Endpoint Protection

When Windows boots up for the first time, it displays that it is installing SEP but then it disappears after a second. A seperate application installs straight after and it is successful, however SEP always fails. Each time the computer is booted up after that then it still shows that its trying to install SEP but fails.

The error in the event log shows:

Source: Application Management
Event ID 108
Failed to apply changes to software installation settings. Software changes could not be applied. A previous log entry with details should exist. The error was The installation source for this product is not available. Verify that the source exists and that you can access it.

Once logged into the PC, we can run the msi file manually so it doesnt seem to be a permissions issue. The folder where the SEP install is located also contains other applications which install using Group Policy.

What should I be checking which could be causing this?

Rob

I think your SEP installation is corrupt.Uninstall it from add/remove programs
Delete following folders if present
C:\Program Files\Symantec
C:\Program Files\Symantec AntiVirus
C:\Program Files\Common Files\Symantec Shared
C:\Documents and Settings\All Users\Application Data\Symantec
 
Also delete following reg keys
HKLM\Software\symantec
HKCU\Software\symantec
Install SEP and try..

Hello rob_o
You said when you manualy start the sep install there is no problem. So sep will install or not? I mean you start manualy to sep install is it continue without any problem?
And can users can access the target which policy you applied?

Best Regards.
Fatih

Once the installation is complete, do you remove any shortcuts or related files? I think it install fine, since you are modifiing( i'm just guessing)  it tries teh repair once the reboot is done..

 

Faith - Yes, that is correct. When I manually browse to the server from the client machine and install SEP from the network then it installs fine. SEP runs and functions correctly and gets updates from the server with no problem.

After installing it manually, Group Policy still tries to install the program on startup because GPO install failed.

The installation is fine, its just that it doesn't install by itself from GPO. The event log shows an error as in my original post.

If your manual installation is successful you can remove GPO...

Why? I need to have this working with Group Policy. I am constantly rebuilding new computers and we need Symantec to install automatically. The only reason I am installing it manually is because it doesnt work automatically. Deleting the GPO is defeating the purpose.

Yes you right rob_o
Did you use computer Policy right? for install?  And i asked to you can clients access target which policy show? And one more question please :) are you use Server 2003 or 2008 ?

Best Regards.
Fatih

Faith,

Yes, the clients can access the target computer. When I log in, I can browse to the UNC path and manually run the msi file which works fine. It just doesnt automatically install upon startup.

Rob

the domain computers group needs at least read access to the install files.

Conor Lynch
STS