Endpoint Protection

Hello,

I use on all the computers in the company version 11.0 of SEP in a managed environment for years without any problem. All

workstations have Windows XP. Now I have a new laptop with Windows 7 prof. SP1 64bit and I cannot install the SEP client. I

searched Symantec communties in all directions but did not find any solution that would work.

sep_inst.log shows classical error:

======================
Action 23:44:21: ShowServiceProgress. Writing registry keys and values
ShowServiceProgress: incrementing tick
ScriptGen: ShowServiceProgress() script execution failed.
ScriptGen: ShowServiceProgress() reset script failure event.
ScriptGen: ShowServiceProgress() is returning an error (so close to the end!)
CustomAction ShowServiceProgress returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 23:44:22: InstallFinalize. Return value 3.
MSI (s) (A8:A8) [23:44:22:358]: User policy value 'DisableRollback' is 0
MSI (s) (A8:A8) [23:44:22:358]: Machine policy value 'DisableRollback' is 0
MSI (s) (A8:A8) [23:44:22:396]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1117306245,LangId=1033,Platform=589824,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (A8:A8) [23:44:22:396]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (A8:A8) [23:44:22:397]: Executing op: DialogInfo(Type=1,Argument=Symantec Endpoint Protection)
MSI (s) (A8:A8) [23:44:22:397]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
Action 23:44:22: Rollback. Rolling back action:
Rollback: Executing install script via service


======================
it seems I have the same manifestation as in https://www-secure.symantec.com/connect/forums/sep-12-install-fails-windows-7-pro-64bit but I installed the correct version, 64bit.


I've tried the following workarounds with no success:

1. cleaned all the files and install first live update and after that SEP

2. since only SEP 11 RU7 supports Win7 and this version cannot be found anymore , I tried with latest version from

fileconnect, <<Symantec_Endpoint_Protection_12.1.2_MP1_Win64-bit_Client_EN>> also tried with liveupdate first from

<<Symantec_Endpoint_Protection_12.1.2_MP1_SEPM_EN>>

3. disabled UAC

4. checked registry for

HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData

value=%USERPROFILE%\AppData\Roaming was already set.

5. run as administrator (even current user has administrator rights)

6. disabled windows firewall and windows defender
7. no PendingFileRenameOperations present in registry
8. combinations of the above.

I've tried more than 30 combinations and no luck! SEP does not want to install. On top of all these, now I have an entry in Start menu <<Symantec Endpoint Protection>> which contains only <<Symantec Endpoint Protection Help>> with link broken.
SEP is still not installed

Windows installation is a clean one, on a new PC.

Please help !

Best regards,
Iulian

Run the SymHelp tool to see what it finds, if anything:

Symantec Help (SymHelp) Download

Hello,

Try this

Symantec Endpoint Protection 12.1 client install rolls back, returning 1603

Hello,

Please check with below articles.

Symantec Endpoint Protection 12.1 client install rolls back, returning 1603

http://www.symantec.com/docs/TECH170259

MainEngineThread is returning 1603 when uninstalling SEP 12.1 RU1 on Windows 7 and Windows XP machines 32 bit.

http://www.symantec.com/docs/TECH185779

SEPM installation rolls back.

http://www.symantec.com/docs/TECH104408

First, Check this Article:

Installer Information - "Symantec Endpoint Protection has detected that there are pending system changes that require a reboot." when trying to install SEP 11.0 on Windows 7

http://www.symantec.com/docs/TECH95608

Steps -

1. Open registry and go to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\

hightlight Session Manager on the right hand side delete the value PendingFileRenameOperations

2. Also delete the same value from

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet001\Control\Session Manager\PendingFileRenameOperations

then run the install...without rebooting the PC

http://service1.symantec.com/SUPPORT/ent-security.nsf/ppfdocs/2007121609023348?Open&dtype=corp&src=&seg=&om=1&om_out=prod

Then

3.Disable UAC (Incase of Windows 7 and above)

4.If it's an upgrade uninstall SEP using cleanwipe utility and restart the system.

How to get the CleanWipe tool (Endpoint Removal)

https://www-secure.symantec.com/connect/forums/how-get-cleanwipe-tool-endpoint-removal

OR

4. Manually uninstall SEP.

Delete the contents of the SEP from the computer and registry after backing up the registry, then try reinstalling SEP.

http://www.symantec.com/docs/TECH184988

NOTE: For receiving CleanWipe utility requires you to create a case with Symantec.

In your case, I would recommend you to check this Article below:

Methods for uninstalling Symantec Endpoint Protection

https://www-secure.symantec.com/connect/forums/methods-uninstalling-symantec-endpoint-protection

Manual uninstall documents for Symantec Endpoint Protection

http://www.symantec.com/docs/TECH164769

http://www.symantec.com/business/support/index?page=content&id=TECH170259

Check this forum

https://www-secure.symantec.com/connect/forums/unable-install-sep-121-clean-build-windows-7-64bit

This should be the reason "On top of all these, now I have an entry in Start menu <<Symantec Endpoint Protection>> which contains only <<Symantec Endpoint Protection Help>> with link broken."

Create a package with no start up menu for SEP

Create an install package or create a custom setting under the “Client Install Settings” options to not use “Add the program to the Start Menu”, leave this unchecked.

If the install is successful, manually create the shortcut on the desktop that points SymCorpUI.exe.

http://www.symantec.com/business/support/index?page=content&id=TECH170259

Hi

Please install the latest version SEP 12.1 RU2 MP1

Regards

Hi Brian,

I've tried symhelp and the result is:

1.===========================

Title: System meets the requirements for Symantec Endpoint Protection 12.1: Local install
Product: Endpoint Protection Client

Status: Ok
Overview: Does your computer meet the system requirements for Symantec Endpoint Protection 12.1?

