Endpoint Protection

Hello

On one PC have problem with upgrade AVclient.

Event Type: Error

Event Source: MsiInstaller

Event Category: None

Event ID: 1013

Date: 09.02.2012

Time: 11:03:43

User: SYSTEM

Computer: NOTEBOOK611

Description:

Продукт: Symantec Endpoint Protection -- symantec endpoint protection cannot installed to a path including a reparse point

 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

 

Data:

0000:  7b 37 32 45 42 35 37 35   {72EB575

0008:  37 2d 32 45 43 35 2d 34   7-2EC5-4

0010:  43 38 35 2d 39 45 33 45   C85-9E3E

0018:  2d 45 46 41 37 39 33 39   -EFA7939

0020:  41 31 45 38 42 7d         A1E8B}

Attachment(s)

SEP_INST.LOG_.zip   32 KB 1 version

have you application and device control policy enabled on the client? If yes, you might have enabvled the client protection, that might be stopping the upgrade,

I have about 500 PC in my network. Only 1 PC have problem with upgrade client.

Upgrade execution as background proccess w/o questions.

I dont see on this PC programs with control functions.

ok, since not much of information is there from log except

MSI (s) (70:5C) [11:03:43:484]: Note: 1: 1708
MSI (s) (70:5C) [11:03:43:484]: ???????: Symantec Endpoint Protection -- ???????? ????????? ?? ?????????.

MSI (s) (70:5C) [11:03:43:484]: ?????????? Windows ???????? ????????? ????????. ???????: Symantec Endpoint Protection. ??????: 12.1.1000.157. ????: 1049. ????????? ????????? ? ??????????: 1603.

MSI (s) (70:5C) [11:03:43:640]: Cleaning up uninstalled install packages, if any exist
MSI (s) (70:5C) [11:03:43:640]: MainEngineThread is returning 1603
MSI (s) (70:EC) [11:03:43:640]: No System Restore sequence number for this installation.

can you manually try installing on local machine instead of push?

I tried a similar result.

does the log shows same info?

yes

can you pass on sis_inst.log?

you can find it under C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.xxxxxxxx\Data\Install\Logs

C:\>echo %allusersprofile%

C:\Documents and Settings\All Users.WINDOW

can you clean uninstall and reinstall SEP?

For example, reparse points are used to implement NTFS file system links and the Microsoft Remote Storage Server (RSS). RSS uses an administrator-defined set of rules to move infrequently used files to long term storage, such as tape or optical media. It uses reparse points to store information about the file in the file system. This information is stored in a stub file that contains a reparse point whose data points to the device where the actual file is now located. The file system filter can use this information to retrieve the file.

Reparse points are also used to implement mounted folders. For more information, see Determining Whether a Directory Is a Mounted Folder.

http://msdn.microsoft.com/en-us/library/windows/desktop/aa365503(v=vs.85).aspx

Event ID 1013 error occur if the existing version of product is not removed properly.

Please manually uninstall Symantec Endpoint Protection client and try the install ..

Article URL http://www.symantec.com/docs/TECH102261

1) im uninstall client 11.0.6300 - this operation success complite fine

2) then try install client 12.1.1000 - this operation is failed

    - in events error 1013 cant install SEP in reparse point

>linkd "c:\documents and settings"

Source  c:\documents and settings is linked to

C:\Users

On a working system to change this point of reparse is problematic.

Client 11 again install fine.

I think that before on this machine has been installed Vista, which made ​​these reparse points, and then on top of Vista was set Windows XP.

How to get around this problem and install the client 12?