Endpoint Protection

 View Only
  • 1.  installation rollback

    Posted Sep 16, 2016 03:45 PM

    hi everyone,

     

    need assistance in installating SEP 12.1.6mp5 client agent  on windows server 2008 enterprise 32bit, i encounter rollback installation. Please see below SEP intallation logs

    already try install new package, cleanwipe, disable UAC but still no luck, 

     

     

    === Verbose logging started: 9/16/2016  20:17:59  Build type: SHIP UNICODE 4.05.6002.00  Calling process: C:\Windows\system32\msiexec.exe ===
    MSI (c) (84:20) [20:17:59:237]: Resetting cached policy values
    MSI (c) (84:20) [20:17:59:237]: Machine policy value 'Debug' is 0
    MSI (c) (84:20) [20:17:59:237]: ******* RunEngine:
               ******* Product: C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\Sep.msi
               ******* Action: 
               ******* CommandLine: **********
    MSI (c) (84:20) [20:17:59:237]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (84:20) [20:17:59:237]: Grabbed execution mutex.
    MSI (c) (84:20) [20:17:59:284]: Cloaking enabled.
    MSI (c) (84:20) [20:17:59:284]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (84:20) [20:17:59:300]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (9C:28) [20:17:59:300]: Running installation inside multi-package transaction C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\Sep.msi
    MSI (s) (9C:28) [20:17:59:300]: Grabbed execution mutex.
    MSI (s) (9C:D0) [20:17:59:300]: Resetting cached policy values
    MSI (s) (9C:D0) [20:17:59:300]: Machine policy value 'Debug' is 0
    MSI (s) (9C:D0) [20:17:59:300]: ******* RunEngine:
               ******* Product: C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\Sep.msi
               ******* Action: 
               ******* CommandLine: **********
    MSI (s) (9C:D0) [20:17:59:300]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (9C:D0) [20:17:59:331]: Machine policy value 'LimitSystemRestoreCheckpointing' is 0
    MSI (s) (9C:D0) [20:17:59:331]: Note: 1: 1715 2: Symantec Endpoint Protection 
    MSI (s) (9C:D0) [20:17:59:331]: Calling SRSetRestorePoint API. dwRestorePtType: 0, dwEventType: 102, llSequenceNumber: 0, szDescription: "Installed Symantec Endpoint Protection.".
    MSI (s) (9C:D0) [20:17:59:331]: The call to SRSetRestorePoint API failed. Returned status: 0. GetLastError() returned: 127
    MSI (s) (9C:D0) [20:17:59:331]: File will have security applied from OpCode.
    MSI (s) (9C:D0) [20:17:59:362]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\Sep.msi' against software restriction policy
    MSI (s) (9C:D0) [20:17:59:362]: SOFTWARE RESTRICTION POLICY: C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\Sep.msi has a digital signature
    MSI (s) (9C:D0) [20:18:04:042]: SOFTWARE RESTRICTION POLICY: C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\Sep.msi is permitted to run at the 'unrestricted' authorization level.
    MSI (s) (9C:D0) [20:18:04:042]: End dialog not enabled
    MSI (s) (9C:D0) [20:18:04:042]: Original package ==> C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\Sep.msi
    MSI (s) (9C:D0) [20:18:04:042]: Package we're running from ==> C:\Windows\Installer\276cb7.msi
    MSI (s) (9C:D0) [20:18:04:042]: APPCOMPAT: looking for appcompat database entry with ProductCode '{358ADFAB-4EA2-481E-8828-5AF10FB0FC8E}'.
    MSI (s) (9C:D0) [20:18:04:042]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (9C:D0) [20:18:04:042]: MSCOREE not loaded loading copy from system32
    MSI (s) (9C:D0) [20:18:04:042]: Machine policy value 'TransformsSecure' is 1
    MSI (s) (9C:D0) [20:18:04:042]: Machine policy value 'DisablePatch' is 0
    MSI (s) (9C:D0) [20:18:04:042]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (9C:D0) [20:18:04:042]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (9C:D0) [20:18:04:042]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (9C:D0) [20:18:04:058]: APPCOMPAT: looking for appcompat database entry with ProductCode '{358ADFAB-4EA2-481E-8828-5AF10FB0FC8E}'.
    MSI (s) (9C:D0) [20:18:04:058]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (9C:D0) [20:18:04:058]: Transforms are not secure.
    MSI (s) (9C:D0) [20:18:04:058]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\SYMAV_~1\AppData\Local\Temp\3\SEP_INST.LOG'.
    MSI (s) (9C:D0) [20:18:04:058]: Command Line: SRCLICFILE=EE CURRENTDIRECTORY=C:\Users\SYMAV_~1\AppData\Local\Temp\3\Symantec CLIENTUILEVEL=2 CLIENTPROCESSID=4484 
    MSI (s) (9C:D0) [20:18:04:058]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{458550D1-453A-4319-A41C-340EB4972508}'.
    MSI (s) (9C:D0) [20:18:04:058]: Product Code passed to Engine.Initialize:           ''
    MSI (s) (9C:D0) [20:18:04:058]: Product Code from property table before transforms: '{358ADFAB-4EA2-481E-8828-5AF10FB0FC8E}'
    MSI (s) (9C:D0) [20:18:04:058]: Product Code from property table after transforms:  '{358ADFAB-4EA2-481E-8828-5AF10FB0FC8E}'
    MSI (s) (9C:D0) [20:18:04:058]: Product not registered: beginning first-time install
    MSI (s) (9C:D0) [20:18:04:058]: Product {358ADFAB-4EA2-481E-8828-5AF10FB0FC8E} is not managed.
    MSI (s) (9C:D0) [20:18:04:058]: MSI_LUA: Credential prompt not required, user is an admin
    MSI (s) (9C:D0) [20:18:04:058]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
    MSI (s) (9C:D0) [20:18:04:058]: Entering CMsiConfigurationManager::SetLastUsedSource.
    MSI (s) (9C:D0) [20:18:04:058]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (9C:D0) [20:18:04:058]: Adding new sources is allowed.
    MSI (s) (9C:D0) [20:18:04:058]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
    MSI (s) (9C:D0) [20:18:04:058]: Package name extracted from package path: 'Sep.msi'
    MSI (s) (9C:D0) [20:18:04:058]: Package to be registered: 'Sep.msi'
    MSI (s) (9C:D0) [20:18:04:058]: Note: 1: 2262 2: AdminProperties 3: -2147287038 
    MSI (s) (9C:D0) [20:18:04:058]: Machine policy value 'DisableMsi' is 1
    MSI (s) (9C:D0) [20:18:04:058]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (9C:D0) [20:18:04:058]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (9C:D0) [20:18:04:058]: Product installation will be elevated because user is admin and product is being installed per-machine.