Symantec articles:

System Requirements for Symantec Endpoint Protection, Enterprise and Small Business Editions, and Network Access Control 12.1
http://www.symantec.com/docs/TECH163806

Best Practices for Upgrading to Symantec Enpoint protection 12.1.2
http://www.symantec.com/docs/TECH163700

Details:
------------------------------------------------------------------------------------------------------------------
Ok    Your operating system version (Windows 7 Professional Service Pack 1 64-bit) is supported.
------------------------------------------------------------------------------------------------------------------
Ok    Available disk space (22.06 GB) on the system drive meets the recommended 850.00 MB.
------------------------------------------------------------------------------------------------------------------
Ok    Total RAM (3.86 GB) meets the recommended 1.00 GB.
------------------------------------------------------------------------------------------------------------------
Ok    At least one of your displays meets the recommended display resolution.
------------------------------------------------------------------------------------------------------------------
Ok    Microsoft Internet Explorer version 9 is installed.
------------------------------------------------------------------------------------------------------------------
Ok    Title: The system does not need to be rebooted
    Symantec articles:
    Does the computer need to be restarted?
    http://www.symantec.com/docs/TECH92413
    Ok    The OS has not requested a system reboot.
    Ok    The Windows Update Agent has not requested a system reboot.
    Ok    The Symantec Endpoint Protection Installation has requested a system reboot.
------------------------------------------------------------------------------------------------------------------
Ok    Title: The current user has local administrator rights
    Symantec articles:
    Does the current user have local administrator rights?
    http://www.symantec.com/docs/TECH91646
    Ok    The current user is a member of BUILTIN\Administrators
------------------------------------------------------------------------------------------------------------------
Ok    Title: The Windows Installer service is enabled
    Symantec articles:
    Is the Windows Installer service disabled?
    TECH92579
------------------------------------------------------------------------------------------------------------------
Information    Terminal Services is disabled.
------------------------------------------------------------------------------------------------------------------

2. ==============================

Title: System does not meet the recommendations for Symantec Endpoint Protection 12.1: Remote install
Product: Endpoint Protection Client

Status: Warning
Overview: Does your computer meet the system requirements for Symantec Endpoint Protection 12.1?

Symantec articles:

System Requirements for Symantec Endpoint Protection, Enterprise and Small Business Editions, and Network Access Control 12.1
http://www.symantec.com/docs/TECH163806

Best Practices for Upgrading to Symantec Enpoint protection 12.1.2
http://www.symantec.com/docs/TECH163700

Details:
------------------------------------------------------------------------------------------------------------------
Warning    Title: The Administrator account does not have a password
    Symantec articles:
    Does the Administrator account have a password?
    http://www.symantec.com/docs/TECH106143
    Warning    Administrator is a known user with a disabled account.
------------------------------------------------------------------------------------------------------------------
Ok    Your operating system version (Windows 7 Professional Service Pack 1 64-bit) is supported.
------------------------------------------------------------------------------------------------------------------
Ok    Available disk space (22.06 GB) on the system drive meets the recommended 700.00 MB.
------------------------------------------------------------------------------------------------------------------
Ok    Total RAM (3.86 GB) meets the recommended 512.00 MB.
------------------------------------------------------------------------------------------------------------------
Ok    At least one of your displays meets the recommended display resolution.
------------------------------------------------------------------------------------------------------------------
Ok    Microsoft Internet Explorer version 9 is installed.
------------------------------------------------------------------------------------------------------------------
Ok    Title: The Remote Registry service is enabled
    Symantec articles:
    Is the Remote Registry Service enabled?
    http://www.symantec.com/docs/TECH201331
------------------------------------------------------------------------------------------------------------------
Ok    Title: The Server service is running
    Symantec articles:
    Is the Server service started?
    http://www.symantec.com/docs/TECH106150
------------------------------------------------------------------------------------------------------------------
Ok    Title: The ADMIN$, C$, IPC$ shares are present
    Symantec articles:
    Are the C$, ADMIN$, and IPC$ shares available?
    http://www.symantec.com/docs/TECH91905
    Ok    Network Share Information
    Status    Share Name    Share Status    
    Ok    C$    Present    
    Ok    ADMIN$    Present    
    Ok    IPC$    Present    
------------------------------------------------------------------------------------------------------------------
Ok    Title: The Microsoft Firewall is not blocking TCP port 139 or 445
    Symantec articles:
    About the Find Unmanaged Computers function in Symantec Endpoint Protection Manager
    http://www.symantec.com/docs/TECH102582
    Error: "No Network Provider accepted the given the network path"
    http://www.symantec.com/docs/TECH102904
    Is the Microsoft Windows Firewall blocking port 445?
    http://www.symantec.com/docs/TECH106142
    Ok    The Microsoft Windows Firewall is disabled.
------------------------------------------------------------------------------------------------------------------
Ok    Title: The system does not need to be rebooted
    Symantec articles:
    Does the computer need to be restarted?
    http://www.symantec.com/docs/TECH92413
    Ok    The OS has not requested a system reboot.
    Ok    The Windows Update Agent has not requested a system reboot.
    Ok    The Symantec Endpoint Protection Installation has requested a system reboot.
------------------------------------------------------------------------------------------------------------------
Ok    Title: Simple file sharing is not enabled
    Symantec articles:
    Is the local security setting 'Sharing and security model for local accounts' set to Guest Only?
    http://www.symantec.com/docs/TECH106144
    Ok    Simple File Sharing is not enabled
    Information    The user is not logged into a domain
------------------------------------------------------------------------------------------------------------------
Ok    Title: User Account Control (UAC) is not present or not enabled
    Symantec articles:
    Is User Account Control enabled on the client?
    http://www.symantec.com/docs/TECH91902
    Ok    UAC is not enabled
------------------------------------------------------------------------------------------------------------------
Ok    Title: The Windows Installer service is enabled
    Symantec articles:
    Is the Windows Installer service disabled?
    TECH92579
------------------------------------------------------------------------------------------------------------------
Information    Terminal Services is disabled.
------------------------------------------------------------------------------------------------------------------

seems all ok to me for local install

Iulian

Hi Manish,

These are instructions to create an install package on SEPM which is not the case now. I try to install SEP client locally. Anyway, SEPM is version 11.0 and I need to install client v12.

