Install wizard was interrupted before Symantec Endpoint Protection could be completely installed.

[Migration User]

Trying to install 11.0.6005.562...

Clean install of Windows Server 2008.
Ran Setup.exe as an administrator. 
Interactive Services Detection service is stopped.
Custom install with only Antivirus and Antispyware selected.
Tried installing Live Update first.  
Logged in locally, not by remote desktop. 

I do also have Backup Exec installed.  I tried uninstalling it before retrying the SEP install, but still no luck. 

Error in Event Viewer says: "The Symantec Management Client service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly."  .. even though Interactive Services Detection service is stopped and the NoInteractiveServices registry key is set to zero.

Here's the last part of the SEP_INST.LOG:

Property(S): SRTSP_SETTINGS_MIGRATE = 1

Property(S): CCSETMGR_DATAFILE = 0

Property(S): CCSETMGR_STATE = 0

Property(S): CCEVTMGR_STATE = 0

Property(S): MSIAddWFPAppException.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;

Property(S): ProductToBeRegistered = 1

Property(S): CRLF = 

 

Property(S): MSIRemoveWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;

Property(S): MSIRemoveWFPAppException.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;

Property(S): MSIAddWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;

MSI (s) (B4:98) [16:14:55:585]: MainEngineThread is returning 1603

MSI (s) (B4:B8) [16:14:55:586]: No System Restore sequence number for this installation.

MSI (s) (B4:B8) [16:14:55:587]: User policy value 'DisableRollback' is 0

MSI (s) (B4:B8) [16:14:55:587]: Machine policy value 'DisableRollback' is 0

MSI (s) (B4:B8) [16:14:55:587]: Incrementing counter to disable shutdown. Counter after increment: 0

MSI (s) (B4:B8) [16:14:55:587]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 

MSI (s) (B4:B8) [16:14:55:588]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 

MSI (s) (B4:B8) [16:14:55:589]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1

MSI (s) (B4:B8) [16:14:55:590]: Restoring environment variables

MSI (s) (B4:B8) [16:14:55:592]: Destroying RemoteAPI object.

MSI (s) (B4:EC) [16:14:55:592]: Custom Action Manager thread ending.

MSI (c) (50:24) [16:14:55:595]: Back from server. Return value: 1603

MSI (c) (50:24) [16:14:55:596]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1

MSI (c) (50:24) [16:14:55:596]: PROPERTY CHANGE: Deleting SECONDSEQUENCE property. Its current value is '1'.

Action ended 16:14:55: ExecuteAction. Return value 3.

MSI (c) (50:24) [16:14:55:597]: Doing action: SetupCompleteError

Action 16:14:55: SetupCompleteError. 

Action start 16:14:55: SetupCompleteError.

Action 16:14:55: SetupCompleteError. Dialog created



Please give me a solution or the CleanWipe tool to just start over. 
 

[Migration User]

In the log file search for return value 3 and paste 5-6 lines before that.

[Migration User]

That is included in what I pasted into the original post above. 

[Migration User]

Is that the only instance you have in the log?

[Migration User]

Sorry about that, here are a few more:

MSIRESULT PASS - ccMSIUtil::GetSettingsFromFile: strFileName == 'C:\Users\ADMINI~1\AppData\Local\Temp\CCI1992.tmp': 

2010-06-11-17-08-00-567 : ccSym::CInstanceFactoryImpl::addFactory(1036) : Registered factory for {740AB61D-8B4A-46CC-9D82-86F72E055477} (use count 1)

2010-06-11-17-08-00-568 : ccSym::CInstanceFactoryImpl::addFactory(1036) : Registered factory for {9958D891-C319-4C6C-BEB9-F9BFB37EA493} (use count 1)

2010-06-11-17-08-00-568 : ccSym::CInstanceFactoryImpl::addFactory(1036) : Registered factory for {3F05A321-43B7-4578-93C8-CDC5F64A149A} (use count 1)

2010-06-11-17-08-00-569 : ccSym::CInstanceFactoryImpl::addFactory(1036) : Registered factory for {31324564-3B13-4533-8999-33990688F5A9} (use count 1)

MSIRESULT PASS - WriteServiceEntries: No configurations found.: 

