dec 14, 2009 09:41 PM
     you just need to delete this  registry key and run the install, things should be fine.

    Symantec Endpoint Protection (SEP) 11 client installation fails with the message "Pending system changes that require a reboot have been detected"

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007121609023348


     


  • 3.  RE: Endpoint Installation, Event ID's 10005, event ID's 11708

    Posted Dec 15, 2009 04:57 AM
    Hi Jnimick,

    I have seen that same behavior before on client computers that have QuickCams or other webcams.  A registry entry about a file named LVPrclnj01.dll was preventing the computer from allowing the SEP client install to succeed.  Rafeeq's recommended KB solved the issue.

    Final note: if you're installing SEP, I strongly recommend installing 11.0.5 (RU5) rather than the 11.0.3 (MR3) that you've listed.  RU5 contains hundreds of extra enhancements and improvements.  It's the version recommedned by the following article:  Top 10 Symantec Best Practices - Deploying Symantec Endpoint Protection Architecture

    Thanks and best regards,

    Mick


  • 4.  RE: Endpoint Installation, Event ID's 10005, event ID's 11708

    Posted Dec 15, 2009 05:12 AM
    I am also strongly recommend you to use RU5 (11.0.5) in windows 2008 servers since it is the only version which support windows 2008 officially by symantec
    ref:Release notes for Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x

    While installing SEP in hyper-v servers you have to consider following things also
    Error code when you create or start a virtual machine on a Windows Server 2008-based computer that has Hyper-V or on a Microsoft Hyper-V Server 2008-based computer: "0x800704C8", "0x80070037" or "0x800703E3"