Other suggestions would be appreciated.

Regards,

Iulian

Hi Ambesh,

I've looked in your first suggestion, http://www.symantec.com/docs/TECH170259

and I started to check SIS_INST.LOG

below there is an extract:

==============

2013-04-24T20:44:21.304Z INFO  I SIS    Executing action ( 1678 ) - ShowRollbackMessage  currentPosition: 860172
2013-04-24T20:44:21.304Z INFO  I SIS      [ShowRollbackMessage] message = [Installing content]
2013-04-24T20:44:21.305Z INFO  I SIS     
2013-04-24T20:44:21.305Z INFO  I SIS    Executing action ( 1679 ) - ShowInstallMessage  currentPosition: 860278
2013-04-24T20:44:21.305Z INFO  I SIS      [ShowInstallMessage] message = [Creating firewall application exceptions]
2013-04-24T20:44:21.305Z INFO  I SIS     
2013-04-24T20:44:21.305Z INFO  I SIS    Executing action ( 1680 ) - AddFirewallException  currentPosition: 860426
2013-04-24T20:44:21.305Z DEBUG I SIS      CoInitializeEx succeeds (0x00000000)
2013-04-24T20:44:21.307Z ERROR I SIS      Unable to create firewall manager: HRESULT = 0x80040154
2013-04-24T20:44:21.307Z INFO  I SIS      AddFirewallException ApplicationPath=[C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Bin64\Smc.exe]
2013-04-24T20:44:21.307Z INFO  I SIS      AddFirewallException ApplicationName=[SMC Service]
2013-04-24T20:44:21.308Z ERROR I SIS      Unable to create firewall manager: HRESULT = 0x800706D9
2013-04-24T20:44:21.309Z ERROR I SIS      Unable to create firewall manager: HRESULT = 0x800706D9
2013-04-24T20:44:21.309Z ERROR I SIS      Unable to add application to firewall policy.
2013-04-24T20:44:21.309Z DEBUG I SIS    Calling CoUninitialize
2013-04-24T20:44:21.309Z INFO  I SIS     
2013-04-24T20:44:21.309Z INFO  I SIS    Executing action ( 1681 ) - AddFirewallException  currentPosition: 860810
2013-04-24T20:44:21.309Z DEBUG I SIS      CoInitializeEx succeeds (0x00000000)
2013-04-24T20:44:21.310Z ERROR I SIS      Unable to create firewall manager: HRESULT = 0x800706D9
2013-04-24T20:44:21.311Z INFO  I SIS      AddFirewallException ApplicationPath=[C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Bin64\snac64.exe]
2013-04-24T20:44:21.311Z INFO  I SIS      AddFirewallException ApplicationName=[SNAC Service]
2013-04-24T20:44:21.311Z ERROR I SIS      Unable to create firewall manager: HRESULT = 0x800706D9
2013-04-24T20:44:21.312Z ERROR I SIS      Unable to create firewall manager: HRESULT = 0x800706D9
2013-04-24T20:44:21.312Z ERROR I SIS      Unable to add application to firewall policy.
2013-04-24T20:44:21.312Z DEBUG I SIS    Calling CoUninitialize
2013-04-24T20:44:21.312Z INFO  I SIS     
2013-04-24T20:44:21.312Z INFO  I SIS    Executing action ( 1682 ) - ShowRollbackMessage  currentPosition: 861202
2013-04-24T20:44:21.312Z INFO  I SIS      [ShowRollbackMessage] message = [Creating firewall application exceptions]
2013-04-24T20:44:21.313Z INFO  I SIS     
2013-04-24T20:44:21.313Z INFO  I SIS    Executing action ( 1683 ) - ShowInstallMessage  currentPosition: 861352
2013-04-24T20:44:21.313Z INFO  I SIS      [ShowInstallMessage] message = [Configuring features]
2013-04-24T20:44:21.313Z INFO  I SIS     
2013-04-24T20:44:21.313Z INFO  I SIS    Executing action ( 1684 ) - CreateRollbackItem  currentPosition: 861460
2013-04-24T20:44:21.314Z DEBUG I SIS      Committing transaction 0x0000002A:0x000004FC
2013-04-24T20:44:21.320Z DEBUG I SIS      Creating transaction.
2013-04-24T20:44:21.320Z DEBUG I SIS      Created transaction 0x0000002B:0x000004FC
2013-04-24T20:44:21.321Z INFO  I SIS     
2013-04-24T20:44:21.321Z INFO  I SIS    resume execution of script: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Scripts\installscript.sis
2013-04-24T20:44:21.321Z INFO  I SIS    currentPosition: 861946
2013-04-24T20:44:21.321Z INFO  I SIS     
2013-04-24T20:44:21.321Z INFO  I SIS    Executing action ( 1685 ) - RunCommand  currentPosition: 861946
2013-04-24T20:44:21.321Z INFO  I SIS      FilePath = ["C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\bin64\Sevntx64.exe"]
2013-04-24T20:44:21.321Z INFO  I SIS      Parameters = [/Q /NoRegLU /NoVDD /NOSPMANIFEST SAVCE]
2013-04-24T20:44:21.321Z INFO  I SIS      OnDefaultError = [pass]
2013-04-24T20:44:21.321Z INFO  I SIS      Hide = [false]
