Issue:
Symantec Endpoint Protection Client Rolls Back During Installation
Environment:
Windows client (XP) in need of an Endpoint Protection Client in a domain with Symantec Endpoint Protection Server and other working Symantec Clients
Symptoms:
Product initially appears to be installing fine. Near the end of installation, the progress bar rolls back and the installation fails.
Solution:
I've encountered this issue a few times... Try the following in order of most to least likely:
1. Verify you are logged in as Administrator
2. If user permissions are misconfigured, try using a different Administrator account to perform the installation. For example, use the local system administrator account, or a newly created administrator account, or your backup administrator account. If this fixes your issue, you should track down why your administrator account is limited where your other accounts are not.
3. Perform a cleanup of Symantec Applications on the client:
A. Run Cleanwipe (Symantec's Installation Cleanup tool), Reboot, then try reinstalling. Select "yes" to each Cleanwipe option (Skip if cleanwipe not available)
B. Verify in Add\Remove Programs that both Liveupdate and the Client are removed.
C. Use a registry analyzer to clean Symantec References (ccleaner, for example)
D. Reboot, then reinstall the client
4. Verify that the latest root certs are on the system (obtaining from Microsoft is OK)
5. Use the Symantec Support Tool (available from the Server installation media) and run on target machine. Address any issues which this tool finds.
The following steps have not worked for me, but have come up in my research:
6. Install the latest version of Windows Installer
7. Install Liveupdate (LUSETUP.exe) before installing the client on target machine.
8. In the registry (Obligatory Warning: Backup registry before modifying it!),
Find:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
value=%APPDATA%
and change it to value=%USERPROFILE%\AppData\Roaming
9. Update Internet Explorer 6 to Internet Explorer 7
10. Perform a thorough registry check for Symantec, and be sure to remove:
HKEY_USERS\.DEFAULT\Software\Symantec [remove]
HKEY_CURRENT_USER \Software\Symantec
11. On the server, rebuild the client package and redeploy or re-run on target system
12. Verify that the correct version of the client is being installed (32bit, 64bit, etc.)
13. Click on Start, Select Run, Type: "dcomcnfg", Expand the Component Services, Expand Computers, Expand My Computer, Expand DCOM Config, Right-click LuComServer and select Properties, Click on Identity tab, Select the "This user" option and choose a Local Administrator account., Click OK, Restart the computer
Symantec Endpoint Protection Client Rolls Back During Installation
Environment:
Windows client (XP) in need of an Endpoint Protection Client in a domain with Symantec Endpoint Protection Server and other working Symantec Clients
Symptoms:
Product initially appears to be installing fine. Near the end of installation, the progress bar rolls back and the installation fails.
Solution:
I've encountered this issue a few times... Try the following in order of most to least likely:
1. Verify you are logged in as Administrator
2. If user permissions are misconfigured, try using a different Administrator account to perform the installation. For example, use the local system administrator account, or a newly created administrator account, or your backup administrator account. If this fixes your issue, you should track down why your administrator account is limited where your other accounts are not.
3. Perform a cleanup of Symantec Applications on the client:
A. Run Cleanwipe (Symantec's Installation Cleanup tool), Reboot, then try reinstalling. Select "yes" to each Cleanwipe option (Skip if cleanwipe not available)
B. Verify in Add\Remove Programs that both Liveupdate and the Client are removed.
C. Use a registry analyzer to clean Symantec References (ccleaner, for example)
D. Reboot, then reinstall the client
4. Verify that the latest root certs are on the system (obtaining from Microsoft is OK)
5. Use the Symantec Support Tool (available from the Server installation media) and run on target machine. Address any issues which this tool finds.
The following steps have not worked for me, but have come up in my research:
6. Install the latest version of Windows Installer
7. Install Liveupdate (LUSETUP.exe) before installing the client on target machine.
8. In the registry (Obligatory Warning: Backup registry before modifying it!),
Find:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
value=%APPDATA%
and change it to value=%USERPROFILE%\AppData\Roaming
9. Update Internet Explorer 6 to Internet Explorer 7
10. Perform a thorough registry check for Symantec, and be sure to remove:
HKEY_USERS\.DEFAULT\Software\Symantec [remove]
HKEY_CURRENT_USER \Software\Symantec
11. On the server, rebuild the client package and redeploy or re-run on target system
12. Verify that the correct version of the client is being installed (32bit, 64bit, etc.)
13. Click on Start, Select Run, Type: "dcomcnfg", Expand the Component Services, Expand Computers, Expand My Computer, Expand DCOM Config, Right-click LuComServer and select Properties, Click on Identity tab, Select the "This user" option and choose a Local Administrator account., Click OK, Restart the computer
