Endpoint Protection Small Business Edition

 View Only
Expand all | Collapse all

SEP Installation problems after disable defender and removing KB2781197

Migration User

Migration UserAug 07, 2013 05:33 AM

Migration User

Migration UserAug 07, 2013 06:12 AM

Migration User

Migration UserAug 07, 2013 10:02 AM

  • 1.  SEP Installation problems after disable defender and removing KB2781197

    Posted Aug 07, 2013 05:21 AM

    I have a problem with the installation of symantec endpoint protection on one of the computers in the company. In the log, it seems that windows installer sucessfully has installed SEP.

    I have removed KB2781197 and disabled windows defender in windows 8.

    I have also checked the PendingFileRenameOperations, which is not existing.

    It has been installed on the computer but I wanted to reinstall the program.

    The installation runs, untill gathering information shows up, just to disappear - PLEASE Help !



  • 2.  RE: SEP Installation problems after disable defender and removing KB2781197

    Posted Aug 07, 2013 05:27 AM

    Hi,

    Could you please provide SEP and Os version ?

    Also shared SEP.INST Logs.



  • 3.  RE: SEP Installation problems after disable defender and removing KB2781197

    Posted Aug 07, 2013 05:33 AM

    windows 8

    sep 12.1.2015



  • 4.  RE: SEP Installation problems after disable defender and removing KB2781197



  • 5.  RE: SEP Installation problems after disable defender and removing KB2781197

    Posted Aug 07, 2013 06:12 AM

    Share sep_inst.log from %temp%



  • 6.  RE: SEP Installation problems after disable defender and removing KB2781197

    Posted Aug 07, 2013 06:16 AM

    Try these steps

    Delete the Symantec registry key folder from 

    HKLM\Software\Symantec

    run the install if that does not work post the SIS_inst.log 

    What logs do I need to gather in order to troubleshoot a failed SEP 12.1 client installation?

    http://www.symantec.com/business/support/index?page=content&id=TECH164067



  • 7.  RE: SEP Installation problems after disable defender and removing KB2781197

    Trusted Advisor
    Posted Aug 07, 2013 08:31 AM

    Hello,

    I would appreciate if you could please upload us the sep_inst.log from %temp%

    Secondly, could you try installing the SEP 12.1.3001 with UAC disabled on the client machine.

    Check this Article:

    Preparing Windows operating systems for remote deployment

    http://www.symantec.com/docs/HOWTO80805

    Hope that helps!!



  • 8.  RE: SEP Installation problems after disable defender and removing KB2781197

    Posted Aug 07, 2013 09:55 AM
      |   view attached

    I tried, but this page complained about firewall

     

    I have attached it, get error code 3010

    Attachment(s)

    txt
    LPSEP.txt   2.58 MB 1 version


  • 9.  RE: SEP Installation problems after disable defender and removing KB2781197

    Broadcom Employee
    Posted Aug 07, 2013 09:56 AM

    Hi,

    Thank you for posting in Symantec community.

    I would be glad to answe your query.

    There are three main reasons caused this issue:

    1) Windows Defender

    2) Microsoft hotfix KB2781197 installed. 

    3) Install account has privilege issue, some XP upgrades to Windows 8 will have this type of problem.

    Reference: Troubleshooting for failed install of SEP 12.1 RU2 client on Windows 8 (Win8)

    http://www.symantec.com/docs/TECH206760

    As you mentioned it was already installed it might be possible it was not removed 100%.

    Run the cleanwipe tool and then try to install it again.

    https://www-secure.symantec.com/connect/forums/how-get-cleanwipe-tool-endpoint-removal

    If suggested steps didn't work then try to install the latest version of SEP (SEP 12.1 RU3).

    You might be aware SEP 12.1 RU3 has a following fix.