2013-04-24T20:44:21.321Z INFO  I SIS      Wait = [true]
2013-04-24T20:44:21.321Z INFO  I SIS      MSIFlag = [not specified]
2013-04-24T20:44:21.321Z INFO  I SIS      PowerFailRecovery = [not specified]
2013-04-24T20:44:21.321Z DEBUG I SIS      Committing transaction 0x0000002B:0x000004FC
2013-04-24T20:44:21.326Z DEBUG I SIS      Creating transaction.
2013-04-24T20:44:21.326Z DEBUG I SIS      Created transaction 0x0000002C:0x000004FC
2013-04-24T20:44:21.374Z INFO  I SIS     
2013-04-24T20:44:21.374Z INFO  I SIS    resume execution of script: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Scripts\installscript.sis
2013-04-24T20:44:21.374Z INFO  I SIS    currentPosition: 862322
2013-04-24T20:44:21.374Z INFO  I SIS     
2013-04-24T20:44:21.374Z INFO  I SIS    Executing action ( 1686 ) - ShowRollbackMessage  currentPosition: 862322
2013-04-24T20:44:21.374Z INFO  I SIS      [ShowRollbackMessage] message = [Configuring features]
2013-04-24T20:44:21.374Z INFO  I SIS     
2013-04-24T20:44:21.374Z INFO  I SIS    Executing action ( 1687 ) - ShowInstallMessage  currentPosition: 862432
2013-04-24T20:44:21.374Z INFO  I SIS      [ShowInstallMessage] message = [Starting services]
2013-04-24T20:44:21.375Z INFO  I SIS     
2013-04-24T20:44:21.375Z INFO  I SIS    Executing action ( 1688 ) - StartService  currentPosition: 862534
2013-04-24T20:44:21.375Z DEBUG I SIS      Committing transaction 0x0000002C:0x000004FC
2013-04-24T20:44:21.382Z DEBUG I SIS      Creating transaction.
2013-04-24T20:44:21.382Z DEBUG I SIS      Created transaction 0x0000002D:0x000004FC
2013-04-24T20:44:21.383Z DEBUG I SIS      Committing transaction 0x0000002D:0x000004FC
2013-04-24T20:44:21.385Z DEBUG I SIS      Creating transaction.
2013-04-24T20:44:21.385Z DEBUG I SIS      Created transaction 0x0000002E:0x000004FC
2013-04-24T20:44:21.394Z INFO  I SIS      [StartService] Service 'ccSettings_{FA0ED830-25A2-4721-AB37-26A5FF82EB30}' is running.
2013-04-24T20:44:21.395Z INFO  I SIS     
2013-04-24T20:44:21.395Z INFO  I SIS    resume execution of script: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Scripts\installscript.sis
2013-04-24T20:44:21.395Z INFO  I SIS    currentPosition: 862714
2013-04-24T20:44:21.395Z INFO  I SIS     
2013-04-24T20:44:21.395Z INFO  I SIS    Executing action ( 1689 ) - ShowRollbackMessage  currentPosition: 862714
2013-04-24T20:44:21.395Z INFO  I SIS      [ShowRollbackMessage] message = [Starting services]
2013-04-24T20:44:21.395Z INFO  I SIS     
2013-04-24T20:44:21.395Z INFO  I SIS    Executing action ( 1690 ) - ShowInstallMessage  currentPosition: 862992
2013-04-24T20:44:21.395Z INFO  I SIS      [ShowInstallMessage] message = [Stopping services]
2013-04-24T20:44:21.396Z INFO  I SIS     
2013-04-24T20:44:21.396Z INFO  I SIS    Executing action ( 1691 ) - ShowRollbackMessage  currentPosition: 863094
2013-04-24T20:44:21.396Z INFO  I SIS      [ShowRollbackMessage] message = [Stopping services]
2013-04-24T20:44:21.396Z INFO  I SIS     
2013-04-24T20:44:21.396Z INFO  I SIS    Executing action ( 1692 ) - ShowInstallMessage  currentPosition: 863198
2013-04-24T20:44:21.396Z INFO  I SIS      [ShowInstallMessage] message = [Copying files]
2013-04-24T20:44:21.397Z INFO  I SIS     
2013-04-24T20:44:21.397Z INFO  I SIS    Executing action ( 1693 ) - ShowRollbackMessage  currentPosition: 863292
2013-04-24T20:44:21.397Z INFO  I SIS      [ShowRollbackMessage] message = [Copying files]
2013-04-24T20:44:21.397Z INFO  I SIS     
2013-04-24T20:44:21.397Z INFO  I SIS    Executing action ( 1694 ) - ShowInstallMessage  currentPosition: 863388
2013-04-24T20:44:21.397Z INFO  I SIS      [ShowInstallMessage] message = [Creating hard links]
2013-04-24T20:44:21.398Z INFO  I SIS     
2013-04-24T20:44:21.398Z INFO  I SIS    Executing action ( 1695 ) - ShowRollbackMessage  currentPosition: 863494
2013-04-24T20:44:21.398Z INFO  I SIS      [ShowRollbackMessage] message = [Creating hard links]
2013-04-24T20:44:21.398Z INFO  I SIS     
2013-04-24T20:44:21.398Z INFO  I SIS    Executing action ( 1696 ) - ShowInstallMessage  currentPosition: 863602
2013-04-24T20:44:21.398Z INFO  I SIS      [ShowInstallMessage] message = [Installing services]
2013-04-24T20:44:21.399Z INFO  I SIS     
=====================

