Endpoint Protection

Rolled out 11.0 Release Update 6a manually (unmanaged) to ~20 laptops, all Dell Vostros running W7 Pro. All went well except one, which exhibits the same behaviors as noted in previous posts on 10.*->11 migrations where it gets most of the way installed and then does a rollback. Did all the suggested changes in those posts, plus. Here's what's been done so far:

• Downloaded latest version
• Cleaned symantec entries from registry & the 'needs reboot' flag
• Uninstalled all other AVs
• Ran multiple AVs against the machine to make sure there was no malware/rootkits
• Ran disk and system diagnostics
• Updated all drivers and ran 'em all again
• Installed 3 other AV products to make sure it wasn't global
• Uninstalled all unnecessary software (sorry, Dell!)

About the only thing we haven't done is wipe the computer and start from scratch. Given client data and customizations, I'm loathe to take that step. Anyone have suggestions that might help me from pulling out the last of my hair?

Cheers,

Shlomi

Upload the SEP_INST.log file from Start > run > %temp% folder?

Here are few articles for SEP installation rolling back on Win 7

Title: 'Symantec Endpoint Protection installation rolls back while upgrading'
Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009110712450848?Open&seg=ent
 
Title: 'Windows 7 / 2008 R2 - SEP Client installation rolls back.'
Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009110411364348?Open&seg=ent
 
Title: 'Symantec Endpoint Protection Client installation fails on LUCHECK 206'
Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2010012509092648?Open&seg=ent

It might be worth a look and see if Embassy WAVE Trust Suite installed.  Not saying this is your issue, but SEP and WAVE trust suite are known to have problems working together.

Mike

You may try this:

1.                    Open and log into Symantec Endpoint Protection Manager

2.                    Select Admin

3.                    Select the the package you wish to deploy (either WIN32BIT or WIN64BIT)

4.                    Click on Export Client Install Package

5.                    Enter the folder location for the client package

6.                    Uncheck the box for create a single .EXE file for this package.

7.                    Select Settings and Features desired and Policy settings and Mode and click on OK

8.                    After the package has finished exporting open the Symantec_Endpoint_Protection_RU6a_XPLAT CD 1\SEP directory and copy the LuCheck.exe and LUSETUP.EXE in to the folder where expanded package was exported overwriting the existing LuCheck.exe and LUSETUP.EXE.

9.                   Try deploying the package


If this doesn't work:
- Try installing an unmanaged client from the same SEP folder on the CD
- Replace the Sylink.xml file in the "C:\program files\symantec\symantec endpoint protection" folder with the one from the SEP Manager
(I might give more details if you need on how to replace the file)

You may want to do a registry comparison between the working and that non-working client.
Use the one by Symantec or hijackthis. You may also want to check the pre-install requirements using the support tool (didn't help me much though).

Run SEP support tool and see any error is appearing?