    After applying Microsoft update KB2781197 to a Windows 8 computer, the Symantec Endpoint Protection client installer fails

    Fix ID: 3123310

    Symptom: The following lines are from the SEP_INST.log generated from a failed installation attempt:

    (SERVER) MSI (s) (04:18) [08:56:49:093]: Executing op: CustomActionSchedule(Action=ShowServiceProgress,ActionType=3073,Source=BinaryData,Target=ShowServiceProgress,CustomActionData={3771A34D-2132-48EA-A486-D62ECDF9D553};SOFTWARE\Symantec\Symantec Endpoint Protection;Executing install script via service;)
    (SERVER) MSI (s) (04:5C) [08:56:49:250]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI6B0.tmp, Entrypoint: ShowServiceProgress
    (UNKNOWN) ScriptGen: ShowServiceProgress() MSIRUNMODE_SCHEDULED
    (UNKNOWN) ScriptGen: ShowServiceProgress() calling WaitForSingleObject(scriptStarted) ...
    (UNKNOWN) ScriptGen: ShowServiceProgress() WaitForSingleObject(scriptStarted) returned WAIT_OBJECT_0
    (UNKNOWN) ScriptGen: ShowServiceProgress() script execution failed.
    (UNKNOWN) ScriptGen: ShowServiceProgress() reset script failure event.
    (UNKNOWN) ScriptGen: ShowServiceProgress() is returning an error
    (UNKNOWN) CustomAction ShowServiceProgress returned actual error code 1603

    Solution: For installations on Windows 8, removed the option to enable/disable Windows Defender after install, as this is no longer supported. Windows Security Center (WSC) will automatically disable Windows Defender when Symantec Endpoint Protection registers with WSC

    Reference: New fixes and features in Symantec Endpoint Protection 12.1.3

    http://www.symantec.com/docs/TECH206828

     



  • 10.  RE: SEP Installation problems after disable defender and removing KB2781197

    Posted Aug 07, 2013 10:02 AM

    where can i get the clean wipe tool?



  • 11.  RE: SEP Installation problems after disable defender and removing KB2781197

    Posted Aug 07, 2013 10:10 AM

    You need to contact support and request the download link and credentials.

    Latest Cleanwipe version is 12.1 RU3.

    Article on it here with link to support by Chetan Sevade

    https://www-secure.symantec.com/connect/articles/new-cleanwipe-version-introuduced-sep-121-ru2



  • 12.  RE: SEP Installation problems after disable defender and removing KB2781197

    Posted Aug 07, 2013 10:14 AM

    Can you post the SIS_inst.log?

    What logs do I need to gather in order to troubleshoot a failed SEP 12.1 client installation?

    http://www.symantec.com/business/support/index?page=content&id=TECH164067



  • 13.  RE: SEP Installation problems after disable defender and removing KB2781197

    Broadcom Employee
    Posted Aug 07, 2013 11:06 AM

    Easiest way can be to log a web case.

    Support team will send you required credentials to download the tool.

    How to create a new case in MySupport

    http://www.symantec.com/docs/TECH58873



  • 14.  RE: SEP Installation problems after disable defender and removing KB2781197

    Trusted Advisor
    Posted Aug 09, 2013 05:06 AM

    Hello,

    For this Latest version of CleanWipe 12.1.3001.165_RU3, I would recommend you to Create a Case with Symantec Technical Support.

    How to create a new case in MySymantec

    http://www.symantec.com/business/support/index?page=content&id=TECH58873

    Phone numbers to contact Tech Support:-

    Regional Support Telephone Numbers:

    • United States: https://support.broadcom.com (407-357-7600 from outside the United States)
    • Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
    • United Kingdom: +44 (0) 870 606 6000

    Additional contact numbers: http://www.symantec.com/business/support/contact_t...

    Hope that helps!!


  • 15.  RE: SEP Installation problems after disable defender and removing KB2781197

    Posted Sep 06, 2013 12:35 PM

    Look for KB2856373, it's a new Defender patch. We just got some patch updates and it killed our SEP installs just like KB2781197 did.