Endpoint Protection

After I promote the Domain controller Win 2003 to DC. Then I do the repair Protection Manager Server and I works fine. I Deploy 150 computers without any problems. Now I cannot install the client on the DC with Protection Manager Server.

 

Please help. Thanks in advance.

 

Here is the log file SEP_INST.LOG

..on that server? Or any other Symantec AV product, like Symantec (Norton) Internet Security Suite for example?

 

Could be something going on with LiveUpdate... try running LuCheck manually and take a look in the log file... it might be running while you are trying to install?

 

MSI (s) (C8:50) [13:21:46:132]: Executing op: ActionStart(Name=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,,)
MSIASSERT - StopCcSetMgrOnOverOrBrokenInstall: Unable to stop ccSetMgr: 
MSI (s) (C8:50) [13:21:46:132]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3329,Source=BinaryData,Target=UnInstallLiveUpdate,CustomActionData=C:\WINDOWS\TEMP\JIMKWBYZ\LiveUpdate\lucheck.exe)
MSI (s) (C8:50) [13:21:46:132]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)
MSI (s) (C8:50) [13:21:46:132]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3073,Source=BinaryData,Target=InstallLiveUpdate,CustomActionData=C:\WINDOWS\TEMP\JIMKWBYZ\LiveUpdate\lucheck.exe)
MSI (s) (C8:AC) [13:21:46:148]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC8.tmp, Entrypoint: InstallLiveUpdate
LUCA: InstallLiveUpdate enter.
LUCA: C:\WINDOWS\TEMP\JIMKWBYZ\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
MSI (s) (C8:50) [13:21:55:116]: User policy value 'DisableRollback' is 0
MSI (s) (C8:50) [13:21:55:116]: Machine policy value 'DisableRollback' is 0 

Action ended 13:21:55: InstallFinalize. Return value 3. 

cpham55, Thank you for the install log, that is one of the first things someone is support should ask for when troubleshooting an install issue. When I looked at the log that you provided I see in the properties the following line: Property(S): SAVRebootPromptText = You must restart your system for the configuration changes made to [2] to take effect. Click Yes to restart now or No if you plan to restart later. When an msi install fails it dumps the properties or the configuration of the install at the time of the failure. This message tells me that we should maybe reboot and then try the install. You mentioned that you did a repair of the SEPM . This may have left the Windows Installer in a odd state. I would try rebooting and then reinstalling.

If that doesnt solve it, Then try this

---

 DeleteFolderIfNoFileExists: Driver file is not present.
DeleteFolder: FAILED to delete directory C:\Program Files\Common Files\Symantec Shared\SPBBC
DeleteFolderIfNoFileExists: SHDeleteFolder FAILED
InstSymProtect::cleanupFolder() -> DeleteFolderIfNoFileExists FAILED
MSI (s) (C8:50) [13:22:08:804]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (C8:50) [13:22:08:804]: Error in rollback skipped. Return: 5
cleanupFolder:  exiting
MSI (s) (C8:50) [13:22:08:820]: No System Restore sequence number for this installation.
MSI (s) (C8:50) [13:22:08:820]: Unlocking Server
MSI (s) (C8:50) [13:22:08:820]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 13:22:08: INSTALL. Return value 3.

---

 

 

 

 Go to the device manager and make it to show hidden devices. Uninstall the spbbcsvc if you see it.

 

Hi Everyone,

I had try all above and it is still not work. I just find out the SEP version is 11.0.2010.25 and the client I try to install is 11.0.40000.2295.

 

I thing the problem maybe I had two IP and two NIC's ?

 

Can I install the new version MR4 and will it keep all my setting? And all clients which I had manage?

Hi,

The above issue is a liveupdate issue. Thats the reason SEP is not installing.

1)Un-install Liveupdate from Add/Remove Programs.

Make sure c:\program files\Symantec\liveupdate folder is gone

And manually delete C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate

Try installing SEP.

Once SEP is installed RUn this command to register SEPM with Liveupdate

From the command prompt browse to the directory

\program files\Symantec\Symantec endpoint protection manager\bin\

and run lucatalog.exe -update.

 

2)Now if you are planning to upgrade to mr2mp1 to mr4.there will be no problems all the polcies and communication settings will be intact.

Only the program will be upgraded and all the bugs will be patched.

The only important thing is before Upgrading to MR4 make sure you dont have any client in Global and Temporary group.

As in Mr4 these 2 groups are renamed as My Company and Default.

Call in to Symantec and have them give yout he link to Cleanwipe.  Ive used this several times on computesr/servers with install issues.

 

How are you trying to install the client?  Deployment & Migration? The unmanaged search?  Id make a custom managed package just for the server(Antivirus/Antispyware only) and install it manually.

 

Another option is to run the installer with the switch /L*vx C:\Your.log and see if anything stands out in that log.

You can also use Microsoft Clean-up Utility, remove SEP client, then re-install.

Please Do not use Cleanwipe on the Server.

As it will remove the SEPM as well and it is not advised to use it on the server.

Do not use Microsoft Cleanup utility to remove any program other than ( AMS ).

If remove any program using Windows Cleanup it will only remove its entry from ADD/Remove Programs and few entries from Registry but it will not delete any files.

SAV to SEP,

I think he/she can use Microsoft Clean Up Utility, because the utility will remove installation information for programs, there might have corrupted installation setup programs.

Hi,

Where can i download the Microsoft Clean Up Utility and/or the Symantec CleanWipe?

Thanks

In order to obtain Symantec CleanWipe you must call in and make a case. They will guide you through a traditional uninstall process first, and if that doesn't work we will be able to at least log the case to better understand why. Then as a last resort they will give you the link to download cleanwipe, but really it is only a last resort.

Grant-

Hi Andre the link for the MS Clean Utility is

http://support.microsoft.com/kb/290301

As with the Symantec Cleanswipe, request it to Symantec Support.