=====================

2013-04-24T20:44:22.335Z INFO  I SIS    Executing action ( 2455 ) - CreateRegistryValue  currentPosition: 1157226
2013-04-24T20:44:22.335Z INFO  I SIS      KEY_NAME=[CLSID\{26AFF61A-3282-4915-92C6-DCD3DB29BD5C}]
2013-04-24T20:44:22.335Z INFO  I SIS      VALUE_NAME=[]
2013-04-24T20:44:22.335Z DEBUG I SIS      VALUE_TYPE=[String]
2013-04-24T20:44:22.335Z DEBUG I SIS      VALUE_DATA=[PSFactoryBuffer]
2013-04-24T20:44:22.335Z INFO  I SIS     
2013-04-24T20:44:22.335Z INFO  I SIS    Executing action ( 2456 ) - CreateRegistryValue  currentPosition: 1157570
2013-04-24T20:44:22.336Z INFO  I SIS      KEY_NAME=[CLSID\{26AFF61A-3282-4915-92C6-DCD3DB29BD5C}\InprocServer32]
2013-04-24T20:44:22.336Z INFO  I SIS      VALUE_NAME=[ThreadingModel]
2013-04-24T20:44:22.336Z DEBUG I SIS      VALUE_TYPE=[String]
2013-04-24T20:44:22.336Z DEBUG I SIS      VALUE_DATA=[Both]
2013-04-24T20:44:22.336Z INFO  I SIS     
2013-04-24T20:44:22.336Z INFO  I SIS    Executing action ( 2457 ) - CreateRegistryValue  currentPosition: 1157946
2013-04-24T20:44:22.337Z INFO  I SIS      KEY_NAME=[SOFTWARE\Symantec\Symantec Endpoint Protection\AV]
2013-04-24T20:44:22.337Z INFO  I SIS      VALUE_NAME=[ProductMoniker]
2013-04-24T20:44:22.337Z DEBUG I SIS      VALUE_TYPE=[String]
2013-04-24T20:44:22.337Z DEBUG I SIS      VALUE_DATA=[#21E79F34-246B-4363-BC73-3C0C7BF70C33TODO#]
2013-04-24T20:44:22.337Z INFO  I SIS     
2013-04-24T20:44:22.337Z INFO  I SIS    Executing action ( 2458 ) - CreateRegistryValue  currentPosition: 1158368
2013-04-24T20:44:22.337Z INFO  I SIS      KEY_NAME=[SOFTWARE\Microsoft\Windows Defender]
2013-04-24T20:44:22.337Z INFO  I SIS      VALUE_NAME=[DisableAntiSpyware]
2013-04-24T20:44:22.337Z DEBUG I SIS      VALUE_TYPE=[DWORD]
2013-04-24T20:44:22.337Z DEBUG I SIS      VALUE_DATA=[1]
2013-04-24T20:44:22.339Z INFO  I SIS     
2013-04-24T20:44:22.339Z INFO  I SIS    Executing action ( 2459 ) - CreateRegistryValue  currentPosition: 1158696
2013-04-24T20:44:22.339Z INFO  I SIS      KEY_NAME=[SOFTWARE\Microsoft\Windows Defender\Scan]
2013-04-24T20:44:22.339Z INFO  I SIS      VALUE_NAME=[ScheduleDay]
2013-04-24T20:44:22.339Z DEBUG I SIS      VALUE_TYPE=[DWORD]
2013-04-24T20:44:22.339Z DEBUG I SIS      VALUE_DATA=[8]
2013-04-24T20:44:22.339Z INFO  I SIS     
2013-04-24T20:44:22.339Z INFO  I SIS    Executing action ( 2460 ) - CreateRegistryValue  currentPosition: 1159020
2013-04-24T20:44:22.340Z INFO  I SIS      KEY_NAME=[SOFTWARE\Microsoft\Windows Defender\Real-Time Protection]
2013-04-24T20:44:22.340Z INFO  I SIS      VALUE_NAME=[DisableAntiSpywareRealtimeProtection]
2013-04-24T20:44:22.340Z DEBUG I SIS      VALUE_TYPE=[DWORD]
2013-04-24T20:44:22.340Z DEBUG I SIS      VALUE_DATA=[1]
2013-04-24T20:44:22.340Z INFO  I SIS     
2013-04-24T20:44:22.340Z INFO  I SIS    Executing action ( 2461 ) - CreateRegistryValue  currentPosition: 1159426
2013-04-24T20:44:22.341Z INFO  I SIS      KEY_NAME=[SYSTEM\CurrentControlSet\services\WinDefend]
2013-04-24T20:44:22.341Z INFO  I SIS      VALUE_NAME=[Start]
2013-04-24T20:44:22.341Z DEBUG I SIS      VALUE_TYPE=[DWORD]
2013-04-24T20:44:22.341Z DEBUG I SIS      VALUE_DATA=[4]
2013-04-24T20:44:22.343Z ERROR I SIS      ZwSetValueKey() failed in thal::RegistryWriteValue()   status: 0xC0000022 = {Access Denied}  A process has requested access to an object, but has not been granted those access rights.  
2013-04-24T20:44:22.343Z ERROR I SIS      RegistryWriteValue() failed. 0xC0000022 = {Access Denied}  A process has requested access to an object, but has not been granted those access rights.  
2013-04-24T20:44:22.343Z ERROR I SIS         
2013-04-24T20:44:22.343Z ERROR I SIS        Dumping action parameters from the script:
2013-04-24T20:44:22.343Z ERROR I SIS          ValueType=[dword]
2013-04-24T20:44:22.343Z ERROR I SIS          ValueData=[4]
2013-04-24T20:44:22.343Z ERROR I SIS          ValueName=[Start]
2013-04-24T20:44:22.343Z ERROR I SIS          Exists=[Overwrite]
2013-04-24T20:44:22.343Z ERROR I SIS          WOW64=[Default]
2013-04-24T20:44:22.343Z ERROR I SIS          Key=[HKLM\SYSTEM\CurrentControlSet\services\WinDefend]
2013-04-24T20:44:22.343Z INFO  I SIS        ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:22.343Z INFO  I SIS    ExecuteScript() returning ACTION_FAILED_WITH_ROLLBACK
2013-04-24T20:44:22.343Z INFO  I SIS   
2013-04-24T20:44:22.343Z INFO  I SIS  script completed with status: ACTION_FAILED_WITH_ROLLBACK
2013-04-24T20:44:22.343Z DEBUG I SIS  Rolling back transaction 0x00000034:0x000004FC
2013-04-24T20:44:22.395Z DEBUG I SIS  Creating transaction.
2013-04-24T20:44:22.395Z DEBUG I SIS  Created transaction 0x00000035:0x000004FC
2013-04-24T20:44:22.396Z DEBUG r SIS  Committing transaction 0x00000035:0x000004FC
2013-04-24T20:44:22.424Z DEBUG r SIS  Creating transaction.
2013-04-24T20:44:22.424Z DEBUG r SIS  Created transaction 0x00000036:0x000004FC
2013-04-24T20:44:22.424Z INFO  r SIS  TransitionToEnteringRollbackScript() - success
2013-04-24T20:44:22.424Z INFO  r SIS     
2013-04-24T20:44:22.425Z INFO  r SIS    starting execution of script: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Scripts\startrollback.sis
2013-04-24T20:44:22.425Z INFO  r SIS     
2013-04-24T20:44:22.425Z INFO  r SIS    Executing action ( 2462 ) - ShowInstallMessage  currentPosition: 2
2013-04-24T20:44:22.425Z INFO  r SIS      [ShowInstallMessage] message = [Rolling back install]
2013-04-24T20:44:22.425Z INFO  r SIS     
2013-04-24T20:44:22.425Z INFO  r SIS    Executing action ( 2463 ) - RunCommand  currentPosition: 376
2013-04-24T20:44:22.426Z INFO  r SIS      FilePath = ["%SISDIR%setiCollect.exe"]
2013-04-24T20:44:22.426Z INFO  r SIS      Parameters = [--database-name %TEMPDIR%database.db]
2013-04-24T20:44:22.426Z INFO  r SIS      OnDefaultError = [pass]
2013-04-24T20:44:22.426Z INFO  r SIS      Hide = [true]
2013-04-24T20:44:22.426Z INFO  r SIS      Wait = [true]
2013-04-24T20:44:22.426Z INFO  r SIS      MSIFlag = [not specified]
2013-04-24T20:44:22.426Z INFO  r SIS      PowerFailRecovery = [not specified]
2013-04-24T20:44:22.426Z DEBUG r SIS      Committing transaction 0x00000036:0x000004FC
2013-04-24T20:44:22.431Z DEBUG r SIS      Creating transaction.
2013-04-24T20:44:22.431Z DEBUG r SIS      Created transaction 0x00000037:0x000004FC
2013-04-24T20:44:43.619Z INFO  r SIS     
2013-04-24T20:44:43.619Z INFO  r SIS    resume execution of script: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Scripts\startrollback.sis
2013-04-24T20:44:43.619Z INFO  r SIS    currentPosition: 684
2013-04-24T20:44:43.619Z INFO  r SIS    ExecuteScript Commit the transactions
2013-04-24T20:44:43.620Z DEBUG r SIS    Committing transaction 0x00000037:0x000004FC
2013-04-24T20:44:43.667Z DEBUG r SIS    Creating transaction.
2013-04-24T20:44:43.667Z DEBUG r SIS    Created transaction 0x00000038:0x000004FC
2013-04-24T20:44:43.667Z INFO  r SIS    ExecuteScript() returning ACTION_COMPLETED_SUCCESSFULLY
2013-04-24T20:44:43.667Z INFO  r SIS   
2013-04-24T20:44:43.667Z INFO  r SIS  script completed with status: ACTION_COMPLETED_SUCCESSFULLY