    MSI (s) (9C:D0) [20:18:04:058]: Running product '{358ADFAB-4EA2-481E-8828-5AF10FB0FC8E}' with elevated privileges: Product is assigned.
    MSI (s) (9C:D0) [20:18:04:058]: PROPERTY CHANGE: Adding SRCLICFILE property. Its value is 'EE'.
    MSI (s) (9C:D0) [20:18:04:058]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\SYMAV_~1\AppData\Local\Temp\3\Symantec'.
    MSI (s) (9C:D0) [20:18:04:058]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '2'.
    MSI (s) (9C:D0) [20:18:04:058]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '4484'.
    MSI (s) (9C:D0) [20:18:04:058]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
    MSI (s) (9C:D0) [20:18:04:058]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
    MSI (s) (9C:D0) [20:18:04:058]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
    MSI (s) (9C:D0) [20:18:04:058]: TRANSFORMS property is now: 
    MSI (s) (9C:D0) [20:18:04:058]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Roaming
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\Favorites
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Network Shortcuts
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\Documents
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Recent
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\SendTo
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Templates
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\ProgramData
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Local
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\Pictures
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (9C:D0) [20:18:04:058]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    MSI (s) (9C:D0) [20:18:04:073]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
    MSI (s) (9C:D0) [20:18:04:073]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
    MSI (s) (9C:D0) [20:18:04:073]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (9C:D0) [20:18:04:073]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (9C:D0) [20:18:04:073]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    MSI (s) (9C:D0) [20:18:04:073]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Start Menu
    MSI (s) (9C:D0) [20:18:04:073]: SHELL32::SHGetFolderPath returned: C:\Users\SymAV_SVC001\Desktop
    MSI (s) (9C:D0) [20:18:04:073]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
    MSI (s) (9C:D0) [20:18:04:073]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
    MSI (s) (9C:D0) [20:18:04:073]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 
    MSI (s) (9C:D0) [20:18:04:073]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
    MSI (s) (9C:D0) [20:18:04:073]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
    MSI (s) (9C:D0) [20:18:04:073]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (9C:D0) [20:18:04:073]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
    MSI (s) (9C:D0) [20:18:04:073]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Siemens AG'.
    MSI (s) (9C:D0) [20:18:04:073]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
    MSI (s) (9C:D0) [20:18:04:073]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Siemens AG'.
    MSI (s) (9C:D0) [20:18:04:073]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\276cb7.msi'.
    MSI (s) (9C:D0) [20:18:04:073]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\Sep.msi'.
    MSI (s) (9C:D0) [20:18:04:073]: Machine policy value 'MsiDisableEmbeddedUI' is 0
    MSI (s) (9C:D0) [20:18:04:073]: Note: 1: 2205 2:  3: PatchPackage 
    MSI (s) (9C:D0) [20:18:04:073]: Machine policy value 'DisableRollback' is 0
    MSI (s) (9C:D0) [20:18:04:073]: User policy value 'DisableRollback' is 0
    MSI (s) (9C:D0) [20:18:04:073]: PROPERTY CHANGE: Adding UILevel property. Its value is '3'.
    MSI (s) (9C:D0) [20:18:04:073]: PROPERTY CHANGE: Adding MsiUIHideCancel property. Its value is '1'.
    === Logging started: 9/16/2016  20:18:04 ===
    MSI (s) (9C:D0) [20:18:04:073]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (9C:D0) [20:18:04:073]: Doing action: INSTALL
    Action start 20:18:04: INSTALL.
    MSI (s) (9C:D0) [20:18:04:073]: Running ExecuteSequence
    MSI (s) (9C:D0) [20:18:04:089]: Doing action: SetSymVersionNT
    MSI (s) (9C:30) [20:18:04:104]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7F4D.tmp, Entrypoint: SetSymVersionNT
    MSI (s) (9C:40) [20:18:04:104]: Generating random cookie.
    MSI (s) (9C:40) [20:18:04:104]: Created Custom Action Server with PID 4932 (0x1344).
    MSI (s) (9C:18) [20:18:04:120]: Running as a service.
    MSI (s) (9C:18) [20:18:04:136]: Hello, I'm your 32bit Impersonated custom action server.
    MSI (s) (9C!3C) [20:18:04:182]: PROPERTY CHANGE: Adding SymVersionNT property. Its value is '600'.
    Action start 20:18:04: SetSymVersionNT.
    MSI (s) (9C:D0) [20:18:04:182]: Skipping action: PreWindows2003SP1Error (condition is false)
    MSI (s) (9C:D0) [20:18:04:182]: Skipping action: PreWindowsXPSP3Error (condition is false)
    MSI (s) (9C:D0) [20:18:04:182]: Doing action: FindRelatedProducts
    Action ended 20:18:04: SetSymVersionNT. Return value 1.
    Action start 20:18:04: FindRelatedProducts.
    MSI (s) (9C:D0) [20:18:04:198]: Skipping action: DowngradeError (condition is false)
    MSI (s) (9C:D0) [20:18:04:198]: Skipping action: LegacyNortonError (condition is false)
    MSI (s) (9C:D0) [20:18:04:198]: Skipping action: LegacySymError (condition is false)
    MSI (s) (9C:D0) [20:18:04:198]: Doing action: DriverCheck
    Action ended 20:18:04: FindRelatedProducts. Return value 1.
    MSI (s) (9C:C4) [20:18:04:198]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7FBB.tmp, Entrypoint: DriverCheck
    Action start 20:18:04: DriverCheck.
    DriverCheck SymEvent did not open. Trying accessing via CreateFile
    DriverCheck SymEvent did not open (probably doesn't exist -- this is fine) with: 2
    DriverCheck SymTDI did not open. Trying accessing via CreateFile
    DriverCheck SymTDI did not open (probably doesn't exist -- this is fine) with: 2
    DriverCheck WPS did not open. Trying accessing via CreateFile
    DriverCheck WPS did not open (probably doesn't exist -- this is fine) with: 2
    MSI (s) (9C:D0) [20:18:04:198]: Doing action: SetMigrateProperty
