Endpoint Protection

 View Only

  • 1.  SEPprep

    Posted Aug 16, 2010 04:11 PM
    Hello,

    I'm trying to create a SEPprep package for my company's field users.  I have the client package ready.  I added the SEPprep.exe and SEPprep.ini files into the folder that contains the package.  I renamed setup.exe to SEPsetup.exe.  When I run SEPprep.exe, the uninstall goes fine.  And, it looks like the SEP client reinstall is going to go fine.  But, at the end, the installation rolls back.  The only way to get it to reinstall is to reboot the machine.  The install then kicks off automatically and runs fine.  However, I thought that the SEPprep process was supposed to allow you to uninstall and reinstall without having to reboot.  I should mention that I have nothing running during the SEPprep process.  Here is a copy of my SEPprep:


    [Settings]
    ShowGUI=N
    ShowMessageBox=N
    MessageBoxText=Prepairing your system for Symantec Endpoint Protection 11.0.  During this process other antivirus products will be removed.\n\nIf you are prompted please fully remove these products.
    AutoRunAfterUILoads=N
    AskBeforeRemoval=N
    SilentMSIInstaller=Y
    RemoveSymantec=Y
    CheckDiskSpace=Y
    ResumeAfterReboot=Y
    EnableLogging=N
    LogPath=
    RunBeforeRemoval=
    RunAfterRemoval=SEPsetup.exe

    Here is a copy of the SEPprep.log file:


    Computer Name: Computer-Laptop
    08/16/2010 15:33:49:040 SEPprep starting!
    08/16/2010 15:33:54:089 Attempting to run: SEPsetup.exe
    08/16/2010 15:38:47:758 Exit code: 3010
    08/16/2010 15:38:47:758 Symantec Endpoint Protection 11.0.6000.550 is installed.
    08/16/2010 15:38:47:758 SEPprep stopping!
    Computer Name: Computer-Laptop
    08/16/2010 15:50:41:942 SEPprep starting!
    08/16/2010 15:50:42:896 Removing: Symantec Endpoint Protection
    08/16/2010 15:50:42:896 Attempting to run: MsiExec.exe /X{7B3B4CE5-300C-4DFC-8CD1-D9C0E07015D1} REMOVE=ALL REBOOT=R /qn
    08/16/2010 15:55:06:644 Exit code: 3010
    08/16/2010 15:55:11:040 Attempting to run: SEPsetup.exe
    08/16/2010 15:57:51:091 Exit code: 1603
    08/16/2010 15:57:51:091 Symantec Endpoint Protection is NOT installed.
    08/16/2010 15:57:51:091 Added tool to current user's RunOnce key, please reboot to run tool again.
    08/16/2010 15:57:51:091 SEPprep stopping!

    Can anyone tell me if I'm doing anything wrong?  Is there a setting in the .ini file that I need to reconfigure?  Thanks!


  • 2.  RE: SEPprep

    Posted Aug 16, 2010 06:04 PM
    It most likely is do to pending file rename operations. There are going to be files that are configured to either be renamed or deleted during the reboot. As the SEP client install checks this registry value it seems that it could relate.

    If you open Start>Run and enter %temp% you will open the temporary directory. There should be a file named sep_inst.log. This is the install log for the SEP client. Open in notepad and perform a Ctrl+V and search for "value 3" without quotes. A few lines above this should show the reason for the fail to install. If you can paste this log in the forum we can take a look for you.

    Regards,



  • 3.  RE: SEPprep

    Posted Aug 17, 2010 02:03 PM
    Thanks for the response, Kurt.  I don't see an entry of "value 3" in the sep_inst.log.  Let me ask you this.  Is there a way to force an automatic reboot AFTER the "SEPprep.ini" uninstalls SEP and BEFORE it attempts to reinstall SEP?


  • 4.  RE: SEPprep

    Posted Aug 17, 2010 04:49 PM
    Never mind.  I added the following to the "RunAfterRemoval" entry in the SEPprep.ini file.  Works like a charm.


    RunAfterRemoval=reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce /v "Install SEP 11" /t REG_SZ /d "C:\SEPInst\SEPsetup.exe" /f
    RunAfterRemoval=cmd /c "md C:\SEPInst"
    RunAfterRemoval=cmd /c "xcopy *.* C:\SEPInst /e /y"
    RunAfterRemoval=shutdown -r -t 30 -f