Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

  • 1.  Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

    Posted Oct 07, 2009 05:42 PM

    Hello all! Have about 15 pcs that I am testing SEP ver 11.0.4 on.
    I upgraded the SEP server to latest version 11.0.5 with no problems. When I try to update a 11.0.4 clients I get the mesage listed in the Title.

    Those clients were previously running Symantec Antivirus 10.1.7.7000. When I rolled out SEP 11.0.4 to those clients, I had no issues with the upgrade.

    Now, if I run CleanWipe and remove the 11.0.4 version, and then reinstall Symantec AV 10.1.7.7000 and then push 11.0.4 to a client, then..the 11.0.5 upgrade works.

    If I just push 11.0.5 to a client running Symantec AV 10.1.7.7000 the upgrade works fine. I am confused on this and hesitant to roll this out to 300+ clients fearing that when SEP has a newer version, I wll get the same error than too. Any ideas or thoughts on this.

     



  • 2.  RE: Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

    Posted Oct 07, 2009 05:59 PM
     Make sure you have exported the right package .for the right version..
    There hasn't been any issues reported about upgrading from MR4 to MR5.

    upgrade SEPM. assign MR5 package on the group it should upgrade fine.
    you can test it out with a group of 3-4 computers put it in a group n assign the package.

    admin-install packages-upgrade groups with package


  • 3.  RE: Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

    Posted Oct 07, 2009 07:07 PM
    Thank you for the reply! I have tried multiple ways of upgrading MR4 to MR5. I tried assigning the new package to a group, directly running the setup.exe and directly running the msi install. All with the same result.

    I am wondering if it has something to do with SAV 10 being installed on the clients via GPO msi install? I guess I can test that. I just reinstalled SAV 10 with the setup.exe ( no GPO install) and upgraded to MR4 and then to MR5 with no problem.

    I just dont want to have to run CleanWipe on these machines in order to install MR5.


  • 4.  RE: Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.
    Best Answer

    Posted Oct 08, 2009 01:45 AM
    Hi Rich,

    You are exactly right. Because the old SAV was installed via GPO there are going to be issues upgrading to a newer version of SEP. If I am correct the install log will have errors for SAV10 Unsinstallfix. Please check this kb article that describes the issue and solution: http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/b5f7f8feb34f49be8025757c0078ebaa?OpenDocument

    Cheers
    Grant


  • 5.  RE: Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

    Posted Oct 08, 2009 11:35 AM
    Thank you for the reply!!
    The article states a manual push of the upgrade works. It doesnt however.
    Just to make sure I am looking at the correct log...its on the SEPM server in c:\temp folder..right? sep_inst.log
    Thank you again!


  • 6.  RE: Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

    Posted Oct 08, 2009 11:39 AM
     its not c:\temp its start -run %temp%


  • 7.  RE: Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

    Posted Oct 08, 2009 12:16 PM
    Okay, looked into that a little further. What is happening is I initially install MR4 over SAV10, no problem...BUT we still have an active GPO SAV 10 install.
    So when that client refreshes its policy and reboots, it trys to install SAV10 again, but it fails because SEP is there. Like the article stated a instance of that msi install exists on the client..so when MR5 trys to install..it fails.
    I am going to deny that SAV10 GPO on a client just running SAV10. .and then upgrade to MR4 and then MR5..Hopefully that should do it.
    Of course when I do roll this out to all I am going to just disable that GPO.


  • 8.  RE: Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

    Posted Oct 08, 2009 12:32 PM
    I would rather deploy this via GPO msi, I have it configured and it works..but it takes 15-18 mins for the entire process...so the user is waiting for 15 min to log in. It looks like the install removes SAV10 and then install SEP and then performs a scan. The login screen doesnt come up until that scan completes. Is that amount of time normal? The actual install looks like it takes about 12-13 mins. If I should start another thread ..I can.


  • 9.  RE: Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

    Posted Oct 08, 2009 04:28 PM
    Hey Rich, that’s exactly how I did it to 1300 machines.. small price to pay I figured but some users complained it to took too long powered off PC's in the middle etc, etc.

    The question comes after you have installed everyone this way what do you do when the next version comes along?  I deployed 11.0.4 via GPO thinking I would only have to do it once.. now I need to do the same with 11.0.5 not more then a month later.  I might have a revolt on my hands!  :)


  • 10.  RE: Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

    Posted Oct 08, 2009 05:17 PM
    I hear you!! When you rolled it out with GPO, did you have an major issues with users shutting off their pc during the install and if so, what were the issues if any and how did you resolve? Just manual fixing?
    Thanks!!
    I thought GPO install seemed like a long msi install! Thought maybe I set something up wrong.


  • 11.  RE: Product: Symantec AntiVirus -- A newer version of this software is already installed on this machine.

    Posted Oct 09, 2009 12:04 PM
    If you’re going to go this route, watch out for these:
     
    1.       I wrapped the package up to “install with reboot”, sometimes it obeyed.. sometimes it didn’t. Sometimes it waited for the user to log on then unceremoniously dumped them and booted.
    2.       Uninstall password.. some of our SAV9 locations were originally deployed requiring a password for uninstall. The GPO was defeated by this.. Anyone have a work around out there BTW?
    3.       No support whatsoever, despite just signing the big contract when I contacted support on this as soon as I mentioned GPO I was read the party line that it is a MS product and no support was offered on my reboot issues.
    4.       We had dozens of busted ms clients out there so a lot of the troubleshooting involved removing ms client, removing from the domain.. re-installing, re-adding, but that isn’t AV related.
    5.       I was astounded by the number of clients we had that either didn’t have IE5 installed or the installer, watch out for that.
     
    The skilled individuals that shut their machine down in the middle of it sometimes need a cleanwipe but I suspect the majority just received the package again the next reboot and we never heard from them.

    Anyone else out there manage to do this any smoother them me? I would love to hear the story! 

    All said and done, for the 1300 machines we did the helpdesk received very few calls.. the problems came after when it started discovering items ignored for years.