    Action ended 20:18:04: DriverCheck. Return value 1.
    MSI (s) (9C:5C) [20:18:04:214]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7FBC.tmp, Entrypoint: SetMigrateProperty
    Action start 20:18:04: SetMigrateProperty.
    MSI (s) (9C:D0) [20:18:04:214]: Skipping action: SetIdcMultistageProperty (condition is false)
    MSI (s) (9C:D0) [20:18:04:214]: Skipping action: SetSNACMigratePropertyAmberPlus (condition is false)
    MSI (s) (9C:D0) [20:18:04:214]: Skipping action: SetSNACMigratePropertyOlder (condition is false)
    MSI (s) (9C:D0) [20:18:04:214]: Skipping action: SetSNACMigratePropertyPreAmber (condition is false)
    MSI (s) (9C:D0) [20:18:04:214]: Doing action: VerifyBFERunning
    Action ended 20:18:04: SetMigrateProperty. Return value 1.
    MSI (s) (9C:A8) [20:18:04:229]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7FDC.tmp, Entrypoint: VerifyBFERunning
    Action start 20:18:04: VerifyBFERunning.
    InstallUtils::CServiceUtil::isServiceRunningChecking status of service: BFE
    MSI (s) (9C!30) [20:18:04:229]: PROPERTY CHANGE: Adding BFEServiceRunning property. Its value is '1'.
    InstallUtils::CServiceUtil::isServiceRunningService BFE is currently running.
    MSI (s) (9C:D0) [20:18:04:229]: Doing action: LocateSourceDir
    Action ended 20:18:04: VerifyBFERunning. Return value 1.
    MSI (s) (9C:D8) [20:18:04:229]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7FDD.tmp, Entrypoint: LocateSourceDir
    Action start 20:18:04: LocateSourceDir.
    preclientca: SourceDir=
    MSI (s) (9C!50) [20:18:04:245]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\'.
    preclientca: OriginalDatabase=C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\Sep.msi
    MSI (s) (9C:D0) [20:18:04:245]: Doing action: AppSearch
    Action ended 20:18:04: LocateSourceDir. Return value 1.
    Action start 20:18:04: AppSearch.
    MSI (s) (9C:D0) [20:18:04:245]: PROPERTY CHANGE: Adding IEVERSION property. Its value is '9.0.8112.16421'.
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Sygate Technologies, Inc.\Sygate Personal Firewall 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\InstalledApps 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: PROPERTY CHANGE: Adding OS_SUPPORTS_UI property. Its value is 'C:\Windows\explorer.exe'.
    MSI (s) (9C:D0) [20:18:04:245]: PROPERTY CHANGE: Adding SPMXMLFOUND property. Its value is 'C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\SyLink.xml'.
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\Common 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: PROPERTY CHANGE: Adding SERDEFDATFOUND property. Its value is 'C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\serdef.dat'.
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC 3: 2 
    MSI (s) (9C:D0) [20:18:04:245]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\VolatileInstallData 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: PROPERTY CHANGE: Adding UNINSTALLREBOOTREQUIRED property. Its value is '1'.
    MSI (s) (9C:D0) [20:18:04:260]: PROPERTY CHANGE: Adding SYMRASMAN_REG13_PATH property. Its value is 'C:\Windows\System32\rastls.dll'.
    MSI (s) (9C:D0) [20:18:04:260]: PROPERTY CHANGE: Adding SYMRASMAN_REG13_INTERACTIVEUIPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
    MSI (s) (9C:D0) [20:18:04:260]: PROPERTY CHANGE: Adding SYMRASMAN_REG13_CONFIGUIPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
    MSI (s) (9C:D0) [20:18:04:260]: PROPERTY CHANGE: Adding SYMRASMAN_REG13_IDENTITYPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
    MSI (s) (9C:D0) [20:18:04:260]: PROPERTY CHANGE: Adding SYMRASMAN_REG25_PATH property. Its value is 'C:\Windows\System32\rastls.dll'.
    MSI (s) (9C:D0) [20:18:04:260]: PROPERTY CHANGE: Adding SYMRASMAN_REG25_INTERACTIVEUIPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
    MSI (s) (9C:D0) [20:18:04:260]: PROPERTY CHANGE: Adding SYMRASMAN_REG25_CONFIGUIPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
    MSI (s) (9C:D0) [20:18:04:260]: PROPERTY CHANGE: Adding SYMRASMAN_REG25_IDENTITYPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Sygate Technologies, Inc.\Sygate Personal Firewall 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\InstalledApps 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1324 2: Data\Config 3: 1 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1324 2: Data\Config 3: 1 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1324 2: Data\Config 3: 1 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1324 2: Data\Config 3: 1 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WinFLP\Optional Components 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: PROPERTY CHANGE: Adding OUTLOOKFOUND property. Its value is 'C:\Program Files\Microsoft Office\Office14\'.
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\EXCHNG32.EXE 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\notes.exe 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7} 3: 2 
    MSI (s) (9C:D0) [20:18:04:260]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SymBPL\{D270A25E-8BB6-4895-8517-89B898969BBF} 3: 2 
    MSI (s) (9C:D0) [20:18:04:276]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2 
    MSI (s) (9C:D0) [20:18:04:276]: PROPERTY CHANGE: Adding SDIDATFOUND property. Its value is 'C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\sdi.dat'.
    MSI (s) (9C:D0) [20:18:04:276]: PROPERTY CHANGE: Adding FOUNDSEPSLF property. Its value is 'C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\sep.slf'.
    MSI (s) (9C:D0) [20:18:04:276]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Teefer2 3: 2 
    MSI (s) (9C:D0) [20:18:04:276]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\{E20BD12D-800D-4ACA-AB05-1C6D643530B9}\Install 3: 2 
    MSI (s) (9C:D0) [20:18:04:276]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\VolatileInstallData 3: 2 
    MSI (s) (9C:D0) [20:18:04:276]: Note: 1: 1402 2: HKEY_CLASSES_ROOT\AppID\{A79DB36D-6218-48e6-9EC9-DCBA9A39BF0F} 3: 2 
    MSI (s) (9C:D0) [20:18:04:276]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\TSE 3: 2 
    MSI (s) (9C:D0) [20:18:04:276]: PROPERTY CHANGE: Adding SHDOCVW property. Its value is 'C:\Windows\system32\shdocvw.dll'.