MSI (s) (48:34) [17:08:00:571]: Executing op: ActionStart(Name=StartCCEvtMgr,Description=Starting services,)

Action 17:08:00: StartCCEvtMgr. Starting services

MSI (s) (48:34) [17:08:00:572]: Executing op: CustomActionSchedule(Action=StartCCEvtMgr,ActionType=1025,Source=BinaryData,Target=StartCCEvtMgr,)

MSI (s) (48:30) [17:08:00:577]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9483.tmp, Entrypoint: StartCCEvtMgr

MSI (s) (48:34) [17:08:00:584]: Executing op: ActionStart(Name=DefInstallCARol.6CA3616B_58CE_4E58_BA05_8281C7ACF9BB,,)

Action 17:08:00: DefInstallCARol.6CA3616B_58CE_4E58_BA05_8281C7ACF9BB. 

MSI (s) (48:34) [17:08:00:586]: Executing op: CustomActionSchedule(Action=DefInstallCARol.6CA3616B_58CE_4E58_BA05_8281C7ACF9BB,ActionType=1281,Source=BinaryData,Target=DefInstallRollbackCA,)

MSI (s) (48:34) [17:08:00:588]: Executing op: ActionStart(Name=DefInstallCA.6CA3616B_58CE_4E58_BA05_8281C7ACF9BB,,)

Action 17:08:00: DefInstallCA.6CA3616B_58CE_4E58_BA05_8281C7ACF9BB. 

MSI (s) (48:34) [17:08:00:590]: Executing op: CustomActionSchedule(Action=DefInstallCA.6CA3616B_58CE_4E58_BA05_8281C7ACF9BB,ActionType=1025,Source=BinaryData,Target=DefInstallCA,)

MSI (s) (48:24) [17:08:00:596]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9493.tmp, Entrypoint: DefInstallCA

MSIASSERT - DefInstallCA: Failed to load ccInst64.dll. symRes=0x80010300: 

Action ended 17:08:00: InstallFinalize. Return value 3.

--------------------------------------------------------------------
--------------------------------------------------------------------


Microsoft.VC80.ATL,type="win32",version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86", AppContext: , InstallMode: -4

MSI (s) (48:34) [17:08:18:888]: Pathbuf: 0, pcchPathBuf: 0

MSI (s) (48:34) [17:08:18:894]: MsiProvideAssembly is returning: 1607

MSI (s) (48:34) [17:08:18:894]: Entering MsiProvideAssembly. AssemblyName: Microsoft.VC80.ATL,type="win32",version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86", AppContext: , InstallMode: -4

MSI (s) (48:34) [17:08:18:894]: Pathbuf: 0, pcchPathBuf: 0

MSI (s) (48:34) [17:08:18:899]: MsiProvideAssembly is returning: 1607

MSI (s) (48:34) [17:08:18:939]: Entering MsiProvideAssembly. AssemblyName: Microsoft.VC80.ATL,type="win32",version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64", AppContext: , InstallMode: -4

MSI (s) (48:34) [17:08:18:939]: Pathbuf: 0, pcchPathBuf: 0

MSI (s) (48:34) [17:08:18:944]: MsiProvideAssembly is returning: 1607

MSI (s) (48:34) [17:08:18:945]: Entering MsiProvideAssembly. AssemblyName: Microsoft.VC80.ATL,type="win32",version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64", AppContext: , InstallMode: -4

MSI (s) (48:34) [17:08:18:945]: Pathbuf: 0, pcchPathBuf: 0

MSI (s) (48:34) [17:08:18:950]: MsiProvideAssembly is returning: 1607

MSI (s) (48:34) [17:08:18:977]: No System Restore sequence number for this installation.

MSI (s) (48:34) [17:08:18:977]: Unlocking Server

MSI (s) (48:34) [17:08:18:979]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.

Action ended 17:08:18: INSTALL. Return value 3.

--------------------------------------------------------------------
--------------------------------------------------------------------

Property(S): MSIAddWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;

MSI (s) (48:34) [17:08:19:276]: MainEngineThread is returning 1603

MSI (s) (48:10) [17:08:19:277]: No System Restore sequence number for this installation.

