Endpoint Protection

 View Only

  • 1.  SEP fails, 400 workstations

    Posted Apr 29, 2010 07:16 AM
      |   view attached

    After installing 10 computers with norton management center it is looking awfull again.

    I removed Landesk Antivirus with no result.
    Used clean wipe agian no result
    Removed the policy`s from the computer no result.
    Installed SP3 on the client`s no result.

    I have still installation problems see tthe included log.

    At this point we have got 400 failed computers and 300 computers running with SEP
    OS. WIndows XP
    Service Pack 2
     

    Attachment(s)

    zip
    SEP_INST.zip   382 KB 1 version


  • 2.  RE: SEP fails, 400 workstations

    Posted Apr 29, 2010 07:31 AM
    Try by installing unmanaged client and see any difference is present..


  • 3.  RE: SEP fails, 400 workstations

    Posted Apr 29, 2010 07:44 AM

    Already did it does not work..


  • 4.  RE: SEP fails, 400 workstations

    Posted Apr 29, 2010 01:13 PM
    Hi Blauwebrug,

    That install log shows an attempt to install an unmanaged 11.0.6000.550 client.  Here's the point of failure:

    Add SESC AntiVirus Client Win32 11.0 English Symantec Endpoint Protection client {678BF7F9-F8E9-468b-B890-F55E159CAA3C}  0   
    LUCA: HandleLiveUpdateAction
    LUCA(874): HandleLiveUpdateAction: Action="Add" Product="SESC Virus Definitions Win32 v11" Version="MicroDefsB.CurDefs" Lang="SymAllLanguages" Description="Antivirus and antispyware definitions" GUID="{C60DC234-65F9-4674-94AE-62158EFCA433}" CallbackCLSID="{855BA5F4-6588-4F09-AE61-847E59D08CB0}" CallbackFlags="3" Group="{DA47E166-7F7A-4039-9768-7AFFB5E99CE8}"
    LUCA(1020): Exception calling IluProductReg RegisterProduct
    LUCA: HandleLiveUpdateAction: COM Exception:
    LUCA: Unknown error 0x802A0014
    LUCA: Call to HandleLiveUpdateAction FAILED.

    Most likely, there's a Software Restriction Policy in place that is causing this registration to fail.  The following might get you around that:

    Open the registry and find this key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer

    Change the value "AuthenticodeFlags"=dword:00000001 from 1 to 0.

    Then reboot the computer and try to install SEP once again! 

    Note that there may be other entries too--- search through the registry for the word "trustedpublisher" or "safer" and change the authenticodeflags there to 0 as well, if that first change does not succeed.

    Please keep the forum up-to-date with your progress!

    Thanks and best regards,

    Mick