Endpoint Protection

Hi

we are in the verge of uninstalling SAV and installing SEP we are facing several issues during the uninstallation  of SAV and installation of SEP on our machines

During our troubleshooting we have observed that following exe were running on the task manager

1. Luall.exe
2. Rtvscan.exe
3. Vptray.exe
4. Lucom.exe
5. Lucallproxy.exe
6. Lucoms~1.exe
7. Password set during uninstallation

We have designed our own package and we ensured all the above exe are terminated and password is also removed and then trying to install the SEP Package downloaded from SEPM console. We have observed that few clients are still failing during the uninstallation and doesn’t install SEP.  we  have checked on few blogs available in Symantec and they have recommended to use the tool cleanwipe(https:\\fileshare.symantec.com) to remove SAV before installing SEP.

We executed the tool manually and haven’t faced any issues during the uninstallation process and this tool does two restarts for removing SAV. Is there an option to use the tool without a restart and then install the SEP client package downloaded from SEPM Console.

Hello,

Cleanwipe in itself is an Unsupported Utility, it is recommended to test it in a non-production environment before using it in a production system. Please use this tool at your own risk.

Again, Why not follow SAFE steps?

I have suggested the below Steps for Migration from SAV 10 To SEP 11 (Normally, Customers would like to Install SEPM on either the same Server where the Symantec System Center is Installed OR on Different server computer)

1) Install Symantec Endpoint Protection Manager,

2) Create new SEP 11 packages for new Deploy on all the other machines.

3) Deploy the packages to all SAV 10 client machines, which will migrate all the clients to SEP (this could be done either with the help of "Migration and Deployment Wizard" OR "Find Unmanaged Computers"

Till the time the migration is over, the clients which haven't migrated from SAV 10 will communicate to Symantec System Center 10.

4) Once all the machines have been migrated from SAV 10 to SEP 11

(Except on the same server machine where the Symantec System Center 10 is installed, as SEP will not get installed till Symantec System Center 10, SCS 3.1 is uninstalled.),

5) Uninstall Symantec System Center 10, SCS 3.1 on the server

6) Install SEP on the same machine where the Symantec System Center 10 was uninstalled.

Symantec Knowledgebase Articles for Migration.

1) How To Migrate From Symantec Antivirus System Center Console To Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH106485&locale=en_US

2) Obtaining an upgrade or update for Symantec Endpoint Protection 11.x or Symantec Network Access Control 11.x

http://www.symantec.com/business/support/index?page=content&id=TECH103088&locale=en_US

3) 'Installing and configuring Symantec Endpoint Protection 11 for the first time'

http://www.symantec.com/business/support/index?page=content&id=TECH102397&locale=en_US

4) Creating custom Client Installation packages in the Symantec Endpoint Protection Manager Console

http://www.symantec.com/business/support/index?page=content&id=TECH102817&locale=en_US

5) How to Deploy Symantec Endpoint Protection to your client computers using the Migration and Deployment Wizard.

http://www.symantec.com/business/support/index?page=content&id=TECH102907&locale=en_US

post the install log from the systems where install has failed!

To get the install log you need to go to 

Start > Run. type %temp% and the file would be called as sep_inst.log

Or if not here then they could also be in C:/Windows/Temp folder by the same name.

Hi Sranga80,

Under most circumstances, it is not necessary to remove SAV before installing SEP.  See Do I need to upgrade Symantec AntiVirus to 10.1.7 before migrating to Symantec Endpoint Protection 11.0? (http://www.symantec.com/docs/TECH102538 ) for more details.

Thanks and best regards,

Mick

Please not that if you have Symantec System Center installed on a machine, it will block the SEP client installation.