    MSI (s) (9C:D0) [20:18:04:276]: Doing action: checkInstallBlocksIE
    Action ended 20:18:04: AppSearch. Return value 1.
    MSI (s) (9C:E4) [20:18:04:276]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI800D.tmp, Entrypoint: checkInstallBlocksIE
    MSI (s) (9C!90) [20:18:04:292]: PROPERTY CHANGE: Adding IdcXmlPath property. Its value is 'C:\Windows\Temp\idc.xml'.
    Action start 20:18:04: checkInstallBlocksIE.
    IDCCA:  CMsiUtil::isActionScheduled: Unable to fetch view (Result: 259)
    MSI (s) (9C:D0) [20:18:04:463]: Doing action: CheckPackageIntegrity
    Action ended 20:18:04: checkInstallBlocksIE. Return value 1.
    MSI (s) (9C:2C) [20:18:04:479]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI80C9.tmp, Entrypoint: CheckPackageIntegrity
    Action start 20:18:04: CheckPackageIntegrity.
    2016-09-16T18:18:04.479Z DEBUG CheckPackageIntegrity begin.
    2016-09-16T18:18:04.479Z INFO  Launching regular version of CheckPackageIntegrity
    2016-09-16T18:18:04.479Z INFO  Validating install package...
    2016-09-16T18:18:08.987Z INFO  MSI file verified successfully
    MSI (s) (9C!E4) [20:18:08:987]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (9C!E4) [20:18:10:298]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    2016-09-16T18:18:08.987Z INFO  Validating package contents...
    2016-09-16T18:18:10.298Z INFO  Package integrity check passed.
    2016-09-16T18:18:10.298Z DEBUG CheckPackageIntegrity end, return value: 0.
    MSI (s) (9C:D0) [20:18:10:298]: Doing action: CheckEmbeddedSystem
    Action ended 20:18:10: CheckPackageIntegrity. Return value 1.
    MSI (s) (9C:90) [20:18:10:313]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9795.tmp, Entrypoint: CheckWindowsEmbeddedSystem
    Action start 20:18:10: CheckEmbeddedSystem.
    MSI (s) (9C!98) [20:18:10:345]: PROPERTY CHANGE: Adding EMBEDDEDSYSTEM property. Its value is '0'.
    CheckWindowsEmbeddedSystem setting EMBEDDEDSYSTEM to 0
    MSI (s) (9C:D0) [20:18:10:345]: Skipping action: CheckFeaturesOnEmbedded (condition is false)
    MSI (s) (9C:D0) [20:18:10:345]: Skipping action: CheckFiltersOnEmbedded (condition is false)
    MSI (s) (9C:D0) [20:18:10:345]: Skipping action: CheckNetConfigAvailable (condition is false)
    MSI (s) (9C:D0) [20:18:10:345]: Skipping action: IsAdmin (condition is false)
    MSI (s) (9C:D0) [20:18:10:345]: Doing action: IsAlreadyElevated
    Action ended 20:18:10: CheckEmbeddedSystem. Return value 1.
    MSI (s) (9C:84) [20:18:10:376]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI97D4.tmp, Entrypoint: IsAlreadyElevated
    MSI (s) (9C!30) [20:18:10:407]: PROPERTY CHANGE: Adding AlreadyElevated property. Its value is '1'.
    Action start 20:18:10: IsAlreadyElevated.
    MSI (s) (9C:D0) [20:18:10:407]: Doing action: CommunicateLaunchConditions
    Action ended 20:18:10: IsAlreadyElevated. Return value 1.
    MSI (s) (9C:DC) [20:18:10:407]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9804.tmp, Entrypoint: CommunicateLaunchConditions
    Action start 20:18:10: CommunicateLaunchConditions.
    Communicate LC: NOT VersionNT64=1
    Communicate LC: NOT PackageIntegrityError=1
    Communicate LC: NOT WINDOWSFUNDAMENTALS=1
    Communicate LC: (NOT MIGRATIONPENDINGREBOOT) OR SISFAILED=1
    Communicate LC: (NOT UNINSTALLREBOOTREQUIRED) OR Installed=0
    Communicate LC: Symantec Endpoint Protection has detected that there are pending system changes that require a reboot.  Please reboot the system and rerun the installation.
    Communicate LC:  calling communicate state with the following arguments: 
    Communicate LC: Prodversion = 12.1.7004.6500
    Communicate LC: PathToSylink = C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\
    Communicate LC: Oldversion = 
    Communicate LC: ReasonStr = Symantec Endpoint Protection has detected that there are pending system changes that require a reboot.  Please reboot the system and rerun the installation.
    Communicate LC: StatusCode = 302469124
    MSI (s) (9C:D0) [20:18:11:312]: Doing action: preLaunchCond
    Action ended 20:18:11: CommunicateLaunchConditions. Return value 1.
    MSI (s) (9C:10) [20:18:11:327]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9B8E.tmp, Entrypoint: preLaunchCond
    Action start 20:18:11: preLaunchCond.
    MSI (s) (9C:18) [20:18:11:359]: Note: 1: 2731 2: 0 
    IDCCA:  preLaunchCond - Launch condition `4Symantec Endpoint Protection has detected that there are pending system changes that require a reboot.  Please reboot the system and rerun the installation.` with condition `(NOT UNINSTALLREBOOTREQUIRED) OR Installed` failed
    MSI (s) (9C:18) [20:18:11:359]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:359]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:359]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:359]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:359]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:359]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:359]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:374]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:374]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:374]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:374]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:374]: Note: 1: 2731 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:374]: Note: 1: 2732 2: 0 
    Unable to determine feature state: 1606 
    MSI (s) (9C:18) [20:18:11:374]: Note: 1: 2732 2: 0 
    IDCCA: Unable to get target path (Result: 267)
    IDCCA: Unable to get target path (Result: 267)
    IDCCA: Machine ID: 8dd84cb2c29b4e4a1cfb1356e975186320129220
    IDCCA: Collecting file c:\users\symav_~1\appdata\local\temp\3\sep_inst.log
    IDCCA: HttpQueryInfo: 0  Error: 12029
    IDCCA: Logout failure:0 12029
    MSI (s) (9C:D0) [20:18:15:773]: Doing action: LaunchConditions
    Action ended 20:18:15: preLaunchCond. Return value 1.
    Action start 20:18:15: LaunchConditions.
    MSI (s) (9C:D0) [20:18:22:622]: Product: Symantec Endpoint Protection -- 4Symantec Endpoint Protection has detected that there are pending system changes that require a reboot.  Please reboot the system and rerun the installation.

