Open the log and search for "value 3"

There might be multiple instances of it. The lines above this string log the probable reason of rollback.

You may post it here if you find it a little cryptic.

Hey thanks for the quick reply.  This is the first instance i think there are three (is the MR4 file just an upgrade or can i do a fresh install with it):

ADMINMOVEFILES: Compressing foldersADMINMOVEFILES: CustomActionData=MSI (s) (54:E0) [11:45:44:171]: Executing op: ActionStart(Name=MoveFiles,Description=Moving files,Template=File: [1],  Directory: [9],  Size: [6])Action 11:45:44: MoveFiles. Moving filesMSI (s) (54:E0) [11:45:44:171]: Executing op: ProgressTotal(Total=159588571,Type=0,ByteEquivalent=1)MSI (s) (54:E0) [11:45:44:171]: Executing op: SetSourceFolder(Folder=E:\ClientApps\symantec\mr4\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEPM\PACKAGES\)MSI (s) (54:E0) [11:45:44:171]: Executing op: SetTargetFolder(Folder=C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\)MSI (s) (54:E0) [11:45:44:171]: Executing op: FileCopy(SourceName=SAV32.dat,,DestName=SAV32.dat,Attributes=32,FileSize=78300302,PerTick=32768,IsCompressed=0,VerifyMedia=0,,,,,,,,InstallMode=262144,,,,,,,)MSI (s) (54:E0) [11:45:44:171]: File: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\SAV32.dat;                To be installed; Won't patch;      No existing fileMSI (s) (54:E0) [11:45:44:171]: Source for file 'SAV32.dat' is uncompressed, at 'E:\ClientApps\symantec\mr4\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEPM\PACKAGES\'.MoveFiles: File: SAV32.dat,  Directory: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\,  Size: 78300302MSI (s) (54:E0) [11:45:44:187]: Note: 1: 2318 2: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\SAV32.dat MSI (s) (54:E0) [11:45:45:109]: Executing op: SetSourceFolder(Folder=E:\ClientApps\symantec\mr4\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEPM\PACKAGES\)MSI (s) (54:E0) [11:45:45:109]: Executing op: SetTargetFolder(Folder=C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\)MSI (s) (54:E0) [11:45:45:109]: Executing op: FileCopy(SourceName=SAV64.dat,,DestName=SAV64.dat,Attributes=32,FileSize=81284873,PerTick=32768,IsCompressed=0,VerifyMedia=0,,,,,,,,InstallMode=262144,,,,,,,)MSI (s) (54:E0) [11:45:45:109]: File: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\SAV64.dat;                To be installed; Won't patch;      No existing fileMSI (s) (54:E0) [11:45:45:109]: Source for file 'SAV64.dat' is uncompressed, at 'E:\ClientApps\symantec\mr4\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEPM\PACKAGES\'.MoveFiles: File: SAV64.dat,  Directory: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\,  Size: 81284873MSI (s) (54:E0) [11:45:45:171]: Note: 1: 2318 2: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\SAV64.dat MSI (s) (54:E0) [11:45:56:828]: Executing op: SetSourceFolder(Folder=E:\ClientApps\symantec\mr4\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEPM\PACKAGES\)MSI (s) (54:E0) [11:45:56:828]: Executing op: SetTargetFolder(Folder=C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\)MSI (s) (54:E0) [11:45:56:828]: Executing op: FileCopy(SourceName=SAV32.info,,DestName=SAV32.info,Attributes=32,FileSize=1402,PerTick=32768,IsCompressed=0,VerifyMedia=0,,,,,,,,InstallMode=262144,,,,,,,)MSI (s) (54:E0) [11:45:56:828]: File: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\SAV32.info;               To be installed; Won't patch;      No existing fileMSI (s) (54:E0) [11:45:56:828]: Source for file 'SAV32.info' is uncompressed, at 'E:\ClientApps\symantec\mr4\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEPM\PACKAGES\'.MoveFiles: File: SAV32.info,  Directory: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\,  Size: 1402MSI (s) (54:E0) [11:45:56:828]: Note: 1: 2318 2: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\SAV32.info MSI (s) (54:E0) [11:45:56:828]: Executing op: SetSourceFolder(Folder=E:\ClientApps\symantec\mr4\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEPM\PACKAGES\)MSI (s) (54:E0) [11:45:56:828]: Executing op: SetTargetFolder(Folder=C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\)MSI (s) (54:E0) [11:45:56:828]: Executing