2013-04-24T20:44:43.668Z DEBUG R SIS  Committing transaction 0x00000038:0x000004FC
2013-04-24T20:44:43.674Z DEBUG R SIS  Creating transaction.
2013-04-24T20:44:43.674Z DEBUG R SIS  Created transaction 0x00000039:0x000004FC
2013-04-24T20:44:43.674Z INFO  R SIS  TransitionFromEnteringRollbackScript() - success
2013-04-24T20:44:43.674Z INFO  R SIS     
2013-04-24T20:44:43.674Z INFO  R SIS    starting execution of script: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Scripts\rollback.rbs
2013-04-24T20:44:43.675Z INFO  R SIS     
2013-04-24T20:44:43.675Z INFO  R SIS    Executing action ( 2464 ) - CopyFile  currentPosition: 276816
2013-04-24T20:44:43.675Z INFO  R SIS      CopyFile Action - C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\TransactedTemp\Folder1\file2 -> C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Symantec Endpoint Protection\Symantec Endpoint Protection Help.lnk : A
2013-04-24T20:44:43.676Z INFO  R SIS        CopyFile: target is a file.
2013-04-24T20:44:43.679Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.679Z INFO  R SIS     
2013-04-24T20:44:43.679Z INFO  R SIS    Executing action ( 2465 ) - DeleteFile  currentPosition: 276228
2013-04-24T20:44:43.681Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.681Z INFO  R SIS     
2013-04-24T20:44:43.681Z INFO  R SIS    Executing action ( 2466 ) - ShowInstallMessage  currentPosition: 275806
2013-04-24T20:44:43.681Z INFO  R SIS      [ShowInstallMessage] message = [Installing services]
2013-04-24T20:44:43.682Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.682Z INFO  R SIS     
2013-04-24T20:44:43.683Z INFO  R SIS    Executing action ( 2467 ) - DeleteService  currentPosition: 275654
2013-04-24T20:44:43.683Z DEBUG R SIS      Committing transaction 0x00000039:0x000004FC
2013-04-24T20:44:43.694Z DEBUG R SIS      Creating transaction.
2013-04-24T20:44:43.694Z DEBUG R SIS      Created transaction 0x0000003A:0x000004FC
2013-04-24T20:44:43.695Z INFO  R SIS      [StopService] Service 'SmcService' is already stopped (rollback not required).
2013-04-24T20:44:43.695Z DEBUG R SIS      Committing transaction 0x0000003A:0x000004FC
2013-04-24T20:44:43.695Z DEBUG R SIS      Creating transaction.
2013-04-24T20:44:43.695Z DEBUG R SIS      Created transaction 0x0000003B:0x000004FC
2013-04-24T20:44:43.696Z INFO  R SIS      [DeleteServiceInternal] Deleted service 'SmcService'.
2013-04-24T20:44:43.697Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.697Z INFO  R SIS     
2013-04-24T20:44:43.697Z INFO  R SIS    resume execution of script: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Scripts\rollback.rbs
2013-04-24T20:44:43.698Z INFO  R SIS    currentPosition: 275514
2013-04-24T20:44:43.698Z INFO  R SIS     
2013-04-24T20:44:43.698Z INFO  R SIS    Executing action ( 2468 ) - DeleteService  currentPosition: 275514
2013-04-24T20:44:43.698Z DEBUG R SIS      Committing transaction 0x0000003B:0x000004FC
2013-04-24T20:44:43.710Z DEBUG R SIS      Creating transaction.
2013-04-24T20:44:43.710Z DEBUG R SIS      Created transaction 0x0000003C:0x000004FC
2013-04-24T20:44:43.711Z INFO  R SIS      [StopService] Service 'SNAC' is already stopped (rollback not required).
2013-04-24T20:44:43.711Z DEBUG R SIS      Committing transaction 0x0000003C:0x000004FC
2013-04-24T20:44:43.711Z DEBUG R SIS      Creating transaction.
2013-04-24T20:44:43.711Z DEBUG R SIS      Created transaction 0x0000003D:0x000004FC
2013-04-24T20:44:43.711Z INFO  R SIS      [DeleteServiceInternal] Deleted service 'SNAC'.
2013-04-24T20:44:43.712Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.712Z INFO  R SIS     
2013-04-24T20:44:43.712Z INFO  R SIS    resume execution of script: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Scripts\rollback.rbs
2013-04-24T20:44:43.712Z INFO  R SIS    currentPosition: 275386
2013-04-24T20:44:43.712Z INFO  R SIS     
2013-04-24T20:44:43.712Z INFO  R SIS    Executing action ( 2469 ) - ShowInstallMessage  currentPosition: 275386
2013-04-24T20:44:43.712Z INFO  R SIS      [ShowInstallMessage] message = [Creating hard links]
2013-04-24T20:44:43.713Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.713Z INFO  R SIS     
2013-04-24T20:44:43.713Z INFO  R SIS    Executing action ( 2470 ) - ShowInstallMessage  currentPosition: 275234
2013-04-24T20:44:43.713Z INFO  R SIS      [ShowInstallMessage] message = [Copying files]
2013-04-24T20:44:43.714Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.714Z INFO  R SIS     
2013-04-24T20:44:43.714Z INFO  R SIS    Executing action ( 2471 ) - ShowInstallMessage  currentPosition: 275094
2013-04-24T20:44:43.714Z INFO  R SIS      [ShowInstallMessage] message = [Stopping services]
2013-04-24T20:44:43.717Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.718Z INFO  R SIS     
2013-04-24T20:44:43.718Z INFO  R SIS    Executing action ( 2472 ) - ShowInstallMessage  currentPosition: 274946
2013-04-24T20:44:43.718Z INFO  R SIS      [ShowInstallMessage] message = [Starting services]
2013-04-24T20:44:43.720Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.720Z INFO  R SIS     
2013-04-24T20:44:43.720Z INFO  R SIS    Executing action ( 2473 ) - StopService  currentPosition: 274798
2013-04-24T20:44:43.721Z DEBUG R SIS      Committing transaction 0x0000003D:0x000004FC
2013-04-24T20:44:43.731Z DEBUG R SIS      Creating transaction.
