Video Screencast Help

Symantec Endpoint Protection on Windows Server 2012

Created: 14 Nov 2013 • Updated: 14 Nov 2013 | 14 comments
This issue has been solved. See solution.

Hi,

I have recently upgraded my server from Windows Server 2008R2  to Windows Server 2012.

I had an existing installation of SEP 12.1.RU2 running on this server.

However, after upgrading to Windows Server 2012 i was getting error messages inside SEP that the Firewall was malfunctioning.

Therefore i completely uninstalled SEP, rebooted the server and tried to install SEP 12.1.RU3.

Unfortunately, during installation, when it looks like is 'finishing' the installation, it's rolling back everything.

Does anyone know what can cause this issue and how i will be able to sort this out?

Thanks in advance.

Operating Systems:

Comments 14 CommentsJump to latest comment

Brɨan's picture

Is it 2012 R2? If so, 12.1.4 is the only version to support it

Otherwise, you can post SEP_INST.log file

What logs do I need to gather in order to troubleshoot a failed SEP 12.1 client installation?

Article:TECH164067  |  Created: 2011-07-06  |  Updated: 2013-06-25  |  Article URL http://www.symantec.com/docs/TECH164067

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

yorickr's picture

_Brian, just 2012. Not R2.

Attached you can find the SEP_INST logfile (had to attach is as .txt since .log isn't supported)

AttachmentSize
SEP_INST.txt 2.3 MB
Brɨan's picture

Have you tried cleanwipe?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Brɨan's picture

I would start with cleanwipe so it can completely remove everything and try the install again

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

yorickr's picture

_Brian, i have done the following:

-> Downloaded 12.1_RU4_CleanWipe

-> Ran CleanWipe

-> Automatic reboot by CleanWipe

-> CleanWipe continued

-> Tried installing SEP 12.1.RU3

Unfortunately it rolled back again.

Attached is the log file from the installation as well as the log file from the CleanWipe tool.

AttachmentSize
CleanWipe.txt 640.13 KB
SEP_INST_NEW.txt 2.2 MB
Brɨan's picture

This is the SIS_inst.log

SEP_INST.log should be located in %temp% directory

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mithun Sanghavi's picture

Hello,

Symantec Endpoint Protection must be completely uninstalled before upgrading the operating system. This applies to all versions of SEP. Upgrading the operating system with SEP still installed is currently unsupported due to potential issues which may arise during the upgrade.

After the operating system is migrated, SEP 12.1 may be reinstalled.

Check this Article:

Should Symantec Endpoint Protection be uninstalled from the computer before upgrading Microsoft Windows to a newer version of Windows?

http://www.symantec.com/docs/TECH197095

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

yorickr's picture

Hi,

Thanks for your reply.

Unfortunately, Windows is already upgraded

Beppe's picture

Hello,

this is the point of failure:

2013-11-14T14:44:14.903Z ERROR I SIS      openKeyImpl() failed in thal::RegistryDeleteKey()   status: 0xC0000022 = {Access Denied}  A process has requested access to an object, but has not been granted those access rights.  
2013-11-14T14:44:14.903Z ERROR I SIS        Error deleting registry key.
2013-11-14T14:44:14.903Z ERROR I SIS      Failed to delete the old key
2013-11-14T14:44:14.919Z ERROR I SIS         
2013-11-14T14:44:14.919Z ERROR I SIS        Dumping action parameters from the script:
2013-11-14T14:44:14.919Z ERROR I SIS          Key=[HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion]
2013-11-14T14:44:14.919Z ERROR I SIS          Target=[HKLM\Software\Wow6432Node\Symantec\Symantec Endpoint Protection\{E1A40A89-2B89-44FA-9E96-395B7D7F03AC}]
2013-11-14T14:44:14.919Z ERROR I SIS          Exists=[Overwrite]
2013-11-14T14:44:14.919Z ERROR I SIS          WOW64=[64]
2013-11-14T14:44:14.919Z INFO  I SIS        ExecuteScript() - Successfully set failure event.
2013-11-14T14:44:14.919Z INFO  I SIS    ExecuteScript() returning ACTION_FAILED_WITH_ROLLBACK

Try to manually delete that registry key, likely a residual of the previous installation.

Regards,

Giuseppe

SOLUTION
yorickr's picture

Thanks Beppe!

I have removed the registry keys manually and re-installed SEP. Everything seems to be OK now!