    MSI (c) (84:B0) [20:18:15:773]: Font created.  Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

    4Symantec Endpoint Protection has detected that there are pending system changes that require a reboot.  Please reboot the system and rerun the installation.
    Action ended 20:18:22: LaunchConditions. Return value 3.
    Action ended 20:18:22: INSTALL. Return value 3.
    Property(S): UpgradeCode = {24BF7A02-B60A-494B-843A-793BBC77DED4}
    Property(S): IEVERSION = 9.0.8112.16421
    Property(S): OS_SUPPORTS_UI = C:\Windows\explorer.exe
    Property(S): SPMXMLFOUND = C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\SyLink.xml
    Property(S): SERDEFDATFOUND = C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\serdef.dat
    Property(S): UNINSTALLREBOOTREQUIRED = 1
    Property(S): SYMRASMAN_REG13_PATH = C:\Windows\System32\rastls.dll
    Property(S): SYMRASMAN_REG13_INTERACTIVEUIPATH = C:\Windows\System32\rastls.dll
    Property(S): SYMRASMAN_REG13_CONFIGUIPATH = C:\Windows\System32\rastls.dll
    Property(S): SYMRASMAN_REG13_IDENTITYPATH = C:\Windows\System32\rastls.dll
    Property(S): SYMRASMAN_REG25_PATH = C:\Windows\System32\rastls.dll
    Property(S): SYMRASMAN_REG25_INTERACTIVEUIPATH = C:\Windows\System32\rastls.dll
    Property(S): SYMRASMAN_REG25_CONFIGUIPATH = C:\Windows\System32\rastls.dll
    Property(S): SYMRASMAN_REG25_IDENTITYPATH = C:\Windows\System32\rastls.dll
    Property(S): OUTLOOKFOUND = C:\Program Files\Microsoft Office\Office14\
    Property(S): SDIDATFOUND = C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\sdi.dat
    Property(S): FOUNDSEPSLF = C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\sep.slf
    Property(S): SHDOCVW = C:\Windows\system32\shdocvw.dll
    Property(S): ProductName = Symantec Endpoint Protection
    Property(S): ProductDisplayName = Symantec Endpoint Protection
    Property(S): ProductVersion = 12.1.7004.6500
    Property(S): OPTOUTREPSUBMISSION = 0
    Property(S): ENABLEAUTOPROTECT = 1
    Property(S): DISABLEDEFENDER = 1
    Property(S): RUNLIVEUPDATE = 1
    Property(S): IDCENABLE = 1
    Property(S): Managed_Client_Type = Unmanaged
    Property(S): ReducedSizeButton = 0
    Property(S): SetupType = Typical
    Property(S): _IsSetupTypeMin = Typical
    Property(S): SBE_Feature_Set = Typical
    Property(S): AgreeToLicense = No
    Property(S): _IsMaintenance = Change
    Property(S): RestartManagerOption = CloseRestart
    Property(S): SMSName = SepMasterService
    Property(S): SMSDescription = Symantec Endpoint Protection
    Property(S): InUISequence = 0
    Property(S): CACHE_INSTALLER = 1
    Property(S): REBOOT = ReallySuppress
    Property(S): ProgramFilesFolder = C:\Program Files\
    Property(S): SystemFolder = C:\Windows\system32\
    Property(S): WindowsFolder = C:\Windows\
    Property(S): CommonFilesFolder = C:\Program Files\Common Files\
    Property(S): SourceDir = C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\
    Property(S): CommonAppDataFolder = C:\ProgramData\
    Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    Property(S): DesktopFolder = C:\Users\Public\Desktop\
    Property(S): Manufacturer = Symantec Corporation
    Property(S): ProductCode = {358ADFAB-4EA2-481E-8828-5AF10FB0FC8E}
    Property(S): ProductLanguage = 1033
    Property(S): ALLUSERS = 1
    Property(S): APPTYPE = 105
    Property(S): LUMoniker = {6F678702-6A34-479b-9166-2C2EA45C68E4}
    Property(S): ARPSYSTEMCOMPONENT = 1
    Property(S): INSTALLLEVEL = 100
    Property(S): MSIENFORCEUPGRADECOMPONENTRULES = 1
    Property(S): IDCDATASERVER = tses.symantec.com
    Property(S): IDCDATALOC = /incoming
    Property(S): IDCDEPLOYMENT = Local
    Property(S): IDCEXTRAINFO = 0
    Property(S): SISUSETRANSACTIONS = 0
    Property(S): MAXMIGRATIONDELAY = 60
    Property(S): MIGRATIONDELAY = 30
    Property(S): MsiLogging = voicewarmupx
    Property(S): MSIRESTARTMANAGERCONTROL = Disable
    Property(S): SMSLongDescription = Provides malware and threat protection for Symantec Endpoint Protection
    Property(S): SymMigrationRebootMessage = To provide complete protection, Symantec Endpoint Protection requires this computer to restart.
    Property(S): SymRebootAtEndMessage = To provide complete protection, Symantec Endpoint Protection requires this computer to restart.
