are your OS vista ,server2003 or Windows 7?
if is it try this please
Open regedit and navigate to HKLM\SYSTEM\CurrentControlSet\Control\SessionManager\
and delete pendinfilerenameoperations.
Thanks.
Fatih.

Try to clear temp folders (user temp as well as system temp) and try to install. After that also if you are facing problem you have to use cleanwipe(This tool you can get it from symantec support team) for complete removal and try to install again.

LUCA: InstallLiveUpdate enter.
LUCA: C:\Users\RAC\AppData\Local\Temp\KFAUSNHL\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
Action ended 0:14:38: InstallFinalize. Return value 3.

Installation of Symantec Endpoint Protection Client rolls back with error LUCHECK.EXE returned 206

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009072709544048

the problem is with liveupdate.

-----------
C:\Windows\Installer\MSI76E4.tmp, Entrypoint: InstallLiveUpdate
LUCA: InstallLiveUpdate enter.
LUCA: C:\Users\RAC\AppData\Local\Temp\KFAUSNHL\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
Action ended 0:14:38: InstallFinalize. Return value 3.
--------

• Uninstall LiveUpdate via Add or Remove Programs
• Delete the following folders:
  • \Documents and Settings\All Users\Application Data\Symantec\LiveUpdate
  • \Program Files\Symantec\LiveUpdate
• Install the Symantec Endpoint Protection
  open your setup.
  Install liveupate first ( LUsetup.exe)
  then install the symantec endpoint protection.
  even if this rolls back.
  post the new log file.
   

if this works well and good else

4. Click Start > Run, type smc -start, and click OK

Question/Issue:
You install Symantec Endpoint Protection on a computer that had Symantec products installed on it previously. The installation rolls back.

Solution:

LiveUpdate may have been uninstalled while other Symantec products were still installed. To determine whether this is the problem, check the installation log.

To check the installation log

1. Click Start > Run
2. Type %temp% and click OK.
3. Open the file "SEP_INST.LOG" in a text editor, and look for the following text:
   -- DECABI_LOGGING -- Enter LURegisterDecomposerABI()
   -- DECABI_LOGGING -- LiveUpdate registration failed. (HRESULT=-2147221164)

If those entries exist, remove any leftover Symantec program files and then install Symantec Endpoint Protection.

Note: This procedure removes any Symantec applications that are currently installed. You must reinstall any Symantec applications that you wish to continue to use.

To remove leftover Symantec program files

1. Delete the following folders (if they exist):
   C:\Program Files\Symantec
   C:\Program Files\Symantec Antivirus
   C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate
2. Install LiveUpdate by running the following file from CD1:
   \SEP\LUSETUP.EXE
   NOTE: Do not install LiveUpdate version 3.4 or newer (available from Symantec's FTP site). As of this writing, LiveUpdate 3.3 is the only version supported with enterprise products.
3. Install Symantec Endpoint Protection.

Warm regards,

Sumit Bose

HI,

There will be several reasons for the SEP Roll back issue. I had come across several times this issue and I was able to fix them.

Try the below steps.

1.Run Cleanwipe tool.
2. Delete the below mentioned folders.
C:\Program Files\Symantec
 C:\Program Files\Symantec Antivirus
 C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate
Go to Run type %temp% and delete all files on this location.
3. Make sure you have enough free space on C drive.
4. Alwas Install with the Admin rights.
5. Restart the computer.
6. Install SEP.

I tried all of these procedure but no help. any other procedure on how to resolve this, the worst case here is to format the harddrive which is I usually done when I encountered this problem

Still receiving rollbacks, and when Symantec does roll back it uninstalls LU with it, new log file:

Action 9:45:54: irbDeleteFiles.6500F9C2_37EA_4F25_A4DE_6211026D9C01.
MSI (s) (5C:E8) [09:45:54:603]: Executing op: CustomActionSchedule(Action=irbDeleteFiles.6500F9C2_37EA_4F25_A4DE_6211026D9C01,ActionType=3329,Source=BinaryData,Target=_InstallRollbackDeleteFiles@4,)
MSI (s) (5C:E8) [09:45:54:604]: Executing op: ActionStart(Name=StopCcSetMgrOnOverOrBrokenInstall_R.D3A883B9_8F94_4E7D_96B6_852388CE5647,,)
Action 9:45:54: StopCcSetMgrOnOverOrBrokenInstall_R.D3A883B9_8F94_4E7D_96B6_852388CE5647.
MSI (s) (5C:E8) [09:45:54:608]: Executing op: CustomActionSchedule(Action=StopCcSetMgrOnOverOrBrokenInstall_R.D3A883B9_8F94_4E7D_96B6_852388CE5647,ActionType=1281,Source=BinaryData,Target=_StopCcSetMgrOnOverOrBrokenInstall_Rol@4,)
MSI (s) (5C:E8) [09:45:54:613]: Executing op: ActionStart(Name=StopCcSetMgrOnOverOrBrokenInstall.D3A883B9_8F94_4E7D_96B6_852388CE5647,,)
Action 9:45:54: StopCcSetMgrOnOverOrBrokenInstall.D3A883B9_8F94_4E7D_96B6_852388CE5647.
MSI (s) (5C:E8) [09:45:54:616]: Executing op: CustomActionSchedule(Action=StopCcSetMgrOnOverOrBrokenInstall.D3A883B9_8F94_4E7D_96B6_852388CE5647,ActionType=1025,Source=BinaryData,Target=_StopCcSetMgrOnOverOrBrokenInstall@4,)
MSI (s) (5C:BC) [09:45:54:628]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIDF5.tmp, Entrypoint: _StopCcSetMgrOnOverOrBrokenInstall@4
2009-09-17-09-45-54-639 : ccLib::CRegistry::Open(101) : RegOpenKeyEx() != ERROR_SUCCESS, Software\Symantec\InstalledApps, 0x00000002

MSIASSERT - 2009-09-17-09-45-54-640 : CInstalledApps::GetInstAppsDirectory() : reg.Open() == FALSE
:
MSIASSERT - 2009-09-17-09-45-54-641 : CInstalledApps::GetCCDirectory() : GetInstAppsDirectory() == false
:
2009-09-17-09-45-54-642 : CInstalledApps::GetSymSharedDirectory() : "C:\Program Files\Common Files\Symantec Shared"

2009-09-17-09-45-54-642 : CInstalledApps::GetCCDirectory() : "C:\Program Files\Common Files\Symantec Shared"

MSIASSERT - 2009-09-17-09-45-54-644 : cc::StopServiceAndDepAtAnyCost(366) : Unable to openService ccSetMgr. Error=1060:
MSIASSERT - StopCcSetMgrOnOverOrBrokenInstall: Unable to stop ccSetMgr:
MSI (s) (5C:E8) [09:45:54:653]: Executing op: ActionStart(Name=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,,)
Action 9:45:54: InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644.
MSI (s) (5C:E8) [09:45:54:655]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3329,Source=BinaryData,Target=UnInstallLiveUpdate,CustomActionData=C:\Users\RAC\AppData\Local\Temp\VEDZKYHO\LiveUpdate\lucheck.exe)
MSI (s) (5C:E8) [09:45:54:657]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)
Action 9:45:54: InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644.
MSI (s) (5C:E8) [09:45:54:659]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3073,Source=BinaryData,Target=InstallLiveUpdate,CustomActionData=C:\Users\RAC\AppData\Local\Temp\VEDZKYHO\LiveUpdate\lucheck.exe)
MSI (s) (5C:C8) [09:45:54:667]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIE24.tmp, Entrypoint: InstallLiveUpdate
LUCA: InstallLiveUpdate enter.
LUCA: C:\Users\RAC\AppData\Local\Temp\VEDZKYHO\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 100
Action ended 9:46:00: InstallFinalize. Return value 3.
MSI (s) (5C:E8) [09:46:00:613]: User policy value 'DisableRollback' is 0
MSI (s) (5C:E8) [09:46:00:613]: Machine policy value 'DisableRollback' is 0
MSI (s) (5C:E8) [09:46:00:633]: Executing op: Header(Signature=1397708873,Version=405,Timestamp=993086899,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (5C:E8) [09:46:00:633]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (5C:E8) [09:46:00:634]: Executing op: DialogInfo(Type=1,Argument=Symantec Endpoint Protection)
MSI (s) (5C:E8) [09:46:00:635]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
Action 9:46:00: Rollback. Rolling back action:
Rollback: InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644
MSI (s) (5C:E8) [09:46:00:639]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)
MSI (s) (5C:E8) [09:46:00:639]: Executing op: ProductInfo(ProductKey={D689B418-235A-4290-A0A5-A75E490E0351},ProductName=Symantec Endpoint Protection,PackageName=Symantec AntiVirus.msi,Language=1033,Version=184553578,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={8E81776A-E189-42D6-ADB7-7DC8AA55E09F},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
Rollback: InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644
MSI (s) (5C:E8) [09:46:00:640]: Executing op: ActionStart(Name=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,,)
MSI (s) (5C:E8) [09:46:00:642]: Executing op: CustomActionRollback(Action=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3329,Source=BinaryData,Target=UnInstallLiveUpdate,CustomActionData=C:\Users\RAC\AppData\Local\Temp\VEDZKYHO\LiveUpdate\lucheck.exe)
MSI (s) (5C:28) [09:46:00:649]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI258C.tmp, Entrypoint: UnInstallLiveUpdate
LUCA: UnInstallLiveUpdate enter.
LUCA: C:\Users\RAC\AppData\Local\Temp\VEDZKYHO\LiveUpdate\lucheck.exe
LUCA: UnInstallLiveUpdate exit.
Rollback: StopCcSetMgrOnOverOrBrokenInstall.D3A883B9_8F94_4E7D_96B6_852388CE5647
 