op: FileCopy(SourceName=SAV64.info,,DestName=SAV64.info,Attributes=32,FileSize=1408,PerTick=32768,IsCompressed=0,VerifyMedia=0,,,,,,,,InstallMode=262144,,,,,,,)MSI (s) (54:E0) [11:45:56:828]: File: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\SAV64.info;               To be installed; Won't patch;      No existing fileMSI (s) (54:E0) [11:45:56:828]: Source for file 'SAV64.info' is uncompressed, at 'E:\ClientApps\symantec\mr4\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEPM\PACKAGES\'.MoveFiles: File: SAV64.info,  Directory: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\,  Size: 1408MSI (s) (54:E0) [11:45:56:828]: Note: 1: 2318 2: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\packages\SAV64.info MSI (s) (54:E0) [11:45:56:843]: Executing op: SetSourceFolder(Folder=E:\ClientApps\symantec\mr4\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEPM\)MSI (s) (54:E0) [11:45:56:843]: Executing op: SetTargetFolder(Folder=C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\license\)MSI (s) (54:E0) [11:45:56:843]: Executing op: FileCopy(SourceName=sav.xml,,DestName=sav.xml,Attributes=32,FileSize=586,PerTick=32768,IsCompressed=0,VerifyMedia=0,,,,,,,,InstallMode=262144,,,,,,,)MSI (s) (54:E0) [11:45:56:843]: File: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\license\sav.xml;  To be installed; Won't patch;      No existing fileMSI (s) (54:E0) [11:45:56:843]: Source for file 'sav.xml' is uncompressed, at 'E:\ClientApps\symantec\mr4\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEPM\'.MoveFiles: File: sav.xml,  Directory: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\license\,  Size: 586MSI (s) (54:E0) [11:45:56:843]: Note: 1: 2318 2: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\license\sav.xml MSI (s) (54:E0) [11:45:56:843]: Executing op: ActionStart(Name=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,,)Action 11:45:56: InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644. MSI (s) (54:E0) [11:45:56:843]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3329,Source=BinaryData,Target=UnInstallLiveUpdate,CustomActionData=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\OZPTVSSG\LiveUpdate\lucheck.exe)MSI (s) (54:E0) [11:45:56:859]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)Action 11:45:56: InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644. MSI (s) (54:E0) [11:45:56:859]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3073,Source=BinaryData,Target=InstallLiveUpdate,CustomActionData=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\OZPTVSSG\LiveUpdate\lucheck.exe)MSI (s) (54:50) [11:45:56:875]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI265D.tmp, Entrypoint: InstallLiveUpdateLUCA: InstallLiveUpdate enter.LUCA: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\OZPTVSSG\LiveUpdate\lucheck.exeLUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206Action ended 11:46:18: InstallFinalize. Return value 3.

Sorry about that hard to read wrap thanks again for any help

This can be it.

Uninstall liveupdate, Delete all the folders from the %programfiles%\symantec\liveupdate , Documents and settings\allusers........\liveupdate

Post the second instance as well for the "value 3"

Hey, 

Thanks so much for your help.  I had all the symantec stuff uninstalled but there were files in %program files\symantec  so I renamed that entire folder to symantec.old and it installed.  Thanks so much!!

Ted

Hi,

i have the same problem:

LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206

i tried to install and uninstall LiveUpdate 3.3.
These install and uninstall works fine, but the problem with EndPoint remains the same.

I also deleted all folders related to Symantec and/or LiveUpdate from Programs Files and from Documetns and Settings > All Users > Application Data.

Thanks, I had an issue when trying to update from Endpoint Manager from 4100 to 4114 and also an error when trying to install Endpoint Client (rooling back)

I search as you mentioned, in the log for Value 3, then found that LCSU.exe create error,  Uninstalled LiveUpdate 3.3

Then all issue were solved, successfully installed update (and it automatically reinstalled LU3.3)

Thanks a lot