Endpoint Protection

I am trying to install SEP 12.1 RU5 on a Server 2003 machine.

When I launch setup.exe, it fails almost immediately. Digging through the MSI logs, the culprit seems to be Action ended 10:03:28: SetMigrateProperty. Return value 3.

I've run Clean Wipe 4 times with a reboot after each. Each time, it reports a succesful cleanup.

Futhermore, I've tried to push the client through SEPM and when I checked on the server, the SEP Master Service will not start at all.

I'm completely stumped on this one and was hoping for help.

 

Attaching the whole MSI log below:

 

=== Verbose logging started: 1/30/2015  10:51:05  Build type: SHIP UNICODE 4.05.6002.00  Calling process: C:\WINNT\system32\msiexec.exe ===
MSI (c) (54:E4) [10:51:05:281]: Resetting cached policy values
MSI (c) (54:E4) [10:51:05:281]: Machine policy value 'Debug' is 0
MSI (c) (54:E4) [10:51:05:281]: ******* RunEngine:
           ******* Product: C:\temp\SEP\Sep.msi
           ******* Action: 
           ******* CommandLine: **********
MSI (c) (54:E4) [10:51:05:281]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (54:E4) [10:51:05:406]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\temp\SEP\Sep.msi' against software restriction policy
MSI (c) (54:E4) [10:51:05:406]: SOFTWARE RESTRICTION POLICY: C:\temp\SEP\Sep.msi has a digital signature
MSI (c) (54:E4) [10:51:05:406]: SOFTWARE RESTRICTION POLICY: C:\temp\SEP\Sep.msi is permitted to run at the 'unrestricted' authorization level.
MSI (c) (54:E4) [10:51:05:468]: Cloaking enabled.
MSI (c) (54:E4) [10:51:05:468]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (54:E4) [10:51:05:484]: End dialog not enabled
MSI (c) (54:E4) [10:51:05:484]: Original package ==> C:\temp\SEP\Sep.msi
MSI (c) (54:E4) [10:51:05:484]: Package we're running from ==> D:\temp\1\369880.msi
MSI (c) (54:E4) [10:51:05:515]: APPCOMPAT: looking for appcompat database entry with ProductCode '{0E251D4D-316C-4F8B-A4C5-2722000764BE}'.
MSI (c) (54:E4) [10:51:05:515]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (54:E4) [10:51:05:515]: MSCOREE not loaded loading copy from system32
MSI (c) (54:E4) [10:51:05:515]: Machine policy value 'TransformsSecure' is 1
MSI (c) (54:E4) [10:51:05:515]: Machine policy value 'DisablePatch' is 0
MSI (c) (54:E4) [10:51:05:515]: Machine policy value 'AllowLockdownPatch' is 0
MSI (c) (54:E4) [10:51:05:515]: Machine policy value 'DisableLUAPatching' is 0
MSI (c) (54:E4) [10:51:05:515]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (c) (54:E4) [10:51:05:531]: APPCOMPAT: looking for appcompat database entry with ProductCode '{0E251D4D-316C-4F8B-A4C5-2722000764BE}'.
MSI (c) (54:E4) [10:51:05:531]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (54:E4) [10:51:05:531]: Transforms are not secure.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'D:\temp\1\SEP_INST.log'.
MSI (c) (54:E4) [10:51:05:531]: Command Line: SRCLICFILE=EE CURRENTDIRECTORY=C:\temp\SEP CLIENTUILEVEL=0 CLIENTPROCESSID=2132 
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{FDB3F979-4DF9-49D8-B5D8-13F93E2577F5}'.
MSI (c) (54:E4) [10:51:05:531]: Product Code passed to Engine.Initialize:           ''
MSI (c) (54:E4) [10:51:05:531]: Product Code from property table before transforms: '{0E251D4D-316C-4F8B-A4C5-2722000764BE}'
MSI (c) (54:E4) [10:51:05:531]: Product Code from property table after transforms:  '{0E251D4D-316C-4F8B-A4C5-2722000764BE}'
MSI (c) (54:E4) [10:51:05:531]: Product not registered: beginning first-time install
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (54:E4) [10:51:05:531]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (54:E4) [10:51:05:531]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (54:E4) [10:51:05:531]: Adding new sources is allowed.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (54:E4) [10:51:05:531]: Package name extracted from package path: 'Sep.msi'
MSI (c) (54:E4) [10:51:05:531]: Package to be registered: 'Sep.msi'
MSI (c) (54:E4) [10:51:05:531]: Note: 1: 2262 2: AdminProperties 3: -2147287038 
MSI (c) (54:E4) [10:51:05:531]: Machine policy value 'DisableMsi' is 1
MSI (c) (54:E4) [10:51:05:531]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (54:E4) [10:51:05:531]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (54:E4) [10:51:05:531]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (c) (54:E4) [10:51:05:531]: Running product '{0E251D4D-316C-4F8B-A4C5-2722000764BE}' with elevated privileges: Product is assigned.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding SRCLICFILE property. Its value is 'EE'.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\temp\SEP'.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '0'.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '2132'.
MSI (c) (54:E4) [10:51:05:531]: TRANSFORMS property is now: 
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Application Data
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\WINNT\Favorites
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\NetHood
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\My Documents
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\PrintHood
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Recent
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\SendTo