2013-04-24T20:44:43.731Z DEBUG R SIS      Created transaction 0x0000003E:0x000004FC
2013-04-24T20:44:43.732Z WARN  R SIS      [StopService] ControlService(SERVICE_CONTROL_STOP) failed for service 'ccSettings_{FA0ED830-25A2-4721-AB37-26A5FF82EB30}' with error ERROR_INVALID_SERVICE_CONTROL.
2013-04-24T20:44:43.732Z WARN  R SIS      [StopService] Returning ACTION_COMPLETED_SUCCESSFULLY.
2013-04-24T20:44:43.733Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.733Z INFO  R SIS     
2013-04-24T20:44:43.733Z INFO  R SIS    resume execution of script: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Scripts\rollback.rbs
2013-04-24T20:44:43.733Z INFO  R SIS    currentPosition: 274524
2013-04-24T20:44:43.733Z INFO  R SIS     
2013-04-24T20:44:43.733Z INFO  R SIS    Executing action ( 2474 ) - ShowInstallMessage  currentPosition: 274524
2013-04-24T20:44:43.733Z INFO  R SIS      [ShowInstallMessage] message = [Configuring features]
2013-04-24T20:44:43.734Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.734Z INFO  R SIS     
2013-04-24T20:44:43.734Z INFO  R SIS    Executing action ( 2475 ) - RunCommand  currentPosition: 274370
2013-04-24T20:44:43.734Z INFO  R SIS      FilePath = ["C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\bin64\Sevntx64.exe"]
2013-04-24T20:44:43.734Z INFO  R SIS      Parameters = [/Q /U /NOREGAPPID /NoRegLU /NoVDD /DelOnReboot SAVCE]
2013-04-24T20:44:43.734Z INFO  R SIS      OnDefaultError = [pass]
2013-04-24T20:44:43.734Z INFO  R SIS      Hide = [false]
2013-04-24T20:44:43.734Z INFO  R SIS      Wait = [true]
2013-04-24T20:44:43.734Z INFO  R SIS      MSIFlag = [not specified]
2013-04-24T20:44:43.735Z INFO  R SIS      PowerFailRecovery = [not specified]
2013-04-24T20:44:43.735Z DEBUG R SIS      Committing transaction 0x0000003E:0x000004FC
2013-04-24T20:44:43.741Z DEBUG R SIS      Creating transaction.
2013-04-24T20:44:43.741Z DEBUG R SIS      Created transaction 0x0000003F:0x000004FC
2013-04-24T20:44:43.766Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.766Z INFO  R SIS     
2013-04-24T20:44:43.767Z INFO  R SIS    resume execution of script: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.2100.2093.105\Scripts\rollback.rbs
2013-04-24T20:44:43.767Z INFO  R SIS    currentPosition: 273920
2013-04-24T20:44:43.767Z INFO  R SIS     
2013-04-24T20:44:43.767Z INFO  R SIS    Executing action ( 2476 ) - ShowInstallMessage  currentPosition: 273920
2013-04-24T20:44:43.767Z INFO  R SIS      [ShowInstallMessage] message = [Creating firewall application exceptions]
2013-04-24T20:44:43.767Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.767Z INFO  R SIS     
2013-04-24T20:44:43.767Z INFO  R SIS    Executing action ( 2477 ) - ShowInstallMessage  currentPosition: 273726
2013-04-24T20:44:43.767Z INFO  R SIS      [ShowInstallMessage] message = [Installing content]
2013-04-24T20:44:43.768Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.768Z INFO  R SIS     
2013-04-24T20:44:43.768Z INFO  R SIS    Executing action ( 2478 ) - DeleteFolder  currentPosition: 273576
2013-04-24T20:44:43.781Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.781Z INFO  R SIS     
2013-04-24T20:44:43.781Z INFO  R SIS    Executing action ( 2479 ) - DeleteFolder  currentPosition: 273236
2013-04-24T20:44:43.795Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.795Z INFO  R SIS     
2013-04-24T20:44:43.795Z INFO  R SIS    Executing action ( 2480 ) - ShowInstallMessage  currentPosition: 272894
2013-04-24T20:44:43.795Z INFO  R SIS      [ShowInstallMessage] message = [Committing settings store]
2013-04-24T20:44:43.795Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.796Z INFO  R SIS     
2013-04-24T20:44:43.796Z INFO  R SIS    Executing action ( 2481 ) - DeleteFile  currentPosition: 272730
2013-04-24T20:44:43.796Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.796Z INFO  R SIS     
2013-04-24T20:44:43.796Z INFO  R SIS    Executing action ( 2482 ) - DeleteFile  currentPosition: 272342
2013-04-24T20:44:43.797Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.797Z INFO  R SIS     
2013-04-24T20:44:43.797Z INFO  R SIS    Executing action ( 2483 ) - DeleteFile  currentPosition: 271884
2013-04-24T20:44:43.798Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.798Z INFO  R SIS     
2013-04-24T20:44:43.798Z INFO  R SIS    Executing action ( 2484 ) - DeleteFile  currentPosition: 271426
2013-04-24T20:44:43.799Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.799Z INFO  R SIS     
2013-04-24T20:44:43.799Z INFO  R SIS    Executing action ( 2485 ) - DeleteFile  currentPosition: 270968
2013-04-24T20:44:43.799Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.799Z INFO  R SIS     
2013-04-24T20:44:43.799Z INFO  R SIS    Executing action ( 2486 ) - DeleteFile  currentPosition: 270510
2013-04-24T20:44:43.800Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.800Z INFO  R SIS     
2013-04-24T20:44:43.800Z INFO  R SIS    Executing action ( 2487 ) - DeleteFile  currentPosition: 270052
2013-04-24T20:44:43.801Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.801Z INFO  R SIS     
2013-04-24T20:44:43.801Z INFO  R SIS    Executing action ( 2488 ) - DeleteFile  currentPosition: 269534
2013-04-24T20:44:43.801Z INFO  R SIS      ExecuteScript() - Successfully set failure event.
2013-04-24T20:44:43.802Z INFO  R SIS     

