Endpoint Protection

Hi

Not able to install SEP client in my one of my client machine it's rool back what may be the problem

what is the error for rollback.??

Please check the install log file for the details.

pass on the sep_inst.log located under %temp% folder

can you which version of SEP you installing in machine

which platform

Roll Back Solutions Windows xp…Customer called stating that he is trying to install SEP on

Windows XP professional SP3,32 bit and the installation rollos back.
> > > - Opened the registry and navigated to the location :HKEY_LOCALMACHINE>System>Currentcontrolset>control>Session manager\ (Highlight the SessionManager Folder)
> > > - On the right side, delete the key - "PendingFileRenameOperations"
> > > - Deleted the reboot required key from the registry:
> > >   HKEY_LOCALMACHINE>SOFTWARE>Microsoft>Windows>Current version>Windowsupdate>Autoupdate
> > > - Close the registry and try to run the Setup.
> > > - Installation is completed successfully.
> > > - Archiving the case with customer's permission..

 After do this activity also run the Cleanwipe tool to remove the all Symantec AV entry. I have attached the Clienwipe tool in the attachment.

Restart the machine and install the Symantec AV your problem will be resolved.

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

Roll back solutions windows vista and windows 7.

1) Turn of the UAC,Disabled Windows firewall and Defender from Services

2) Make sure to login as Local Administrator

3)Check the following registry entries

1.

Delete the following regkey

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionManager\PendingFileRenameOperations

NB: PendingFileRenameOperations is a key that you need to delete

2.

Browse to HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Select the Expandable String Value 'AppData' and change the value to  : %USERPROFILE%

\AppData\Roaming

3.

Go to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired

o HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Select the Expandable String Value 'AppData' and change the value to  : %USERPROFILE%

\AppData\Roaming

  After do this activity also run the Cleanwipe tool to remove the all Symantec AV entry. I have attached the Clienwipe tool in the attachment.

Restart the machine and install the Symantec AV your problem will be resolved.

<EDIT> Tool removed by Admin

Hi,

Could you please check this

Symantec Endpoint Protection installation fails with "CreateProcessAndWait( LUCHECK.EXE ) returned 206" in the installation log

http://www.symantec.com/docs/TECH96559

Actually we need more information to troubleshoot issue further.

Which Operating System you are using ?

What's the SEP client version you are trying to deploy ?

Are you trying to deploy locally or remote push ?

SEP_Inst file is being created or not ? if yes, please attach it.

Hello Baljeet ,

On Forums Cleanwipe should not be uploaded . As this may create Adverse affect on Customer' Critical Network and can affect Data loss . example machine MIGHT go out of network there is a Standard Guide line to Run this TOOL which is with Symantec Support hence Supports Look is very important in such cases Also note if this is accidently ran on Server's and if the Server crash Entire network may go down Hope this Helps!!!

Note for Original Thread Owner :- Please contact Support and get the utility and logs analysed for resolution .

Hello,

I agree with Swapnil.Please donot provide the cleanwipe on the Forums .It is a tool not supported by Symantec Technical support.

If anyone needs the cleanwipe and a query is on Forums pelase advise to contact the Tech Support team.

Hello,

Swapil,

you can take a Regestory backup and do the activity. If you don't want to run the CleanWipe tool on machine.

Do the following activity :-

Remove the Symantec AV on your system.

Please remove the all Symantec entry in your system Drive.

Delete the following entry :-

1.      c:\program files\symantec (delete it).

2.     c:\program files\comman files\symantec share (delete it).

restart the machine.

Login again.

Do the following activity

Roll Back Solutions Windows xp…Customer called stating that he is trying to install SEP on Windows XP professional SP3,32 bit and the installation rollos back.
> > > - Took a webex session.
> > > - Asked the customer to try installing the SEP client setup.
> > > - Got the error "Pending system changes that require a reboot have been detected"
> > > - Opened the registry and navigated to the location :HKEY_LOCALMACHINE>System>Currentcontrolset>control>Session manager\ (Highlight the SessionManager Folder)
> > > - On the right side, delete the key - "PendingFileRenameOperations"
> > > - Deleted the reboot required key from the registry:
> > >   HKEY_LOCALMACHINE>SOFTWARE>Microsoft>Windows>Current version>Windowsupdate>Autoupdate

Then tray to inatall Symantec AV again.

 

Roll back solutions windows vista and windows 7.

1) Turn of the UAC,Disabled Windows firewall and Defender from Services

2) Make sure to login as Local Administrator

3)Check the following registry entries

1.

Delete the following regkey

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionManager\PendingFileRenameOperations

NB: PendingFileRenameOperations is a key that you need to delete

2.

Browse to HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Select the Expandable String Value 'AppData' and change the value to  : %USERPROFILE%

\AppData\Roaming

3.

Go to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired

o HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Select the Expandable String Value 'AppData' and change the value to  : %USERPROFILE%\AppData\Roaming

 Then tray to inatall Symantec AV again.
 

Iam also agree with Ashwinny, Please dont provide the details of clenawipe in forums..

Hi Firstly try the clean wipe app, if it not work then try the third partyy s/w to remove all old registry file of SEP client.(Revo Uninstaller- Third Party S/w)

Baljeet ,

I am aware of all removal Techniques for SEP as i have worked for SEP directly , my intention has been made clear by Ashwinny .