Endpoint Protection

Need help to install SEP11 ...

Get rolling back action at the end

Did everything to disable UAC, reboot, install LiveUpdate, reboot, install SEP
No luck

Had SEP11 installed, but LiveUpdate stopped working.
So did an uninstall ...

Then used Norton Removal Tool etc.

Now re-install of SEP11 does not work as per post above.

Will appreciate any help

Is there a SEP11 removal tool ?

one of the sections in the MSI1a9c5 (SEP_log) is

LUCA: InstallLiveUpdate enter.
MSI (s) (D0:D8) [01:17:42:321]: Closing MSIHANDLE (5257) of type 790531 for thread 3800
MSI (s) (D0:D8) [01:17:42:321]: Creating MSIHANDLE (5258) of type 790531 for thread 3800
LUCA: C:\Users\ANIL~1.HP-\AppData\Local\Temp\RPJRVSPP\LiveUpdate\lucheck.exe
MSI (s) (D0:D8) [01:17:42:321]: Closing MSIHANDLE (5258) of type 790531 for thread 3800
MSI (s) (D0:D8) [01:18:10:526]: Creating MSIHANDLE (5259) of type 790531 for thread 3800
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
MSI (s) (D0:D8) [01:18:10:526]: Closing MSIHANDLE (5259) of type 790531 for thread 3800
CustomAction InstallLiveUpdate.479D9157_6569_48B2_97C9_6F35A45064AC returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (D0:E0) [01:18:10:526]: Closing MSIHANDLE (5256) of type 790536 for thread 4284
Action ended 1:18:10: InstallFinalize. Return value 3.



---

Another section with return value 3 ...

MSI (s) (D0:BC) [01:18:40:556]: Entering MsiProvideAssembly. AssemblyName: Microsoft.VC80.MFC,type="win32",version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86", AppContext: , InstallMode: -4
MSI (s) (D0:BC) [01:18:40:556]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D0:BC) [01:18:40:571]: MsiProvideAssembly is returning: 1607
MSI (s) (D0:BC) [01:18:40:961]: Note: 1: 2318 2:  
MSI (s) (D0:BC) [01:18:40:961]: Calling SRSetRestorePoint API. dwRestorePtType: 13, dwEventType: 103, llSequenceNumber: 63, szDescription: "".
MSI (s) (D0:BC) [01:18:40:977]: The call to SRSetRestorePoint API succeeded. Returned status: 0.
MSI (s) (D0:BC) [01:18:40:977]: Unlocking Server
MSI (s) (D0:BC) [01:18:41:024]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 1:18:41: INSTALL. Return value 3.

-----

Last section with Return Value 3.

Property(S): MSIRemoveWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;
Property(S): MSIRemoveWFPAppException.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;
Property(S): MSIAddWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;
MSI (s) (D0:BC) [01:18:41:460]: MainEngineThread is returning 1603
MSI (s) (D0:E4) [01:18:41:460]: User policy value 'DisableRollback' is 0
MSI (s) (D0:E4) [01:18:41:460]: Machine policy value 'DisableRollback' is 0
MSI (s) (D0:E4) [01:18:41:460]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (D0:E4) [01:18:41:460]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (D0:E4) [01:18:41:460]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (D0:E4) [01:18:41:460]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (s) (D0:E4) [01:18:41:460]: Restoring environment variables
MSI (s) (D0:E4) [01:18:41:460]: Destroying RemoteAPI object.
MSI (s) (D0:48) [01:18:41:460]: Custom Action Manager thread ending.
MSI (c) (5C:94) [01:18:41:460]: Back from server. Return value: 1603
MSI (c) (5C:94) [01:18:41:460]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (5C:94) [01:18:41:460]: PROPERTY CHANGE: Deleting SECONDSEQUENCE property. Its current value is '1'.
Action ended 1:18:41: ExecuteAction. Return value 3.
MSI (c) (5C:94) [01:18:41:460]: Doing action: SetupCompleteError
Action 1:18:41: SetupCompleteError.
Action start 1:18:41: SetupCompleteError.
Action 1:18:41: SetupCompleteError. Dialog created
Action ended 1:18:47: SetupCompleteError. Return value 2.
Action ended 1:18:47: INSTALL. Return value 3.

----

End comments ....

Property(C): MsiLogFileLocation = C:\Users\A~1.HP-\AppData\Local\Temp\MSI1a9c5.LOG
Property(C): SourcedirProduct = {530992D4-DDBA-4F68-8B0D-FF50AC57531B}
Property(C): CLIENT_LANGUAGE = English
Property(C): FEATURESTATECHANGE = 1
Property(C): OutOfDiskSpace = 0
Property(C): OutOfNoRbDiskSpace = 0
Property(C): PrimaryVolumeSpaceAvailable = 0
Property(C): PrimaryVolumeSpaceRequired = 0
Property(C): PrimaryVolumeSpaceRemaining = 0
=== Logging stopped: 7/17/2010  1:18:47 ===
MSI (c) (5C:94) [01:18:47:669]: Note: 1: 1708
MSI (c) (5C:94) [01:18:47:669]: Product: Symantec Endpoint Protection -- Installation operation failed.

MSI (c) (5C:94) [01:18:47:685]: Windows Installer installed the product. Product Name: Symantec Endpoint Protection. Product Version: 11.0.5002.333. Product Language: 1033. Manufacturer: Symantec Corporation. Installation success or error status: 1603.

MSI (c) (5C:94) [01:18:47:685]: Grabbed execution mutex.
MSI (c) (5C:94) [01:18:47:685]: Cleaning up uninstalled install packages, if any exist
MSI (c) (5C:94) [01:18:47:685]: MainEngineThread is returning 1603
=== Verbose logging stopped: 7/17/2010  1:18:47 ===


---
Thanks

Delete following folders if present
C:\Program Files\Symantec
C:\Program Data\Symantec
C:\Program Files\Symantec AntiVirus
C:\Program Files\Common Files\Symantec Shared
C:\Documents and Settings\All Users\Application Data\Symantec
 
Also delete following reg keys
HKLM\Software\symantec
HKCU\Software\symantec
Install SEP and try..

If not helps pls attach the SEP_inst.log which will be present in %temp%.Which is the OS?

Installation of Symantec Endpoint Protection Client rolls back with error LUCHECK.EXE returned 206

I did the changes you suggested above AravindKM, but that did not resolve the issue.

BTW: I have Windows 7 on my laptop as mentioned above.

Delete following folders if present
C:\Program Files\Symantec
C:\Program Data\Symantec
C:\Program Files\Symantec AntiVirus
C:\Program Files\Common Files\Symantec Shared
C:\Documents and Settings\All Users\Application Data\Symantec
      This last one is C:\ProgramData\All Users\Symantec in Windows 7
 
Also delete following reg keys
HKLM\Software\symantec
HKCU\Software\symantec
Install SEP and try..

----

ISSUE really RESOLVED by the following action :

The registry change suggested by this link, helped resolve my issue
about LUCHECK.EXE error 206

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/5c45f3798fdd78e3492575d7001f71c3?OpenDocument

Solution:

In the registry,

Find

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
value=%APPDATA%

and change it to

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
value=%USERPROFILE%\AppData\Roaming

Install SEP client again.

------------

Thanks