    Property(S): InstallCompleteMessage = The installation has completed successfully
    Property(S): ShowServiceProgressMessage = Executing install script via service
    Property(S): ShowServiceProgress_RBMessage = Executing rollback script via service
    Property(S): SiloGUID = {E20BD12D-800D-4ACA-AB05-1C6D643530B9}
    Property(S): SILO_REGHIVE = SOFTWARE\Symantec\Symantec Endpoint Protection
    Property(S): HIGHCONTRAST = 0
    Property(S): SYM_MAJOR_UPGRADE = 0
    Property(S): SEPLicprop = SB
    Property(S): SEPLicpropReg = sepsb
    Property(S): SYMLICENSETYPE = 0
    Property(S): SYMLICENSETYPESTRING = sepe
    Property(S): MIGLICENSETYPE = 0
    Property(S): LOADEDDRIVERSFOUND = 0
    Property(S): RESOLVEFEATURES = 0
    Property(S): InstallingToReparse = 0
    Property(S): SYMCOMPRESSFOLDERS = 1
    Property(S): VMWAREDETECTED = 0
    Property(S): RegSilo = HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\{E20BD12D-800D-4ACA-AB05-1C6D643530B9}
    Property(S): ValidInstallDir = 0
    Property(S): CACHEINSTALL = 1
    Property(S): MIGRATESETTINGS = 1
    Property(S): CMC_PRODUCT_BUILD = #6500
    Property(S): CMC_PRODUCT_VERSION = 12.1
    Property(S): ADDSTARTMENUICON = 1
    Property(S): SEPORSNAC = 1
    Property(S): SymRasManDefine = SymRasMan
    Property(S): ErrorDialog = SetupError
    Property(S): ApplicationUsers = AllUsers
    Property(S): DefaultUIFont = Tahoma8
    Property(S): ProgressType0 = install
    Property(S): ProgressType1 = Installing
    Property(S): ProgressType2 = installed
    Property(S): ProgressType3 = installs
    Property(S): INSTALLSYMELAM = 1
    Property(S): LibSepCommon = 1
    Property(S): HITYPE = 0
    Property(S): LOCATIONSENSOR = 0
    Property(S): REVERSEDNS = 0
    Property(S): WSCAVALERT = 1
    Property(S): WSCAVUPTODATE = 7
    Property(S): WSCCONTROL = 0
    Property(S): LibSep86 = 1
    Property(S): SysPlantStartType = disabled
    Property(S): LibSnac86 = 1
    Property(S): Lang = 1033
    Property(S): LiveUpdateVars = 1
    Property(S): SecureCustomProperties = ADDLOCAL;ADDSTARTMENUICON;AMBERPLUSFOUND;AMBERSNACPLUSFOUND;APPDATAINSTALL;APPDATAINSTALLLOGS;APPDATAINSTALLSCRIPTS;APPDATALOGS;APPLOGS;APTEMP;AVLOGS;BADPATTS;CACHE_INSTALLER;CACHED_INSTALLS;CACHEINSTALL;CMC_PRODUCT_BUILD;CMC_PRODUCT_VERSION;COMPANYNAME;CONFIGDIR;CONTENTCACHE;CONTENTMIGRATION;DB;DECTEMP;DEFENDERFOUND;DISABLEDEFENDER;EMBEDDEDMINFEATURES;EMBEDDEDSYSTEM;ENABLEAUTOPROTECT;EWFAPIFOUND;EWFENABLED;EWFINSTALLED;EXCHANGEFOUND;FBWFENABLED;FBWFINSTALLED;FEATURESTATEDIR;FOREFRONTTMGFOUND;FOUNDBROWSERPROTECTIONLITE;FOUNDLIVEUPDTHST;FOUNDSEPSLF;FOUNDSETTINGSHOSTSLIVEUPDATE;FOUNDSNACSLF;HELP;HITYPE;I2_LDVP.VDB;IDCDATALOC;IDCDATASERVER;IDCDEPLOYMENT;IDCENABLE;IDCEXTRAINFO;IEVERSION;INSTALLEDPRODUCTTYPE;INSTALLSCRIPTS;INSTALLSYMELAM;JAGUARSNACPLUSFOUND;LANG1033;LEGACYCOHCLIENTFOUND;LEGACYCOHFOUND;LEGACYNCO2FOUND;LEGACYNCOFOUND;LEGACYSEA_NM;LEGACYSEA_NM1;LEGACYSEA_NM2;LOADEDDRIVERSFOUND;LOCATIONSENSOR;MAXMIGRATIONDELAY;MIGLICENSETYPE;MIGRATESETTINGS;MIGRATIONDELAY;MIGRATIONPENDINGREBOOT;MSIRESTARTMANAGERCONTROL;NAV2003FOUND;NAVCORP8X;NAVSERVER8X;NEWERFOUND;NEWERSNACFOUND;NIS2003FOUND;NIS2004FOUND;NORTON360FOUND;NORTON360V2FOUND;NORTONAV;NORTONAVPRO;NORTONFOUND;NOTESFOUND;NSW2007_2008FOUND;OLDAPPDATADIR;OLDERFOUND;OLDPRODUCTREDUCEDSIZE;OLDPRODUCTVERSION;OLDSILOFOUND;OPTOUTREPSUBMISSION;OS_SUPPORTS_UI;OUTLOOKFOUND;PENDINGMODULEREMOVAL;PERSISTEDDATA;PREAMBERFOUND;PREAMBERSNACFOUND;PREHAMLETFOUND;PRODUCTINSTALLDIR;PRODUCTINSTALLDIRINSETAID;QUARANTINE;REDUCEDSIZE;REGFILTERINSTALLED;REINSTALL;REMOVE;RES;RESOLVEFEATURES;REVERSEDNS;ROOTDRIVE;RUNLIVEUPDATE;SAV9XFOUND;SAVCLIENT8XFOUND;SAVCORP7XFOUND;SAVFOUND;SAVMIGINSTDIR;SAVSMIGFOLDER;SCFFOUND;SCS2FOUND;SCSFOUND;SCSMIGINSTDIR;SDIDATFOUND;SEAMIGINSTDIR;SEPMIGINSTDIR;SEPORSNAC;SERDEFDATFOUND;SHDOCVW;SILO_REGHIVE;SISFAILED;SISUSETRANSACTIONS;SMCLU;SNACFOUND;SNACMIGINSTDIR;SOURCEDIR;SPA51BLOCK;SPAFOUND;SPMXMLFOUND;SRCLICFILE;SSCOLDFOUND;STATEDIR;STATICDATA;SYLINKSRCDIR;SYM_MAJOR_UPGRADE;SYMCOMPRESSFOLDERS;SYMFORCEFAIL;SYMFORCEFAILPHASE;SYMLICENSETYPE;SYMLICENSETYPESTRING;SYMRASMAN_REG13_CONFIGUIPATH;SYMRASMAN_REG13_CONFIGUIPATHBACKUP;SYMRASMAN_REG13_IDENTITYPATH;SYMRASMAN_REG13_IDENTITYPATHBACKUP;SYMRASMAN_REG13_INTERACTIVEUIPATH;SYMRASMAN_REG13_INTERACTIVEUIPATHBACKUP;SYMRASMAN_REG13_PATH;SYMRASMAN_REG13_PATHBACKUP;SYMRASMAN_REG25_CONFIGUIPATH;SYMRASMAN_REG25_CONFIGUIPATHBACKUP;SYMRASMAN_REG25_IDENTITYPATH;SYMRASMAN_REG25_IDENTITYPATHBACKUP;SYMRASMAN_REG25_INTERACTIVEUIPATH;SYMRASMAN_REG25_INTERACTIVEUIPATHBACKUP;SYMRASMAN_REG25_PATH;SYMRASMAN_REG25_PATHBACKUP;SYMREBOOT;SYMSRCDIR;SYMSTARTMENUDIR;SYSFERFOUND32;TARGETDIR;TEEFERFOUND;TEEFERPENDINGREBOOT;TEEFERVISTA;TEEFERWIN8;TEEFERXP;TPAR;UNINSTALLREBOOTREQUIRED;USEDCUSTOMINSTALL;USERNAME;UWFENABLED;UWFINSTALLED;VMWAREDETECTED;WINDOWSFIREWALLSTATE;WSCAVALERT;WSCAVUPTODATE;WSCCONTROL;XFER;XFER_TMP
    Property(S): MsiLogFileLocation = C:\Users\SYMAV_~1\AppData\Local\Temp\3\SEP_INST.LOG
    Property(S): PackageCode = {458550D1-453A-4319-A41C-340EB4972508}
    Property(S): ProductState = -1
    Property(S): PackagecodeChanging = 1
    Property(S): SRCLICFILE = EE
    Property(S): CURRENTDIRECTORY = C:\Users\SYMAV_~1\AppData\Local\Temp\3\Symantec
    Property(S): CLIENTUILEVEL = 2
    Property(S): CLIENTPROCESSID = 4484
    Property(S): MsiSystemRebootPending = 1
    Property(S): VersionDatabase = 200
    Property(S): VersionMsi = 4.05
    Property(S): VersionNT = 600
    Property(S): WindowsBuild = 6002
    Property(S): ServicePackLevel = 2
    Property(S): ServicePackLevelMinor = 0
    Property(S): MsiNTProductType = 3
    Property(S): MsiNTSuiteEnterprise = 1
    Property(S): WindowsVolume = C:\
    Property(S): System16Folder = C:\Windows\system\
    Property(S): RemoteAdminTS = 1
    Property(S): TempFolder = C:\Users\SYMAV_~1\AppData\Local\Temp\
    Property(S): AppDataFolder = C:\Users\SymAV_SVC001\AppData\Roaming\
    Property(S): FavoritesFolder = C:\Users\SymAV_SVC001\Favorites\
    Property(S): NetHoodFolder = C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
    Property(S): PersonalFolder = C:\Users\SymAV_SVC001\Documents\
    Property(S): PrintHoodFolder = C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
    Property(S): RecentFolder = C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\Recent\
    Property(S): SendToFolder = C:\Users\SymAV_SVC001\AppData\Roaming\Microsoft\Windows\SendTo\
    Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
    Property(S): LocalAppDataFolder = C:\Users\SymAV_SVC001\AppData\Local\
    Property(S): MyPicturesFolder = C:\Users\SymAV_SVC001\Pictures\
    Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
    Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
    Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
    Property(S): FontsFolder = C:\Windows\Fonts\
    Property(S): GPTSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): ShellAdvtSupport = 1
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 4095
    Property(S): VirtualMemory = 9436
    Property(S): AdminUser = 1
    Property(S): LogonUser = SymAv_SVC001
    Property(S): UserSID = S-1-5-21-1593251271-2640304127-1825641215-2051879
    Property(S): UserLanguageID = 1033
    Property(S): ComputerName = MUVMP115
    Property(S): SystemLanguageID = 1033
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 19
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): TextInternalLeading = 3
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 20:18:22
    Property(S): Date = 9/16/2016
    Property(S): MsiNetAssemblySupport = 4.0.30319.18408
    Property(S): MsiWin32AssemblySupport = 6.0.6001.18000
    Property(S): RedirectedDllSupport = 2
    Property(S): MsiRunningElevated = 1
    Property(S): Privileged = 1
    Property(S): USERNAME = Siemens AG
    Property(S): COMPANYNAME = Siemens AG
    Property(S): DATABASE = C:\Windows\Installer\276cb7.msi
    Property(S): OriginalDatabase = C:\Users\SymAV_SVC001\AppData\Local\Temp\3\Symantec\Sep.msi
    Property(S): UILevel = 3
    Property(S): MsiUIHideCancel = 1
    Property(S): ACTION = INSTALL
    Property(S): SymVersionNT = 600
    Property(S): BFEServiceRunning = 1
    Property(S): IdcXmlPath = C:\Windows\Temp\idc.xml
    Property(S): EMBEDDEDSYSTEM = 0
    Property(S): AlreadyElevated = 1
    MSI (s) (9C:D0) [20:18:22:669]: Note: 1: 1708 
    MSI (s) (9C:D0) [20:18:22:669]: Product: Symantec Endpoint Protection -- Installation operation failed.

