Endpoint Protection

I recently read about SEP Support Tool and ran it on my PC because it won't install SEP 11. It rolls back during installation. The first time I ran the support tool it found 2 warnings:

1. Is UAC turned off?
2. Does the administrator have a password?

I am the primary user on my PC and I do have a password and UAC was turned on, so I turned it off, rebooted and attempted to install SEP and that still didn't work.

This is very frustrating!!!

So, I ran another test with the support tool and had the Load Point Analysis checked and a couple of other boxes checked. It found 1 error item:
3 items that are on my desktop as shortcuts. One to my system backups, 1 to my thumb drive, and one to my Libraries (Documents, Music, etc.)

What am I doing wrong??? Is there anything else that I can try to get this thing installed and working on my Windows 7 machine??? 

please try this first
uninstall liveupdate from add/remove programs
install only live update, you can find that in CD1
run the sep install.
if it fails please paste the sep_inst.log found under %temp% directory

It stilled rolled back. I installed LiveUpdate first, then "Symantec AntiVirus Win64.msi" and no go. Install log attached. The log file is pretty big (in the number of pages).

What build of SEP are you attempting to install? If this is the RU5 build it may be worth attempting to install with the RU6a build of SEP. I would recommend to go to Start>Run anter %temp% and look for sep_inst.log. Delete this file before running subsequent install as this file will not be appended to and we may see a different error in the install log after attempting to install LiveUpdate before installing the SEP client.

You can open the sep_inst.log file in notepad and perform a Ctrl+F and search for "value 3" without the quotes. Within the 10 lines above this we should see some sort of error regarding the install. Most likely I'm suspecting we'll see an LUCHECK.exe returned value 206.

I have linked a document below that will assist with LUCHECK 206 errors in most situations. It should not be completely necessary to go through the complete manual removal of SEP. As such I would recommend starting at Solution A in the document and working your way down the list.

If the installation completes successfully or is still failing after confirming all steps in this document please let us know. It would be helpful at that time to provide us with a copy of the sep_inst.log from the most recent failed installation. Of course you can also feel free to call into the support line and open a case so that you may speak with a technician and work on this issue over the phone.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010012509092648

Regards,

Your Log shows

LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206

Follow this article

Symantec Endpoint Protection Client installation fails on LUCHECK 206
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010012509092648

Thanks for the log Cody. That confirmed that this is an LUCHECK 206 related installation issue. If the document link I posted above does not assist in resolving the issue I would recommend to download the 11.0.6a build of SEP and attempt to install the client.

Also please note that if you are using an installation package for RU5 that was downloaded by the SEPM console through LiveUpdate and not from the media downloaded from our FileConnect.Symantec.Com site that we will need to either install the 11.0.6a build of SEP, or export a new install package from the SEPM without having the box to create a single.exe checked.

Once the package is exported you can delete the lucheck.exe and lusetup.exe from the exported package and replace with the lucheck.exe and lusetup.exe from the CD1\SEPWin64 directory. Once they are replaced we should be able to get the install to complete.

Regards,

from the log

LUCA: C:\Users\CODYWI~1\AppData\Local\Temp\VPVMKGRR\LiveUpdate\lucheck.exe

LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206

Vikrams document should work, if not try this one

http://service1.symantec.com/support/ent-security.nsf/docid/2009061614434248?Open&seg=ent

the install log shows the MSI being run from a directory called "SEP11MR564" so I would assume that its RU5.

RU6a is going to be the best solution here.

EDIT: ProductVersion=11.0.5002.333, from the install log

I will have to try the 11.0.6 and see if I get anywhere with that. I'll be back to this thread if installation fails.

Howdy SEP gurus,
I have a couple of server (all W2K3 R2 SP2) under support showing exactly the problem as described.
At a certain point, looks always like almost done, it simply states performing roll back - ( just missing the smiley)
I also found this is related to LU but I did not find a solution for now.
What I found as well is that LU service is running and cannot be stopped or killed. I had to disable it and reboot but during the SEP install it was started again (even I installed LU prior to SEP) and here we are again.
Suggestions as shown onhttp://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010012509092648did not solve the problem.
I’ve seen this mainly on WTS servers with Citrix installed.
SEP version is MU4 and MU5.
Not sure if that surprises you but SAV10 is still doing fine and can be installed without any issues.
To be honest, what I’m missing is a real clear error log of what is missing or what cannot be done – or is there an install flag for an advanced logging?
thx Hz.

Pls create another discussion.So that we will not lose the continuity of a problem.Even if the problem is same the solution may be different....

ok, new discussion opened: SEP install fails with rolling back

please try this first
uninstall liveupdate from add/remove programs
install only live update, you can find that in CD1
run the sep install.

man i did it and it did work u r the man rafeeq god bless ya i was waiting for someone to help me install symantec epp11 on win 7 i just love it i hate to work with norton internet securty but i love symantec thank u guys for such a think

Check the following registry entries for pending changes.  SEP will not install if there are pending changes.  The best solution is to export these registry entries, then delete any data values listed there.  BE SURE NOT TO DELETE THE REGISTRY FOLDER!

You can then run the install BEFORE REBOOTING!  Rebooting may cause the registry entries to be replaced and you'll have the same issue.

• REGISTRY FOLDER: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\FileRenameOperations
• REGISTRY KEY: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\ [PendingFileRenameOperations]