================

It seems to me that it is related to windows defender, but the Service Windows defender is Disabled!

I checked the registry for the permissions fo the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDefend and Administrators have full control, inherited. It already contains a dword entry called <<Start>> with value <<4>>. I don't understand why installer doesn't have access!

Regards,

Iulian

It seems that SEP and MS Defender and even Security Essentials don't play well for some reason. You may want to call support so they can investigate deeper.

Hi Ambesh,

Checked your second suggestion,

MainEngineThread is returning 1603 when uninstalling SEP 12.1 RU1 on Windows 7 and Windows XP machines 32 bit.

http://www.symantec.com/docs/TECH185779

It seems there there is a problem with a driver and SEP in not uninstalling, so I think it is not my case.

==========

Checked your third suggestion,

SEPM installation rolls back.

http://www.symantec.com/docs/TECH104408

it seems it is related to SEP Manager 11 on win xp, 2003 and 2000 and not SEP 12 client on win7 SP1 64bit.

===============

Your fourth suggestion is related to pending system operations that I already checked before opening the thread

==============

Checking the steps suggested:

step 1 and 2.  There is no PendingFileRenameOperations value in the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\ nor in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet001\Control\Session Manager key

Step 3. UAC is already disabled.

step4. originally it was a clean installation, but now after more than 30 attempts it seems a cleaning would be required. In order to get cleanwipe, I have to open a CASE with Symantec.

I will try a manual uninstallation of SEP , and after that a new instal.

I will keep you updated.

Thank you for the advices, I will let you know if they worked.

Regards,

Iulian

For the moment, calling is not an option for me.

Shall I open a case or just going with manual uninstallation and try a new install ?

Regards,

Iulian

Hi Sameer,

I think that the version that I tried to install, 12.1.2100.2093.105 is the latest. Correct?

Hi Rafeeq,

This is related to the installation from SEPM, and is not my case. I try a local install.

Regards,

Iulian

You can try a manual uninstall but I think there is some conflict between the two. Approaching Symantec to look at this would be the better option.

I tried a manual uninstall as in

http://www.symantec.com/business/support/index?page=content&id=TECH161956

but when I arrived at step 8, I've quit.

I will try a reboot and a new install.

Iulian

Hi there,

It finally worked!!!  How?

1.  Performed all the steps suggested by Ambesh above (including disabling of UAC, Windows firewall service, windows defender service, windows security essentials)

2. Manual uninstal all Symantec related products as in

http://www.symantec.com/business/support/index?page=content&id=TECH161956

(until step 8 'cause I didn't have the patience to search all those keys manually and also didn't have the time to make a script to use it with regedit)

3. Manual delete all related to Symantec from Porgram files, Program Data

4. Manual delete all files from C:\Users\<<username>>\AppData\Local\Temp

5. manual delete all related to Symantec from Start Menu

6. Install the 64 bit client (right click and run as administrator)

7. Custom installation with uncheck everything,and maintain only Antivirus

8. Uncheck "disable windows defender" - i think this was the most valuable decision since in the previous log it tried to put the value 4 in the registry and in was already disabled and it seemed it didn't like it.

9. Installation completed successfully!

(I tried to make a summarry in order for the others to benefit from my struggles)

So, Thank you all guys for your advices and your help.

Best regards to all,

Iulian

Hi Brian,

It worked. I've described the solution in another post.

Thank you!

Regards,

Iulian