LUCA: C:\Users\RAC\AppData\Local\Temp\VEDZKYHO\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 100
Action ended 9:46:00: InstallFinalize. Return value 3.

1) shut down the Windows Installer service and then re-register it. This makes sure that the Windows Installer engine functions properly.

To do this, follow these steps: Click Start, and then click Run.

In the Open box, type msiexec /unreg, and then click OK

When this process is complete, click Start, and then click Run.

In the Open box, type msiexec /regserver, and then click OK.

2) The DCOM is probably not having proper permissions..

Start>> Run>> dcomcnfg>> expan component services >> Expand computers >> Rigght click Mycomputer and go to Properties

Now in the Properties windows click on Default Properties tab and make sure the Default Impersonation level is set to Identity.
Also Click on the comp security tab on the properties window and click on edit default buton under Access Permissions.

Make sure Adminstrators, Interactive and System has Full Control..

After doing this settings reboot the machien and then try installing SEP once again

We need to check the DCOM settings uing

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002103013521548 ( Only check the DCOM part)

Check these two

http://news.support.veritas.com/connect/forums/sep-client-fails-install-due-liveupdate-install-failure#comment-2489421

Install of SEP and SEP Manager both fails - checking permissions with Microsoft PFE - gives error relating to temp directories and advpack.dll

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/76536fbaeace96cb80257507003db395?OpenDocument

 No good guys, still getting a rollback. I've made sure the DCOM had the correct permissions, changed the temp folder environment variables, tried installing LU first, have administrator rights and everything, still not working, I'm on Vista btw(which I've never had problems with Symantec using XP, Vista is giving me a huge headache). Here's another log(just gonna post the last few lines above return value 3):

MSIASSERT - 2009-09-17-11-02-24-172 : cc::StopServiceAndDepAtAnyCost(366) : Unable to openService ccSetMgr. Error=1060: 
MSIASSERT - StopCcSetMgrOnOverOrBrokenInstall: Unable to stop ccSetMgr: 
MSI (s) (0C:D4) [11:02:24:172]: Executing op: ActionStart(Name=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,,)
Action 11:02:24: InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644. 
MSI (s) (0C:D4) [11:02:24:172]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3329,Source=BinaryData,Target=UnInstallLiveUpdate,CustomActionData=c:\Temp\UWMULOLV\LiveUpdate\lucheck.exe)
MSI (s) (0C:D4) [11:02:24:172]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)
Action 11:02:24: InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644. 
MSI (s) (0C:D4) [11:02:24:172]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3073,Source=BinaryData,Target=InstallLiveUpdate,CustomActionData=c:\Temp\UWMULOLV\LiveUpdate\lucheck.exe)
MSI (s) (0C:CC) [11:02:24:188]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF0A6.tmp, Entrypoint: InstallLiveUpdate
LUCA: InstallLiveUpdate enter.
LUCA: c:\Temp\UWMULOLV\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
Action ended 11:02:48: InstallFinalize. Return value 3.

Disable UAC and then try installing it again

Greetings Metsudragon,

There are a few things to note here, the biggest being that this issue should be resolved with the latest version of SEP: version 11.0.4202.x (MR4 MP2). Please go to https://fileconnect.symantec.com and get CD1 of this version and try installing if you are using an older version.

If you have this version and continue to get this error, then you will need to remove Symantec from the machine and reinstall. The previous posts suggest the C:\Documents and Settings\... folder though this does not exists on Vista.