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Templates
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Local Settings\Application Data
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\My Documents\My Pictures
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu\Programs\Administrative Tools
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu\Programs
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Desktop
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Templates
MSI (c) (54:E4) [10:51:05:531]: SHELL32::SHGetFolderPath returned: C:\WINNT\Fonts
MSI (c) (54:E4) [10:51:05:531]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'System Administrator'.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Torlys Inc.'.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'D:\temp\1\369880.msi'.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\temp\SEP\Sep.msi'.
MSI (c) (54:E4) [10:51:05:531]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\temp\SEP\'.
MSI (c) (54:E4) [10:51:05:531]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\temp\SEP\'.
MSI (c) (54:9C) [10:51:05:546]: PROPERTY CHANGE: Adding VersionHandler property. Its value is '4.05'.
=== Logging started: 1/30/2015  10:51:05 ===
MSI (c) (54:E4) [10:51:05:562]: Note: 1: 2205 2:  3: PatchPackage 
MSI (c) (54:E4) [10:51:05:562]: Machine policy value 'DisableRollback' is 0
MSI (c) (54:E4) [10:51:05:562]: User policy value 'DisableRollback' is 0
MSI (c) (54:E4) [10:51:05:562]: PROPERTY CHANGE: Adding UILevel property. Its value is '5'.
MSI (c) (54:E4) [10:51:05:562]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (c) (54:E4) [10:51:05:562]: Doing action: INSTALL
Action 10:51:05: INSTALL. 
Action start 10:51:05: INSTALL.
MSI (c) (54:E4) [10:51:05:578]: UI Sequence table 'InstallUISequence' is present and populated.
MSI (c) (54:E4) [10:51:05:578]: Running UISequence
MSI (c) (54:E4) [10:51:05:578]: PROPERTY CHANGE: Adding EXECUTEACTION property. Its value is 'INSTALL'.
MSI (c) (54:E4) [10:51:05:578]: Doing action: FindRelatedProducts
Action 10:51:05: FindRelatedProducts. Searching for related applications
Action start 10:51:05: FindRelatedProducts.
Action ended 10:51:05: FindRelatedProducts. Return value 1.
MSI (c) (54:E4) [10:51:05:578]: Skipping action: DowngradeError (condition is false)
MSI (c) (54:E4) [10:51:05:578]: Skipping action: LegacyNortonError (condition is false)
MSI (c) (54:E4) [10:51:05:578]: Skipping action: LegacySymError (condition is false)
MSI (c) (54:E4) [10:51:05:578]: Doing action: DriverCheck
Action 10:51:05: DriverCheck. 
Action start 10:51:05: DriverCheck.
MSI (c) (54:1C) [10:51:05:593]: Invoking remote custom action. DLL: D:\temp\1\MSI5.tmp, Entrypoint: DriverCheck
MSI (c) (54:98) [10:51:05:593]: Cloaking enabled.
MSI (c) (54:98) [10:51:05:593]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (54:98) [10:51:05:593]: Connected to service for CA interface.
Action ended 10:51:05: DriverCheck. Return value 1.
MSI (c) (54:E4) [10:51:05:703]: Doing action: SetMigrateProperty
Action 10:51:05: SetMigrateProperty. 
Action start 10:51:05: SetMigrateProperty.
MSI (c) (54:E4) [10:51:05:703]: Invoking remote custom action. DLL: D:\temp\1\MSI6.tmp, Entrypoint: SetMigrateProperty
Action ended 10:51:05: SetMigrateProperty. Return value 3.
MSI (c) (54:E4) [10:51:05:750]: Doing action: SetupCompleteError
Action 10:51:05: SetupCompleteError. 
Action start 10:51:05: SetupCompleteError.
Info 2898.For Tahoma8 textstyle, the system created a 'Tahoma' font, in 0 character set.
Info 2898.For TahomaBold10 textstyle, the system created a 'Tahoma' font, in 0 character set.
Action 10:51:05: SetupCompleteError. Dialog created
MSI (c) (54:6C) [10:51:05:781]: Note: 1: 2731 2: 0 
Action ended 10:51:07: SetupCompleteError. Return value 2.

 

Can you post the SEP_INST.log and SIS_INST.log

Required logs for troubleshooting failed Endpoint Protection 12.1 client installations

Have you tried a different package? live instlling the client as unmanaged from CD1\SEP folder?

I've tried the SEP package on CD1 AND the standalone package through the download. I've also verified that the install package works (It's the same one I've used for the other ~60 endpoint installations :)  )

I've attached the SEP_INST log...there was no SIS_INST log however.

From the log its says

=====

MSI (c) (54:E4) [10:51:05:484]: Original package ==> C:\temp\SEP\Sep.msi
MSI (c) (54:E4) [10:51:05:484]: Package we're running from ==> D:\temp\1\369880.msi

=====

not sure why its switching between two drives, can you check your environment variables for temp directory.

Just checks certs as well. 2003 might be running with old certs

http://www.symantec.com/business/support/index?page=content&id=TECH217284

 

I inherited this server from a previous Sys Admin. The system variable %temp% is pointing to D:\Temp. The \1 folder is due to me connecting through RDP.

Certs should also be up to date as the server is out public facing webserver and we installed new signed certs recently.

Can you change that to c ? Just to make sure its not permission issue .servers on which you were able to install variable are on D or c? ?

Same Result...attached new log