Endpoint Protection

Hi everyone I have problem

I try to install SEP on Windows 7 machine and It rollback

I try to

• cleanwipe
• unmanage install
• install only core file
• close UAC
• use localadmin
• try both version 12.1.6 or 14.0
• didn't find windows defender service
• sfc /scannow

and it not solved problem I didn't want to re-install os is any to solve this problem ?

Information :

Windows 7 Ultimate SP1

this is result Symantec Diagnostic tool

I will upload all log

PS. I already contact with support engineer and he try to solve problem but I create topic because it maybe have someone can solve this problem too.

Attachment(s)

rollback.rar   2.48 MB 1 version

The error message in SEP_INST.log file is a generic one.

Try this:

Install SEP with only the core components. See if it installs. If so, you can add other components as needed.

I'm already try that but can't install

is anyway else ?

Thx Brian

Hi Chanon,

Have you tried using Cleanwipe to completely remove SEP, rebooting and then reinstall SEP?

There are plenty of old threads where this has been a solution for continual rollbacks.  May not be your issue, but worth a try.

Hope this helps,

Steve

Can you check where the varible TMP and TEMP are configured to?

did you mean this ?

I already tried cleanwipe and it have warn error 5 access denied but it still run and finish after that try to install SEP in the same result

the warn is

13:38:36	WARN	Could not read path of 97f42069f254f68c binary from registry. Error code: 5 (0x5): Access is denied.

I'm use localadmin and run as admin

Have you tried installing previous versions?

search this in reg , give full acess to the path its referring to.. can you run procmon to check if there are any ACCESS Denied Events,  

97f42069f254f68c

I try 12.1.6 and 12.1.7 and 14.0
 procmon is used this

https://docs.microsoft.com/en-us/sysinternals/downloads/procmon

it can't work on problem machine but on my machine is fine

I try 14.0 12.7 12.6 already

procmon am use this https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
 

it can't use on problem machine but work fine on my machine It have other procmon ?

Update :  Support tell me to do

> Create new package without definitions
> Give permissions to temp folder
> Login as Admin and try installing

I do all thing above and can't install the same rollback error

Sorry to hear that the issue still persists

can you try this by removing the shortcut..( I doubt)

https://support.symantec.com/en_US/article.TECH170259.html

what does the SIS_INST log say?

I would suggest asking support to have your case escalated.