Endpoint Protection

Hi,

I have recently upgraded my server from Windows Server 2008R2  to Windows Server 2012.

I had an existing installation of SEP 12.1.RU2 running on this server.

However, after upgrading to Windows Server 2012 i was getting error messages inside SEP that the Firewall was malfunctioning.

Therefore i completely uninstalled SEP, rebooted the server and tried to install SEP 12.1.RU3.

Unfortunately, during installation, when it looks like is 'finishing' the installation, it's rolling back everything.

Does anyone know what can cause this issue and how i will be able to sort this out?

Thanks in advance.

Is it 2012 R2? If so, 12.1.4 is the only version to support it

Otherwise, you can post SEP_INST.log file

What logs do I need to gather in order to troubleshoot a failed SEP 12.1 client installation?

Post the SIS_inst.log please. 

_Brian, just 2012. Not R2.

Attached you can find the SEP_INST logfile (had to attach is as .txt since .log isn't supported)

Attachment(s)

SEP_INST_121.txt   2.30 MB 1 version

Have you tried cleanwipe?

Actually i haven't

I would start with cleanwipe so it can completely remove everything and try the install again

I will try it right away!

Hello,

Symantec Endpoint Protection must be completely uninstalled before upgrading the operating system. This applies to all versions of SEP. Upgrading the operating system with SEP still installed is currently unsupported due to potential issues which may arise during the upgrade.

After the operating system is migrated, SEP 12.1 may be reinstalled.

Check this Article:

Should Symantec Endpoint Protection be uninstalled from the computer before upgrading Microsoft Windows to a newer version of Windows?

http://www.symantec.com/docs/TECH197095

Hope that helps!!

_Brian, i have done the following:

-> Downloaded 12.1_RU4_CleanWipe

-> Ran CleanWipe

-> Automatic reboot by CleanWipe

-> CleanWipe continued

-> Tried installing SEP 12.1.RU3

Unfortunately it rolled back again.

Attached is the log file from the installation as well as the log file from the CleanWipe tool.

Attachment(s)

CleanWipe.txt   640 KB 1 version

SEP_INST_NEW.txt   2.20 MB 1 version

Hi,

Thanks for your reply.

Unfortunately, Windows is already upgraded

This is the SIS_inst.log

SEP_INST.log should be located in %temp% directory

Oops. Attached is the correct file.

Attachment(s)

SEP_INST_122.txt   2.19 MB 1 version

Hello,

this is the point of failure:

2013-11-14T14:44:14.903Z ERROR I SIS      openKeyImpl() failed in thal::RegistryDeleteKey()   status: 0xC0000022 = {Access Denied}  A process has requested access to an object, but has not been granted those access rights.  
2013-11-14T14:44:14.903Z ERROR I SIS        Error deleting registry key.
2013-11-14T14:44:14.903Z ERROR I SIS      Failed to delete the old key
2013-11-14T14:44:14.919Z ERROR I SIS         
2013-11-14T14:44:14.919Z ERROR I SIS        Dumping action parameters from the script:
2013-11-14T14:44:14.919Z ERROR I SIS          Key=[HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion]
2013-11-14T14:44:14.919Z ERROR I SIS          Target=[HKLM\Software\Wow6432Node\Symantec\Symantec Endpoint Protection\{E1A40A89-2B89-44FA-9E96-395B7D7F03AC}]
2013-11-14T14:44:14.919Z ERROR I SIS          Exists=[Overwrite]
2013-11-14T14:44:14.919Z ERROR I SIS          WOW64=[64]
2013-11-14T14:44:14.919Z INFO  I SIS        ExecuteScript() - Successfully set failure event.
2013-11-14T14:44:14.919Z INFO  I SIS    ExecuteScript() returning ACTION_FAILED_WITH_ROLLBACK

Try to manually delete that registry key, likely a residual of the previous installation.

Thanks Beppe!

I have removed the registry keys manually and re-installed SEP. Everything seems to be OK now!