Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Office 2010 installs Failing

Created: 12 Dec 2011 | 6 comments
Car_Bed's picture
0 0 Votes
Login to vote

Has anyone else seen or had issues with their Office 2010 Deployments failing due to SEP? We are using SEP, and are seeing that the Office 2010 deployments are failing. These deployments do take longer, its just the way this version installs, but we are seeing that when we kill rtvscan, the installs succeed, but when rtvscan is running theu eventually fail out. Procmon says the write in the registry are the main culprit...

 

thoughts?

 

I would hate the answer to be "Kill SEP, change the AV policy to NOT kick rtvscan back on after 10 minutes" and go forward with the deployments.

 

any ideas or thoughts are appreciated

Comments

Shulk's picture
12
Dec
2011
0 Votes 0
Login to vote

Application and Device Control

Hi Car_Bed,

 

Do you have any "Application and Device Control" policies setup ? If yes, try to disable it while you perform the installation, as a test.

Also, which version of SEP are you currently using ?

Do you have any error appearing in the Event Viewer ?

 

Best regards,

 

Shulk.

Mithun Sanghavi's picture
13
Dec
2011
0 Votes 0
Login to vote

Questions

Hello,

What version of SEP 11.x have you installed on your machine??

What OS is installed on the machine in Question??

 Does this Happen on all machines or only on 1 specific machine??

How much RAM does this machine carry??

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

Paul Murgatroyd's picture
13
Dec
2011
1 Vote +1
Login to vote

Hi Car_Bed, We believe we

Hi Car_Bed,

We believe we have traced this to a problem with our ERASER engine.  An update should be released in the next day or so that will fix this.  You don't need to do anything, the SEP client will pick this up automatically when it gets its latest definitions.

thanks

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Car_Bed's picture
15
Dec
2011
0 Votes 0
Login to vote

Paul I have sene you a LOT

Paul

 

I have seen you a LOT on here, thanks for the reply, I APPRECIATE IT !

Do you have anymore information on this?

My office deployment team is really putting the pressure on me, and as I no longer have BCS support, i cant just pick the phone up for a quick answer...

Definitions revision? Date? to look for in a Report.

Anything you can add is greatly appreciated.

Any idea how you/symantec determined this by chance, the link between the two

Paul Murgatroyd's picture
16
Dec
2011
0 Votes 0
Login to vote

No problem.. I'm trying to

No problem.. I'm trying to get a little more info for you, but the new engine was released in definitions dated 13th December.  The SEP Troubleshooting, Versions UI should show the ERASER version as 7274498.65537. 

You can also report on this from the SEPM by looking at the Computer Status logs, the version will be listed in the details.

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Car_Bed's picture
19
Dec
2011
0 Votes 0
Login to vote

Thanks to Shulk and Mithun

Thanks to Shulk and Mithun also for your responses...Didnt mean to leave you both out of my thanks..