MSI (s) (48:10) [17:08:19:278]: User policy value 'DisableRollback' is 0

MSI (s) (48:10) [17:08:19:278]: Machine policy value 'DisableRollback' is 0

MSI (s) (48:10) [17:08:19:278]: Incrementing counter to disable shutdown. Counter after increment: 0

MSI (s) (48:10) [17:08:19:278]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 

MSI (s) (48:10) [17:08:19:279]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 

MSI (s) (48:10) [17:08:19:280]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1

MSI (s) (48:10) [17:08:19:280]: Restoring environment variables

MSI (s) (48:10) [17:08:19:282]: Destroying RemoteAPI object.

MSI (s) (48:5C) [17:08:19:282]: Custom Action Manager thread ending.

MSI (c) (A8:B4) [17:08:19:284]: Back from server. Return value: 1603

MSI (c) (A8:B4) [17:08:19:284]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1

MSI (c) (A8:B4) [17:08:19:285]: PROPERTY CHANGE: Deleting SECONDSEQUENCE property. Its current value is '1'.

Action ended 17:08:19: ExecuteAction. Return value 3.

--------------------------------------------------------------------
--------------------------------------------------------------------







MSI (c) (A8:B4) [17:08:19:286]: Doing action: SetupCompleteError

Action 17:08:19: SetupCompleteError. 

Action start 17:08:19: SetupCompleteError.

Action 17:08:19: SetupCompleteError. Dialog created

Action ended 17:08:21: SetupCompleteError. Return value 2.

Action ended 17:08:21: INSTALL. Return value 3.

--------------------------------------------------------------------
--------------------------------------------------------------------


During the install, it always starts rolling back during "Configuring Services" so I'm pretty sure it has something to do with that interactive services error in my event logs.  

I also failed to mention in the original post that I did disable UAC, and that didn't help. 

Thanks,
...Josh

[Migration User]

Copy the Install package to the client then right click it and Run -as -Administrator
https://www-secure.symantec.com/connect/forums/sep-version-1105002333-new-windows-7-client-symantec-management-client-service-wont-start

[Migration User]

 I've already tried that. --I'm trying to install an unmanaged client from the original install media.  (Right clicked as administrator and with UAC turned off)

[Migration User]

Ok..then have you tried right-clicking on the Symantec Antivirus.msi and running it as Administrator ?
Do you get the same error when doing that..and I also beleive this is 64 Bit client so are you running SEP64\Symantec Antivirus.msi ?

[Migration User]

Yes, I've tried both the Setup.exe and the SymantecAntivirus.msi in the SEP64\x64\ directory.

[Migration User]

1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 

MSI (s) (48:10) [17:08:19:279]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 

With which account are you trying the install,

try the local admin

[Migration User]

Yes, I am logging in with the local Administrator account.

[Migration User]

I think this is the key:

MSIASSERT - DefInstallCA: Failed to load ccInst64.dll. symRes=0x80010300: 

Action ended 17:08:00: InstallFinalize. Return value 3.

See this doc:

Symantec Endpoint Protection (SEP) will fail to install if Backup Exec System Recovery 2010 is already installed.
http://seer.entsupport.symantec.com/docs/340154.htm

In the registry, try setting Full Control permission to the HKLM\SOFTWARE\Wow6432Node\Symantec\ hive for the Administrators group. 

[ edited to correct registry path, and also, back up registry before making any changes. ]

sandra

[Migration User]

Cool, the BESR thing could be it, however I'm getting "Access Is Denied" when I try to give Full Control permission to Common Client and InstalledApps in the Symantec hive of the Registry. 

Is there a way to force LiveUpdate to install SP1 of Backup Exec?

[Migration User]

I can't think of a way to force a software download via LU--LU should download and install what's available for the products associated with it. (I don't support BE.)

sandra

[Migration User]

I don't think that there is a way  to get  Back Exec  installed via LU

[Migration User]

The document above says the update is delivered that way.  I suppose it's possible the document is incorrect.

[Migration User]

I think I found the BESP SP1 patch here: 
http://seer.entsupport.symantec.com/docs/347749.htm

I'm giving it a try now...

