Endpoint Protection Small Business Edition

 View Only

  • 1.  Unable to install Symantec Endpoint Protection (Rolling back action)

    Posted Mar 22, 2012 05:47 AM

    Hello,

    First i had problems with installing Because it asks continiously to reboot the computer and start the setup again.

    Now this problem is fixed, but when i install the client it says Rolling back action and need to try it another time.

    Any solutions for this?
    I tried to look around for a logfile but unable to find it.

    Regards.



  • 2.  RE: Unable to install Symantec Endpoint Protection (Rolling back action)

    Posted Mar 22, 2012 06:35 AM

    The SEP_INST.log file is located under the %temp% directory.
    See if you can find that.

    On how many machines you face this issue?

     

    Did you check for infections?

    The below tool can be used to scan and then try to install.

    ftp://ftp.symantec.com/misc/tools/nss/

     

    Let us know how it goes.



  • 3.  RE: Unable to install Symantec Endpoint Protection (Rolling back action)

    Trusted Advisor
    Posted Mar 22, 2012 01:04 PM

    Hello,

    Could you please let us know what version of SEP are you trying to Install?

    What OS is installed on the machine in issue?

    Here are few steps which you may try: 

    1. Uninstall Liveupdate from Add/Remove Programs

    2. Delete the following folders (if they exist):

    • C:\Program Files\Symantec
    • C:\Program Files\Symantec Antivirus
    • C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate

    3. Check the DCOM settings:

    http://www.symantec.com/docs/TECH100048

    4. Shut down the Windows Installer service and then re-register

    • Click Start, and then click Run.
    • In the Open box, type msiexec /unreg, and then click OK
    • When this process is complete, click Start, and then click Run.
    • In the Open box, type msiexec /regserver, and then click OK

    5. Reboot the machine

    Run the SERT LiveCD will clear that away even if there is no SEP installed on the computer. See How To Use the Symantec Endpoint Recovery Tool with the Latest Virus Definitions ( http://www.symantec.com/docs/TECH131732 )

    Also, Run a Cleanwipe Utility to make sure all the files from the previous installs are completely removed and then log as LOCAL Administrator on the machine...then run the SEP11 setup.

    Hope that helps!!



  • 4.  RE: Unable to install Symantec Endpoint Protection (Rolling back action)

    Posted Mar 23, 2012 05:04 AM
      |   view attached

    SEP Client Version 12.0.1001.95
    SPC Version 12.0.1001.95

    Windows 7 Professional 32-bit

    Thanks for your replies.

    Step 1.
    Nothing like Symtantec/LiveUpdate in the list

    Step 2
    These maps were already deleted or never have bene created

    Step 3
    Strangely when i press on the link article cannot be found

    Step 4
    Executed these steps doenst have any effect.

    Step 5
    Same issue when i press on the link Article cannot be found

    And where i can download this CleanWipe? i've readed somewere you need to make a ticket before you can get it.

    If it may help i attached the SEP_INST.LOG
     

    Attachment(s)

    rar
    SEP_INST_1.rar   120 KB 1 version


  • 5.  RE: Unable to install Symantec Endpoint Protection (Rolling back action)

    Trusted Advisor
    Posted Mar 23, 2012 12:16 PM

    Hello,

    After checking the Logs, we found the following: 

    MSI (s) (A0:BC) [09:38:52:943]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3329,Source=BinaryData,Target=UnInstallLiveUpdate,CustomActionData=C:\Users\P50B0~1.MUI\AppData\Local\Temp\QKATGGXG\LiveUpdate\lucheck.exe)

    MSI (s) (A0:BC) [09:38:52:943]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)
    Action 9:38:52: InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644. 
    MSI (s) (A0:BC) [09:38:52:943]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3073,Source=BinaryData,Target=InstallLiveUpdate,CustomActionData=C:\Users\P50B0~1.MUI\AppData\Local\Temp\QKATGGXG\LiveUpdate\lucheck.exe)
    MSI (s) (A0:04) [09:38:52:943]: Invoking remote custom action. DLL: C:\windows\Installer\MSIE64A.tmp, Entrypoint: InstallLiveUpdate
    LUCA: InstallLiveUpdate enter.
    LUCA: C:\Users\P50B0~1.MUI\AppData\Local\Temp\QKATGGXG\LiveUpdate\lucheck.exe
    LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
    CustomAction InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
    Action ended 9:39:13: InstallFinalize. Return value 3.
    MSI (s) (A0:BC) [09:39:13:273]: User policy value 'DisableRollback' is 0
    MSI (s) (A0:BC) [09:39:13:273]: Machine policy value 'DisableRollback' is 0
    .........................
    .............
    ......
    loadEventManagerDLLs: called
    serviceIsRunning: OpenService FAILED with error 1060
    LoadEvtMgrDll: ccEvtMgr is not running
    serviceIsRunning: OpenService FAILED with error 1060
    SendReload: ccEvtMgr is not running
    loadEventManagerDLLs: FAILED to send reload event
    loadEventManagerDLLs: exiting
    restoreSPState: Changing service configuration to SERVICE_DEMAND START for SPBBCSvc
    modifyServiceConfiguration: OpenService() FAILED with error 1060
    restoreSPState: Unable to modify configuration for SPBBCSvc
    restoreSPState: Value of szSPState "0"
    restoreSPState: SPState is NOT set to 1. NOT Calling startSP
    restoreSPState: exiting
     
     
    Suggestions: 
     
    1) Uninstall the Liveupdate from the Add/Remove Programs
    2) Remove the SPBBCSvc driver from Device Manager > Click on Viev > Show Hidden Devices > Under Non-Plug and Play Drivers > Search for SPBBCSvc
     
    If you don't find the above, then I would request you to follow the manual Uninstall Procedure of SEP SBE 12.1, 
     

    How to manually uninstall the Symantec Endpoint Protection Small Business Edition 12 client

    http://www.symantec.com/docs/TECH93532

    OR

    To receive the CleanWipe Tool, I would request you to Create a case with Symantec Technical Support.

    You can create a Case Online as well...

     

    QuickStart Guide - Create and Manage Support Cases in SymWISE

    http://www.symantec.com/docs/HOWTO31132

    How to update a support case and upload diagnostic files with MySupport

    http://www.symantec.com/docs/TECH71023

    Create and Manage Support Cases

    http://www.symantec.com/business/support/index?page=content&id=HOWTO31091

    Hope that helps!!



  • 6.  RE: Unable to install Symantec Endpoint Protection (Rolling back action)

    Posted Mar 27, 2012 01:22 AM

    Hi SimGrouep,

    If you are facing this issue on windows 7, vista and 2008.

    So you can disable the UAC (User Access Control).

    1. Open User Accounts by clicking the Start button , clicking Control Panel, clicking User Accounts and Family Safety (or clicking User Accounts, if you are connected to a network domain), and then clicking User Accounts.

    2. Click Turn User Account Control on or off.  If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

    3. Select the Use User Account Control (UAC) to help protect your computer check box to turn on UAC, or clear the check box to turn off UAC, and then click OK.