Endpoint Protection

 View Only
Expand all | Collapse all

Symantec AntiVirus.msi...

  • 1.  Symantec AntiVirus.msi...

    Posted May 27, 2009 11:45 PM
    Hi,

    Trying to get Symantec AntiVirus.msi setup to work on Vista, only platform we have...

    Using Symantec_Endpoint_Protection_11.0.4202_MR4, export to the installation folder, running setup.exe works perfectly but running Symantec AntiVirus.msi does not.  Need to use *.msi for pushing out the installation via GPO...

    No error message, just say, the wizard was interrupted.  Idea? Thanks in advance!

    -Benson.


  • 2.  RE: Symantec AntiVirus.msi...

    Broadcom Employee
    Posted May 28, 2009 01:11 AM
    • hi, you may look on the client machine for the sep_inst.log under %temp% folder.
    • search for the value "return value 3"  just above/below  the line there should the error why it failed.

    Cheers
    Pete!


  • 3.  RE: Symantec AntiVirus.msi...

    Posted May 28, 2009 01:13 AM
    There should be an .err error file or .log file in the directory that was just created for SEP.


  • 4.  RE: Symantec AntiVirus.msi...

    Posted May 28, 2009 04:41 AM


  • 5.  RE: Symantec AntiVirus.msi...

    Posted May 28, 2009 05:02 PM
    Thanks for all of your help...

    The entire log is very long so I only include the following, thanks:

    Property(S): ProductState = -1
    Property(S): PackageCode = {28CC52FB-8519-454F-9C84-EF99135C3EF8}
    Property(S): MsiLogFileLocation = W:\Share\Users\BBYeung\AppData\Local\Temp\MSIfdbb1.LOG
    MSI (s) (A8:20) [13:27:06:671]: Note: 1: 1708
    MSI (s) (A8:20) [13:27:06:671]: Product: Symantec Endpoint Protection -- Installation operation failed.

    MSI (s) (A8:20) [13:27:06:671]: Windows Installer installed the product. Product Name: Symantec Endpoint Protection. Product Version: 11.0.4202.75. Product Language: 1033. Installation success or error status: 1603.

    MSI (s) (A8:20) [13:27:06:671]: Cleaning up uninstalled install packages, if any exist
    MSI (s) (A8:20) [13:27:06:671]: MainEngineThread is returning 1603
    MSI (s) (A8:D8) [13:27:06:671]: Destroying RemoteAPI object.
    MSI (s) (A8:94) [13:27:06:671]: Custom Action Manager thread ending.
    MSI (s) (A8:D8) [13:27:06:671]: No System Restore sequence number for this installation.
    === Logging stopped: 5/28/2009 13:27:06 ===
    MSI (c) (B0:50) [13:27:06:671]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (B0:50) [13:27:06:687]: MainEngineThread is returning 1603
    === Verbose logging stopped: 5/28/2009 13:27:06 ===


  • 6.  RE: Symantec AntiVirus.msi...

    Posted May 28, 2009 11:48 PM
    Usually if this is the error "No error message, just say, the wizard was interrupted"

    There is a pending restart or task for the microsoft installer, setup cannot continue until these are finished.

    Before you run the setup again, please check for "msiexec" process running, then try to kill the process..

    Checking your log;

    Error Code: 1708 means "Installation operation failed."

    Error Code: 1603 means "A fatal error occurred during installation" which can lead to several cases this problem evolves around SYSTEM account permissions on the target system, free disk space on the target system, or bad file download or locked/inaccessable file.

    So based from the log, usually this is at the end. Please post more log entries before this events.




  • 7.  RE: Symantec AntiVirus.msi...

    Posted May 29, 2009 12:15 AM
    Any reason why you need to install via GPO ? You should be able to do it via a computer startup script, which runs the setup.exe on startup of the pc.

    We have modified the old SAV 10.1.5 logon script for this use and have tested it fine. SEP client installs fine and with no errors.

    Regards,

    Jon.


  • 8.  RE: Symantec AntiVirus.msi...

    Posted May 29, 2009 01:26 AM
    In the SEP-INST look for the first return value 3 and post 10 lines above it.

    Since you are using vista you should first consider this document and make sure UAC is turned off before GPO or any deployment.

    Symantec Endpoint Protection: Preparing computers that run Windows Vista for remote client deployment
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007091021513648


  • 9.  RE: Symantec AntiVirus.msi...

    Posted Jun 11, 2009 09:50 AM
    Im Having a similar problem.
    We are gradually upgrading all workstations to SEP from corporate edition 10.x  (+/- 4500 workstations) at this point I have about 1000 SEP clients and working very well.
    but sometimes the installation (pushed via sepm) just fails in the same way as explained above and the client stays working with version 10.x
    In the sep_inst.log i dont have any "return value 3"
    I do have a lot of:-
    info 1603 where dll`s are being held in use by a certain process for example ccsetmgr and at the end

    MSI (s) (28:74) [15:12:04:673]: Note: 1: 1708
    MSI (s) (28:74) [15:12:04:673]: Product: Symantec Endpoint Protection -- Installation operation failed.

    i can post the whole log if needed

    Thanks

    Gary


  • 10.  RE: Symantec AntiVirus.msi...

    Posted Jun 11, 2009 10:05 AM
    Try runnig cleanwipe and re-run the install. 


  • 11.  RE: Symantec AntiVirus.msi...

    Posted Jun 11, 2009 10:38 AM
    can i run cleanwipe remotely?


  • 12.  RE: Symantec AntiVirus.msi...

    Posted Jun 11, 2009 01:56 PM
    Well you can access the Scheduled jobs of that client by \\client name
    Add this cleanwipe as scheduled task..it will automatically run after 30 seconds.
    There are few more commands that can used for that read the readme.txt that come along with cleanwipe.zip