Check for and remove the following:

C:\ProgramData\Symantec\LiveUpdate
C:\Program Files\Symantec\Symantec Endpoint Protection
C:\Program Files\Common Files\Symantec Shared

After doing this and IF YOU DO NOT HAVE ANY OTHER SYMANTEC PRODUCTS INSTALLED you can remove it from the registry:

-Click Start > Run
-Type Regedit and click OK
-Delete: Hkey_Local_Machine\Software\Symantec
-Delete Hkey_Curent_User\Software\Symantec

At this point this install should progress without issue.

Thanks for the message John, the problem with the first suggestion being that i don't have a serial number for it, as this is a copy provided and required directly by my school(Being Symantec_Endpoint 32bit version), so if they're using an outdated version I'm out of luck

I made sure no other symantec products were installed, have user account control turned off, and deleted the registry key, and still getting rollbacks. :/ 

Greetings Metsudragon,

As a last resort than I would try installing LiveUpdate manually first and then try installing SEP.

Copy of LiveUpdate:
ftp://ftp.symantec.com/public/english_us_canada/li...

Try downloading that and running it to see if it will install. Once it does, try running the SEP setup.

Edit: Scratch that, I just saw you tried this in your first post. I cannot think of anything else that would resolve this for you other than the newer version. Here are the release notes on it:

During installation of LiveUpdate, lucheck.exe returns an invalid error code
Fix ID: 1545886
Symptom: Installing Symantec Endpoint Protection fails as a result of an lucheck.exe error.
Solution: LiveUpdate component change.

The best suggest I can give is to get in touch with the person that provided you with your current copy and see if they can get you the 11.0.4202.x version as an install package.

^I'm thinking that might be exactly what the problem is, I'm gonna try and get in touch with my school's IT department right away, as I'm not sure what version they're using. WIll post again once I've made some headway with them 

If you are savvy enough, you can rename the .EXE to a .ZIP and extract the contents of it. Inside will be a file called SETAID.INI that you can open with Notepad, somewhere in there will be the 11.0.x.x version if you are curious.

John, I clicked on properties of setup and got this

 File Version: 12.0.0.49974

Product Name: Symantec Endpoint Protection

Product Version: 12.0.0.0

I don't know if this helps though but that's what properties returned

Unfortunately it does not, that is just the version of the Launcher that we use.

If you still have the SEP_INST.log file you can open that, hit CTRL+F to bring up the find window, and then enter 11.0. and search that. It should find numerous instances of this number that will give the version.

Did that, here's what I got

1: InstAPca.dll: ProductVersion=11.0.4202.75
 
 

Hmm...that shouldn't be happening.

From here I would suggest trying to manually remove the product using the below steps:

http://service1.symantec.com/SUPPORT/ent-security....

If that fails, I would give us a call so one of our agents can do some research with you.

We cannot rule out the possibility of a threat on this computer..Can you scan it once using NSS ( NortonsecurityScan ) fromftp://ftp.symantec.com/misc/tools/nss/
and update it with rapidreleasedefs.

Ran norton, it just found a tracking cookie which I had it fix, tried running install again and rolled back, if it helps, the rollback occurs right after "install cache"  shows up on the installer, still no luck though, I'm also using vista service pack 2

EDIT: I also have Spybot installed too, could that be messing up the installation? Gonna uninstall it and see what happens

EDIT2: Tried that, no luck, firewall's down, all other antivir programs stopped, still rollbacking right after "creating install cache"

EDIT3: Hey guys, talked to the ITS rep, it turns out the way they have the install set up, it messes up when you're using vista, and it causes rollbacks(which they know about) so basically I have to take it into their office and have them install it. -.-, thanks a lot for everyone who tried to help, and to the symantec guys, I appreciate the quick responses and staying with me when solutions continued to not work. 

I'm gonna take it into their office this evening, and I'll let you guys know if I'm successful!

1. Check if Event Log is Started and set as automatic  in services.msc. If this service is stopped, then,
2. Download eventlog.dll file and copy it in C:\WINDOWS\system32
3. Start the Event Log services and install SEP11

please supply us the "right" solution.... you post the same solutions and stil the problem is the same.... it's still rolling back....

Different Symantec Support personnel are connecting to our server remotely for the last 2 months but stil the problem hasn't been resolved yet.

They've done everything that is listed on top.... still the same problem.