    MSI (s) (9C:D0) [20:18:22:669]: Windows Installer installed the product. Product Name: Symantec Endpoint Protection. Product Version: 12.1.7004.6500. Product Language: 1033. Installation success or error status: 1603.

    MSI (s) (9C:D0) [20:18:22:669]: Deferring clean up of packages/files, if any exist
    MSI (s) (9C:D0) [20:18:22:669]: MainEngineThread is returning 1603
    MSI (s) (9C:28) [20:18:22:669]: No System Restore sequence number for this installation.
    === Logging stopped: 9/16/2016  20:18:22 ===
    MSI (s) (9C:28) [20:18:22:669]: User policy value 'DisableRollback' is 0
    MSI (s) (9C:28) [20:18:22:669]: Machine policy value 'DisableRollback' is 0
    MSI (s) (9C:28) [20:18:22:669]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (9C:28) [20:18:22:669]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
    MSI (s) (9C:28) [20:18:22:669]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
    MSI (s) (9C:28) [20:18:22:669]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2 
    MSI (s) (9C:28) [20:18:22:669]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2 
    MSI (s) (9C:28) [20:18:22:669]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (s) (9C:28) [20:18:22:669]: Restoring environment variables
    MSI (s) (9C:28) [20:18:22:669]: Destroying RemoteAPI object.
    MSI (s) (9C:40) [20:18:22:669]: Custom Action Manager thread ending.
    MSI (c) (84:20) [20:18:22:684]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (84:20) [20:18:22:684]: MainEngineThread is returning 1603
    === Verbose logging stopped: 9/16/2016  20:18:22 ===



  • 2.  RE: installation rollback

    Posted Sep 16, 2016 03:47 PM

    The install is saying that machine needs to be rebootd:

    Symantec Endpoint Protection has detected that there are pending system changes that require a reboot.  Please reboot the system and rerun the installation.

     



  • 3.  RE: installation rollback

    Posted Sep 16, 2016 04:00 PM

    i already rebooted the machine and perform installtion again..but still no luck



  • 4.  RE: installation rollback

    Posted Sep 16, 2016 04:06 PM

    It's not uncommon for it to take 2-3 reboots.

    Otherwise, please see this KB article for the registry key that you can manually delete:

    Error: "...pending system changes that require a reboot" during Endpoint Protection installation or upgrade

    http://www.symantec.com/docs/TECH98292



  • 5.  RE: installation rollback

    Posted Sep 20, 2016 06:50 PM

    Yes, a couple of reboots does the trick.