[Migration User]

No Luck :(  
It upgraded BESR to SP1 (9.0.1.36527) and reboot, but then the SEP install still failed.  I still can't edit those registry keys. 

[Migration User]

Check the permission on the key above and check which user has permission for that keyy..try logging in as that user...or try taking ownership of the reg key and then try to apply your account permission on the key....plz ignore if have already tried that..

[Migration User]

Just the Administrators group has permissions for the key above it, and I am logged in as an administrator.  I added my username to the list and gave it full control of the Symantec parent, but CommonClient and InstalledApps still give me Access Denied even if I just click on them.

[Migration User]

I would like to get the CleanWipe utility and try that, but that is turning out to be a world of hurt also:
https://www-secure.symantec.com/connect/forums/endpoint-removal-tool#comment-1786851
--

I found this, but it looks about 2 years out-of-date.
https://www-secure.symantec.com/connect/forums/how-get-clean-wipe

---
The "My Support" site wants a Technical Contact ID or 2 other things that I have no idea what they are or where to find them.  I have a customer number, order number, serial number, but not technical numbers or case numbers.  ???

Can any of you please send me the CleanWipe utility?  Please?    

[Migration User]

Please call support on your local support number and ask them for Clean wipe

http://www.symantec.com/business/support/contact_techsupp_static.jsp

[Migration User]

Ran CleanWipe, re-tried SEP install... failed.
Uninstalled Backup Exec, Deleted all registry keys in HKLM\SOFTWARE\Wow6432Node\Symantec\, ran clean wipe again, tried SEP install again.... failed. 

Installation log is attached.  

Attachment(s)

SEP_INST.LOG__1.txt   10.17 MB 1 version

[Migration User]

If you contact Customer Care, they should be able to provide you what you need to use MySupport.

http://www.symantec.com/business/support/assistance_care.jsp

Unfortunately CleanWipe is only available through Support.  It is not recommended to use an old version.

There are manual removal instructions if all else fails.

Title: 'Manual uninstallation documents for Symantec Endpoint Protection'
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009102111584948

sandra

[Migration User]

I tried deploying it from the deployment wizard, and I got this error box that pops up "Symantec CMC SmcGui has stopped working"  Here are the problem details it lists:

Problem signature:

  Problem Event Name: APPCRASH

  Application Name: SmcGui.exe

  Application Version: 11.0.6005.440

  Application Timestamp: 4bc92f50

  Fault Module Name: kernel32.dll

  Fault Module Version: 6.0.6002.18005

  Fault Module Timestamp: 49e041d1

  Exception Code: c06d007e

  Exception Offset: 00000000000176fd

  OS Version: 6.0.6002.2.2.0.272.7

  Locale ID: 1033

  Additional Information 1: 3149

  Additional Information 2: d243f0d209381e65e9a1aacb23676488

  Additional Information 3: 2b45

  Additional Information 4: de2012f0c90811c460408c8b7d90ae02
-----
Tried the solutions here with no luck:
https://www-secure.symantec.com/connect/forums/symantec-cmc-smcgui-has-stopped-working
---

[Migration User]

Are you still having problems with permissions on that registry hive?  I have no problems opening the permissions pane for HKLM\Software\Symantec (I'm on a 32-bit machine), and Administrators has full control.

sandra

[Rafeeq]

please check if you have installed any additional software which blocks writting to registry; most of the times this is done on dc's

run testsec.bat from symantec.

this will give you any issues with permissions.

 

[Migration User]

Everything under Wow6432Node was deleted with no problem.  It was HKLM\SOFTWARE\Symantec that I'm getting Access Denied on "Common client" and "InstalledApps."  (I'm on a 64-bit machine)

[Migration User]

It seems trying to delete registry keys was just to solve the Backup Exec conflict, but since installing the Service Pack 1 to Backup Exec that conflict shouldn't exist, so should I even be trying to delete registry keys?  I tried reinstalling Backup Exec and it failed so I just did a full system restore instead, but it made me weary of deleting things in the registry if it's not necessary.  

I think it's time to just give up and try McAfee or Eset. 

[Rafeeq]

use process-xp to find out the thread which is blocking the access;
right click on registry and add your account; check if you are able to delete it
run the install again.